Privacy Policy

Daisy Books is the data controller for personal data collected through this website. You can contact us about anything in this policy at privacy@daisy-books.com.

• Author submissions — when you submit a book through our author form we collect your name, email address, optional phone number and website, the details of your books, cover images and your answers to our submission questions.
• Orders — when you place an order we collect your name, email address, delivery address and any note you add, along with the books you ordered. If you cancel or return an order, we also keep when you did and any reason you give. Your order reference shows only the books, total and status, never your details.
• Suggestions — if you use our suggestion form we collect the author or book you suggest, your comments and, if you choose to give them, your name and email address.
• Data requests — if you use our data request form we collect your name, email address and any details you give us.
• Emails — if you email us, we receive your email address and whatever you write.
• Anonymous analytics — if you accept it, Vercel Web Analytics counts visits and which pages are popular. It uses no cookies, doesn't store your IP address and doesn't identify you. See our cookie policy.
• Preferences stored on your device — your chosen currency and basket contents are kept in your browser's local storage and are never sent to us.

• Reviewing author submissions and stocking books — to take steps at your request before entering into an agreement with you (Article 6(1)(b)).
• Handling orders, cancellations and returns — to take steps at your request to sell and deliver your books, and to perform our contract with you (Article 6(1)(b)).
• Keeping sales records — to meet our legal obligations under UK tax law (Article 6(1)(c)).
• Replying to emails — our legitimate interest in answering your questions (Article 6(1)(f)).
• Reviewing suggestions — our legitimate interest in finding books to stock and, if you leave an email, letting you know the outcome (Article 6(1)(f)).
• Answering data requests — to meet our legal obligations (Article 6(1)(c)).
• Anonymous analytics — your consent, given through our cookie banner (Article 6(1)(a)). You can withdraw it at any time from “Cookie settings” in the footer.

We never sell your personal data or use it for advertising.

We only share personal data with service providers who process it on our behalf under a data processing agreement:

• Supabase — database, file storage and authentication.
• Vercel — hosting the site and, if you accept it, anonymous analytics.
• Resend — sending emails such as order confirmations.
• MailerLite — emailing the authors whose books we stock.
• ImprovMX — forwarding emails sent to our address to our inbox.
• Google (Gmail) — our email inbox.

Where these providers process data outside the UK or EEA, transfers are protected by adequacy regulations or standard contractual clauses.

• Author submissions that we decline are deleted within 12 months of our decision. Approved authors' details are kept for as long as we stock their books, plus up to 6 years for accounting purposes.
• Order details are kept for 6 years after the end of the financial year the order was placed in, because UK tax law requires us to keep sales records.
• Emails are kept for as long as we need them to help you, and up to 6 years where they relate to an order or author agreement.
• Data requests are kept for 2 years after we respond, as a record that we did.
• Analytics are totals only and don't identify you, so they aren't personal data.

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we process it;
• receive your data in a portable format;
• withdraw your consent at any time, where we rely on consent.

The quickest way to exercise these rights is our data request form, or email privacy@daisy-books.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or your local data protection authority.

This site is not aimed at children under 13 and we do not knowingly collect their personal data. Author submissions must be made by someone aged 18 or over, or by a parent or guardian.

We may update this policy from time to time. The date at the top of the page shows when it last changed.