Privacy Policy
Last updated: 7 September 2026
This policy explains what personal information BrainyBookShelf collects when you visit our store, buy from us, or get in touch — and what we do with it. Our store runs on Shopify, which handles a lot of this on our behalf. If anything here conflicts with our Terms of Service, this policy takes precedence on anything to do with your personal information.
What We Collect
"Personal information" means anything that identifies you or can reasonably be linked back to you. Depending on how you use our store and where you live, this may include:
- Contact details — your name, email address, phone number, billing address and delivery address
- Payment information — card and payment account details, transaction records and payment confirmations. These are processed by our payment providers; we don't store full card numbers ourselves
- Account information — your username, password and saved preferences, if you create an account
- Order information — the books you view, add to your cart, buy, return or cancel, and your order history
- Messages to us — whatever you include when you email us or send a support enquiry
- Device information — your IP address, browser, device type and similar identifiers
- Usage information — how you move around and interact with our site
Where It Comes From
- From you directly, when you order, register, or contact us
- Automatically, through cookies and similar technology as you browse
- From our service providers, when they process information on our behalf
- From partners and other third parties we work with
How We Use It
Running the store
To take and fulfil your order, process payment, arrange delivery, handle returns and exchanges, manage your account, respond to reviews, and recommend books you might like.
Marketing
To send you promotional emails and show you ads for our books on other sites, where you haven't opted out.
Security and fraud prevention
To verify accounts, keep payments secure, and investigate anything that looks fraudulent or unsafe. If you hold an account with us, keeping your login details private is your responsibility.
Support
To answer your questions and stay in touch about your orders.
Legal reasons
To comply with the law, respond to valid legal requests, and enforce our terms.
Who We Share It With
- Shopify and other service providers who work on our behalf — payments, hosting, analytics, customer support, warehousing and shipping
- Advertising and marketing partners, who use it under their own privacy policies. Depending on where you live, you can tell us not to share your information for targeted advertising — see Your Privacy Choices
- Anyone you ask us to share it with, such as a courier delivering your parcel
- In a business transfer, such as a merger or sale, or where we're legally obliged to disclose it
We don't sell your personal information for money.
About Shopify
Our store is hosted by Shopify, so information you submit here is transmitted to and processed by Shopify, and sometimes by third parties located in other countries. Shopify also uses data from your interactions with our store and other merchants to power certain features. In those cases Shopify is responsible for that processing, including handling your requests about it. You can read the Shopify Consumer Privacy Policy or use the Shopify Privacy Portal to exercise your rights.
Links to Other Sites
We sometimes link to sites we don't run. Their privacy and security practices are their own, and we can't vouch for them. A link isn't an endorsement. Anything you post on public or social platforms may be visible to others without limit on how it's used.
Children
Our store isn't intended for children, and we don't knowingly collect personal information from anyone under the age of majority where they live. If you're a parent or guardian and believe your child has given us their information, contact us and we'll delete it. As of the date above, we have no knowledge of selling or sharing the personal information of anyone under 16.
Security and How Long We Keep Things
No security measure is perfect, and information sent over the internet is never completely safe in transit. Please don't send us sensitive or confidential details through unsecured channels.
How long we keep your information depends on why we have it — maintaining your account, fulfilling orders, meeting legal obligations, or resolving disputes.
Your Rights
Depending on where you live, you may have some or all of these rights. They aren't absolute, and in some cases we may have to decline a request where the law allows.
- Access — ask what personal information we hold about you
- Deletion — ask us to delete it
- Correction — ask us to fix anything inaccurate
- Portability — get a copy, or ask us to send it to someone else
- Opt out of targeted advertising — see Your Privacy Choices. If you browse with Global Privacy Control enabled, we treat that as an opt-out request for that browser and device. We don't act on other "Do Not Track" signals
- Email preferences — unsubscribe from marketing emails at any time using the link in any of them. We may still email you about your account or orders
If you're in the UK or European Economic Area
You may also object to or ask us to restrict certain processing, and withdraw consent where we rely on it. Withdrawing consent doesn't undo processing that already happened lawfully.
We won't treat you differently for exercising any of these rights. We may need to verify who you are first. You can appoint someone to make a request for you, but we'll ask for proof you've authorised them.
Complaints
If you're unhappy with how we've handled your personal information, contact us first using the details below. Depending on where you live, you may also be able to complain to your local data protection authority. In the EEA, the list of supervisory authorities is published by the European Data Protection Board.
International Transfers
Your information may be transferred, stored and processed outside the country you live in. Where we move personal information out of the UK or EEA, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses, unless the destination country has been formally recognised as offering adequate protection.
Changes to This Policy
We may update this policy to reflect changes in how we work or what the law requires. The revised version goes up on this page with a new "last updated" date, and we'll give notice where the law requires it.
Contact Us
Questions about this policy, or want to exercise any of your rights? Email us and we'll help. For data protection purposes, we are the controller of your personal information.
BrainyBookShelf
Email: atbrainybookshelf@gmail.com
Website: brainybooks.store