Privacy Policy

Here at Dogberry & Finch Books we take your privacy seriously – collecting only the data we need to be able to provide you with our services. We do not share your data with any other organisations, and make every effort to ensure that the data we hold is kept secure.

What personal data we collect and why we collect it:

Buying from Our Shop

When you visit our shop checkout, we collect your order details, billing and delivery information, and any other contact details that you provide us with. This information is collected solely for the purposes of processing your order.

Payment Details

This site does not collect or hold any card details. All payments are processed externally to our site, by PayPal (their privacy policy is available at: https://www.paypal.com/en/webapps/mpp/ua/privacy-full) or Stripe (their privacy policy is available at: https://stripe.com/gb/privacy).

Comments & Reviews

If you leave comments or reviews on our website, we collect the data shown in the comments form, and also your IP address and browser user agent string to help with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Contact Forms

If you use a contact form on our website, your name, email address and message are sent directly to us in the form of an email from the website. We will then hold this information for the purposes of replying to your message, and for any continuing correspondence.

Email Subscriptions

The email Subscription service on this site is provided by Automattic under their WordPress.com brand. Their privacy policy can be found here: https://automattic.com/privacy/. To set up and process subscriptions, they use the subscriber’s email address, as well as the ID of the post or comment (if you subscribe by ticking one of the boxes at the bottom of a particular post).

In the event of a new subscription being initiated, they also collect some basic server data, including all of the subscribing user’s HTTP request headers, the IP address from which the subscribing user is viewing the page, and the URL which was given in order to access the page. This server data is used for the exclusive purpose of monitoring and preventing abuse and spam.

Users of our email subscription service can unsubscribe at any time by clicking the link in the footer of any email received via the service, or by contacting us using the email account that they wish to be unsubscribed.

Accounts

If you create an account on our website, your username and email address will be stored in the site database. Passwords are converted to an anonymized string (also called a hash), through the use of a one-way encryption algorithm, and it is only this anonymized string that is securely stored by the site. The password itself cannot be accessed, or re-created from the hash – by us or anybody else. The website also stores any other personal information that you provide in your user profile. You can see, edit, or delete your personal information at any time. Our website administrators can also see and edit that information.

Cookies

Functional Cookies

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Analytics Cookies

Our site does not set any analytics cookies.

Marketing Cookies

We do not directly set any marketing cookies. However, Third Party content embedded within our site may set additional cookies for their own marketing purposes. Pages on this site may include embedded content (such as Google Maps or Vimeo videos). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account (such as a Google or Vimeo account) and are currently logged in to that account in your web browser. Third Party cookies can be disabled in your web browser in the privacy section of the browser’s settings – for instructions on how to do this in the most popular browsers, visit the providers’ support sites: Google Chrome, Apple Safari, Mozilla Firefox or Microsoft Edge.

Security and Spam Protection

This site employs software to protect against unauthorised login, spam and other malicious activity. Where malicious activity is detected, the IP address from which it originated will be stored.

How long we retain your data

If you leave a comment or review, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

If you provide us with your contact details or other information, we will retain it indefinitely, unless you have specifically requested otherwise or until such time as you request that it is removed. During the time that we retain your details, we will use them only for the purpose(s) for which you gave your consent – such as corresponding over a question or request, receiving news updates, or for processing orders from our shop.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

This site is hosted on a secure server situated within the UK. Information provided when you sign up to the email subscription service may be held by Automattic on servers outside the UK, where it is safeguarded to the same standards as if the data was held within the UK – see: https://automattic.com/privacy/

Your contact information, and information for processing your orders may also be held securely in our own computer and paper records systems or cloud storage.

How we protect your data

This site employs https and, as such, any data you exchange with the site is transmitted over a secure, encrypted connection – details of our security certificate can be viewed by clicking on the symbol to the left of our website address in your browser address bar. Access to data held within the site, within our own computer systems and cloud storage, or within our account with Automattic (the providers of the email subscription service) is password-protected and subject to additional layers of security.

What data breach procedures we have in place

If we suspect that there has been any unauthorised access to, or disclosure of, the personal data we hold, we will immediately inform anyone who we believe may have been affected.

Our contact information

For any matter related to privacy or the storage and processing of personal data, please contact us using the details below.