PRIVACY POLICY

Last updated: 4 October 2026

The Haunted Bookshelf Co. (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use and protect information when you visit our website or place an order with us.

1. Who We Are
The Haunted Bookshelf Co. is an online bookshop specialising in mystery book experiences.

For privacy-related questions or requests concerning your personal information, you can contact us at thehauntedbookshelfco@gmail.com.

2. Information We Collect
Depending on how you use our website, we may collect:

  • Contact information, such as your name, email address and delivery address.

  • Order information, including the books you purchase, order details and information needed to fulfil your order.

  • Payment-related information, processed through the payment provider available at checkout. We do not intend to store full payment card details ourselves.

  • Customer communications, including messages and enquiries you send to us.

  • Website and device information, such as technical information and cookie-related data collected through our website.

  • Optional reading-profile information, if you choose to share a Goodreads or Fable profile with us so we can check publicly available reading information that may help us identify whether you have already read a book linked to an invitation.

You do not need to provide a Goodreads or Fable profile to place an order.

3. How We Use Your Information
We may use personal information where necessary to:

  • Process and fulfil orders.

  • Arrange delivery and provide order updates.

  • Respond to enquiries and customer service requests.

  • Handle returns, cancellations, swaps and issues with orders.

  • Check publicly available reading information when you voluntarily share a Goodreads or Fable profile for this purpose.

  • Maintain and secure our website.

  • Meet applicable legal, tax, accounting and record-keeping obligations.

We do not require you to provide a reading profile to purchase a book.

4. Our Lawful Bases for Processing
Under UK data protection law, we need a lawful basis for processing personal information. Depending on the purpose, these may include:

  • Contract: where processing is necessary to take and fulfil your order or provide related customer service.

  • Legal obligation: where we need to keep records or comply with applicable legal requirements.

  • Legitimate interests: where processing is necessary for appropriate business purposes, such as maintaining website security, responding to enquiries or checking voluntarily shared public reading information, provided your rights and interests do not override those interests.

  • Consent: where you have given consent for a particular activity, such as the use of cookies or similar technologies where consent is required.

The appropriate lawful basis will depend on the specific processing activity. Where we rely on consent, you can withdraw it at any time.

5. Payments and Delivery
Payments are processed through the payment services enabled at checkout. The relevant provider may process your payment information under its own privacy policy and terms.

We may share the information necessary to fulfil your order with delivery providers, including Royal Mail, so your parcel can be delivered and tracked where tracking is available.

We share only the information reasonably necessary for these purposes.

6. Cookies and Website Technologies
Our website is hosted by Squarespace, which may use cookies and similar technologies to operate the website, support shopping-basket and checkout functions, maintain security and understand website usage.

The cookies and technologies in use may depend on the website features and integrations we activate.

Where consent is required for non-essential cookies or similar technologies, we will provide appropriate choices through our cookie consent settings.

Please also refer to our separate Cookie Policy for further information. We will review this policy against the cookies and integrations actually used on our website before launch.

7. Who We Share Information With
We may share relevant information with service providers that help us operate our business, such as:

  • Our website and online shop platform.

  • Payment processing providers.

  • Delivery and shipping providers.

  • Other service providers where needed to operate the website or fulfil an order.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.

The providers involved will depend on the services and integrations we use.

We do not sell your personal information.

8. International Transfers
Some service providers may process or store personal information outside the United Kingdom. Where this occurs, we will take the steps required by applicable data protection law to ensure that any international transfer is lawful and that appropriate safeguards are in place where required.

9. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

Retention periods depend on the type of information, why it was collected, whether an order or enquiry remains unresolved, and any applicable legal or accounting record-keeping requirements.

When information is no longer required, we will take appropriate steps to delete it or dispose of it securely, subject to any lawful reason to retain it.

10. Keeping Your Information Secure
We take reasonable steps to protect personal information against unauthorised access, loss, misuse or disclosure.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

11. Your Privacy Rights
Depending on the circumstances, UK data protection law may give you the right to:

  • Request access to your personal information.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion of your information where applicable.

  • Request that processing be restricted.

  • Object to certain processing.

  • Request a copy of certain information you have provided in a portable format.

  • Withdraw consent where processing relies on consent.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights or ask a privacy question, contact thehauntedbookshelfco@gmail.com.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you have concerns about how your personal information is handled. Further information is available at ico.org.uk.

12. Changes to This Policy
We may update this policy when our business practices, website features or legal obligations change. The latest version will be published on this page with its updated date.

13. Contact
For questions about this Privacy Policy or how we handle personal information, contact:

The Haunted Bookshelf Co.
Email: thehauntedbookshelfco@gmail.com