Privacy Policy

Who we are

Cupid's Bow Ltd (Companies House number: 17109951) operates this website at https://cupidsbowbooks.co.uk. We are the data controller for personal data collected through this website.

Our registered office address is: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.

For all privacy-related enquiries, please contact us at cupidsbowcoventry@gmail.com.

We are registered with the Information Commissioner's Office (ICO). Our registration number is ZC152755.

What personal data we collect

We may collect the following personal data when you use this website:

• Your name and email address, when you submit the contact form
• Your email address, when you subscribe to our mailing list
• Your name, email address and telephone number, when you place a pre-order
• A record of what you pre-ordered, what you paid, and the status of that order

We never see or store your card details. When you pre-order, your card details are collected directly by Square within their own secure payment form and are not accessible to us. We keep only a reference to the payment so we can match it to your order and issue a refund if you cancel.

How we use your personal data

Contact form

When you submit the contact form, your name, email address, and message are delivered directly to us by email. We use this information solely to read and respond to your enquiry. Your submission is not stored on our servers.

Lawful basis: legitimate interests — you have contacted us and we have a legitimate interest in responding to your enquiry.

Mailing list

When you subscribe, we store your email address and use it to send you updates about new events, blog posts, and news from Cupid's Bow Books. You can unsubscribe at any time using the link in any email we send you, at which point your email address is deleted immediately.

Lawful basis: consent — you have actively opted in, either by completing the subscribe form or by ticking the optional box at checkout. That box is never ticked for you, and whether you tick it makes no difference to your order.

Pre-orders

When you pre-order a book, we store your name, email address, telephone number, what you ordered, the amount paid and the status of the order. We use your email address and telephone number to confirm the order, to tell you when your book has arrived, and to contact you about collection or cancellation.

Lawful basis: performance of a contract — we need this information to fulfil the order you have placed with us.

We also keep a record of the order to meet our legal obligations around tax and accounting, and to handle any cancellation, refund or complaint. Lawful basis for that retention: legal obligation, and our legitimate interest in keeping accurate records of sales.

How long we keep your data

• Contact form submissions are not stored by us beyond delivery to our email inbox.
• Subscriber email addresses are held until you unsubscribe, at which point your record is permanently deleted.
• Pre-order records are kept for six years from the end of the financial year in which the order was placed, which is the period we are required to retain transaction records for tax purposes.

Who we share your data with

We use the following third-party services which may process your personal data:

Google Analytics (GA4): we use Google Analytics to understand how visitors use our site, such as which pages are visited and how people navigate. This data is anonymous and aggregated. Google Analytics is only loaded if you accept analytics cookies via our cookie banner.

Google reCAPTCHA v3: we use reCAPTCHA on our contact, subscribe, pre-order and cancellation forms to protect against automated spam. reCAPTCHA analyses device and browser signals and sends them to Google for risk assessment. This processing is essential to the secure operation of our forms and occurs regardless of your analytics cookie preference.

Square: when you pre-order, Square processes your card payment on our behalf. Your card details are entered directly into Square's own secure form and are never accessible to us. We pass Square your name, email address and telephone number so that your order can be identified and, if necessary, refunded. Square is our payment processor and handles this data under its own privacy notice.

We do not sell, rent, or otherwise share your personal data with any other third parties.

International data transfers

Google Analytics and Google reCAPTCHA are operated by Google LLC, which is based in the United States. Data processed by these services may be transferred to and stored in the US. Google participates in the EU–US Data Privacy Framework, which provides appropriate safeguards for international transfers.

Square is operated by Block, Inc., which is also based in the United States. Payment and order data processed by Square may be transferred to and stored in the US under the safeguards set out in Square's own privacy notice and data processing terms.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• The right to access a copy of the data we hold about you
• The right to rectification if your data is inaccurate or incomplete
• The right to erasure (the "right to be forgotten")
• The right to restrict how we process your data
• The right to data portability
• The right to object to our processing of your data

To exercise any of these rights, please contact us at cupidsbowcoventry@gmail.com. We will respond within one month.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection supervisory authority. You can reach the ICO at ico.org.uk or by calling 0303 123 1113.

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO, so please get in touch with us first.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page.