Legal
Privacy policy
Draft for legal review. Last updated: [date].
1. Who we are
This website promotes Out of Nowhere: A South African Story by Adelia Cook. The data controller is [legal name of the person or business responsible], [postal address]. You can contact us at [privacy contact email] or through the contact page.
2. Information we collect
Messages you send us
When you use the contact form we collect your name, email address, the subject, the type of enquiry and your message. We use this only to read and reply to your enquiry.
Technical information
To protect the contact form from abuse we store a one-way, keyed hash of your IP address and your browser’s user-agent string with each message. The hash cannot be used to recover your IP address.
Cookies
Most pages set no cookies. The contact form and the administration area use a single, strictly necessary session cookie to keep forms secure. We do not use advertising or analytics cookies. [update this section if analytics are added]
3. Third-party services
- Web fonts. Fonts are loaded from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with them. [or: fonts are self-hosted]
- Retailers. When you choose to buy the book you are taken to the retailer’s own website, where their privacy policy applies.
- Hosting. [name of hosting provider and location of servers]
4. Legal basis
We process enquiry data on the basis of our legitimate interest in responding to messages you choose to send, and to keep the website secure. [confirm the applicable legal bases, e.g. GDPR, UK GDPR, Australian Privacy Principles, POPIA]
5. How long we keep information
Enquiries are kept for [retention period, e.g. 24 months] and then deleted, unless an ongoing conversation requires us to keep them longer.
6. Sharing
We do not sell your information. We share it only with service providers who help us run this website, and where the law requires it.
7. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict its processing, and to complain to a supervisory authority [name the relevant authority]. To exercise these rights, contact [privacy contact email].
8. Security
The website uses secure connections, protected forms and restricted administrative access. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information.
9. Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last changed.
