A little privacy.

Who is responsible for your data?

The data controller is Books by Sid Iris, 4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB, United Kingdom. Email hello@booksbysidiris.com about your personal information.

Contact enquiries

We use your email address and the information you include in your message to respond to your enquiry. Messages sent through the former website form are held in a protected inbox hosted through OpenAI Sites and Cloudflare. These earlier messages may still be forwarded to our email through FormSubmit, which may retain submissions temporarily under its privacy policy.

For order and pre-order enquiries, we process the information to perform a contract or to take steps you request before entering one. For other enquiries, we rely on our legitimate interest in responding. Please do not send medical or other sensitive personal information.

Book 3 launch notification

If you sign up, we keep your email address and the date you opted in through OpenAI Sites and Cloudflare. We use them to send the Book 3 launch email. We delete the list after the launch or remove your address sooner if you withdraw consent. Email hello@booksbysidiris.com to opt out at any time.

Orders

Orders placed through The Great British Bookshop are handled by that retailer under its own privacy policy. For Etsy orders, Etsy processes payment and shares the details we need to fulfil your order and help with enquiries.

Direct orders

For purchases made directly from Books by Sid Iris, we use your name, email address, delivery address, books and quantities ordered, payment status and transaction reference to process your purchase, arrange fulfilment, provide order updates, and handle returns or enquiries. For direct website purchases, Stripe shares your name, email, delivery address and order details with us. We use those details to pack and post your order and share the delivery details Royal Mail needs to deliver your order.

Our payment provider for direct website orders is Stripe. Card details are entered on Stripe’s checkout page. Stripe processes the payment and shares the confirmation and relevant order details with us. We do not store your full card number or card security code. See Stripe’s privacy notice for how Stripe handles payment information.

We use these order details to perform our contract with you, take steps at your request before a purchase, and meet our legal accounting and tax obligations. Direct website orders are recorded in Stripe. Earlier Payhip order records may also be held in Payhip, with fulfilment details shared with Bookvault for those orders. Records from the former website checkout may be held through OpenAI Sites and Cloudflare. See Payhip’s privacy notice ↗.

International transfers

Our service providers may process information outside the UK. Stripe describes its use of the UK Extension to the EU–US Data Privacy Framework. OpenAI Sites and Cloudflare describe their transfer safeguards in their data processing terms. FormSubmit was used to forward messages from the former contact form and may still process those earlier submissions. Contact us for more information about transfers and safeguards.

How long we keep information

We keep invoices, transaction details and the order information needed for tax and accounting records for six years after the end of the relevant accounting period, or longer where the law requires. Other enquiry and delivery information is kept only for as long as needed to respond, fulfil the order, handle returns or resolve a dispute, then deleted when no longer needed.

Storage and your choices

Public pages use no site analytics or advertising tags. Services such as Stripe and Etsy apply their own privacy and cookie policies when you open their pages. External links open Instagram, TikTok and Etsy. Those services apply their own privacy policies. To reduce spam, the website briefly stores a hashed network identifier and a request count; these records expire within 20 minutes and are cleaned up as new requests arrive.

You can ask to access or correct your information, request deletion or restriction, or object to processing where applicable. Some accounting records must be retained despite a deletion request. Email hello@booksbysidiris.com. You can also complain to the UK Information Commissioner’s Office.