Privacy policy
Last updated: June 2026
Controller
The data controller is Andrzej Kubacki (contact via akubacki.org or LinkedIn).
Purpose — orders
We process order data (email, name, phone, delivery address) to fulfil book sales, payments, and shipping.
Purpose — marketing
With separate consent, we may send updates about the book, launch, and related news.
Payments
Payments are processed by Stripe. We do not store card details — they are handled solely by Stripe under its privacy policy.
Legal basis
Contract performance (GDPR Art. 6(1)(b)); marketing — consent (Art. 6(1)(a)).
Retention
Order data is kept for periods required by tax and accounting law. Marketing consent — until withdrawn.
Your rights
You may request access, rectification, erasure, restriction, portability, withdraw consent, and lodge a complaint with your supervisory authority.
Hosting and security
Data is stored in Google Cloud Firestore (europe-west1). Emails are sent via Mailgun. The form is protected with Cloudflare Turnstile verification.