Privacy Policy
How we collect, use and protect your personal data when you visit dragonbacks.com or join the DragonBacks community.
1. Who is responsible for your data
The data controller for dragonbacks.com is Very Inclusive Presenting Ltd, trading as DragonBacks Publishing, of 42 Lytton Road, Barnet, Hertfordshire, EN5 5BY, United Kingdom. You can reach us at [email protected].
This policy describes how we handle your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
2. What we collect
We try to collect as little personal data as possible. The data we collect falls into the following categories:
| Category | Examples |
|---|---|
| Newsletter signup data | First name and email address you submit on the site to join the DragonBacks community. |
| Correspondence | The content of emails you send us and our replies, including any details you choose to share when contacting support. |
| Technical data | Basic information your browser sends when you visit the site, such as IP address, browser type and pages viewed, used in aggregate to keep the site secure and functioning. |
We do not handle your payment, delivery or order details. When you buy DragonBacks through Amazon or Apple Books, the retailer collects and processes your payment and any shipping information under their own privacy policy.
3. Why we use your data and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Sending you our newsletter and occasional updates about the book. | Your consent, which you give when you submit the signup form. |
| Replying to support enquiries and other messages. | Our legitimate interest in helping readers and running a small business. |
| Operating, securing and improving the website. | Our legitimate interest in keeping the site safe and functional. |
| Complying with legal obligations, such as accounting and responding to lawful requests. | Legal obligation. |
4. Who we share it with
We do not sell your data. We share it only with a small number of trusted service providers who help us operate the site and the newsletter, including:
- Our website and email platform, which hosts the site and stores the newsletter list.
- Our email delivery provider, which sends messages on our behalf.
- Our domain and hosting providers.
These providers act as our processors and may only use your data on our instructions. Where any of them is based outside the United Kingdom, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent UK-approved mechanisms.
We may also share data where we are required to do so by law or to protect our legal rights.
5. Cookies and analytics
The site uses only the cookies needed to make it work, such as session and security cookies, and may use simple analytics to count visits in aggregate. We do not use advertising cookies or sell visitor data to advertisers. If we add any non-essential cookies in future, we will ask for your consent first.
6. How long we keep your data
We keep your data only for as long as we need it for the purposes described above.
- Newsletter data: until you unsubscribe, plus a short period to honour your unsubscribe request.
- Support correspondence: usually up to three years, so we can answer follow-up questions.
- Records required by law (for example for tax): for the period required by the relevant law, typically six years.
7. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased in certain circumstances.
- Restrict or object to certain processing.
- Receive your data in a portable format, in certain circumstances.
- Withdraw any consent you have given, at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
To exercise any of these rights, please email [email protected]. We will respond within one month.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office. You can contact the ICO at ico.org.uk or on 0303 123 1113.
8. Children
The site and the DragonBacks community are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Security
We take reasonable steps to protect your data, including using reputable service providers and keeping our accounts secure. No method of transmission over the internet is completely secure, but we do our best to protect your information once it reaches us.
10. Changes to this policy
We may update this policy from time to time. The current version is the one shown here, with the date of the last update at the bottom of the page. If we make material changes, we will let newsletter subscribers know by email.
11. Contact
If you have any questions about this policy or about how we handle your personal data, please contact us at [email protected] or by post at Very Inclusive Presenting Ltd, 42 Lytton Road, Barnet, Hertfordshire, EN5 5BY, United Kingdom.