Privacy policy

This policy explains what personal data we collect on eutology.com and shop.eutology.com, why, and what your rights are. We collect as little as we can: there are no shop accounts, no advertising and no tracking.

Who is responsible

The data controller is:

Eutology Ltd
128 City Road
London EC1V 2NX
United Kingdom
Company number 17297941, registered in England and Wales
Email: [email protected]

For any privacy question or request, write to [email protected].

What we collect, and why

• When you order: your name, email address and country, the books you bought, the price, and the time you accepted the terms and consented to immediate delivery. We need these to perform the contract (deliver your books and let you download them again), to calculate VAT, and to keep the accounting records the law requires. Legal basis: performance of a contract and legal obligation.
• Payment: once card payments are live, they will be processed by our payment provider, who collects your card details directly; we never see or store them. We receive only a confirmation and a payment reference.
• Technical data: like every website, our servers record your IP address, browser and the pages requested, in security logs kept for up to 30 days, and your IP address with each order to prevent fraud. Legal basis: our legitimate interest in running a secure service.
• When you email us: your message and address, to answer you. Legal basis: legitimate interest, or steps before a contract.

We do not sell your data, send marketing without asking, or make automated decisions about you.

Who else processes it

• Cloudflare, Inc. — network delivery and protection for all traffic to our sites.
• Our hosting provider — the servers the sites and their database run on.
• A payment provider — once card payments are live; we will name it here.

Our fonts, scripts and images are served from our own servers, so loading a page does not send your data to font or analytics services. Where a processor handles data outside the UK or the European Economic Area, the transfer is covered by standard contractual clauses or an adequacy decision.

How long we keep it

• Orders and invoices: for as long as tax and accounting law requires (typically six to ten years), then deleted.
• Server logs: up to 30 days.
• Emails: as long as needed to deal with your request, and at most two years after the last exchange.

Your rights

You may ask for a copy of your data, have it corrected or erased, restrict or object to its use, and receive it in a portable format. Some order data must be kept for legal reasons even if you ask us to erase it; we will tell you when that applies. Write to [email protected]; we answer within one month.

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or, if you live in the European Union, to the data protection authority of your country.

Cookies

We only use cookies that are strictly necessary for the site to work. See our cookie policy.