Stories Of Bible

Privacy Policy

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is Stories Of Bible. For any questions or requests regarding your data, contact us at [email protected].

2. Personal Data We Collect

Data you provide directly

  • Account and order information: full name, email address, phone number, shipping address, billing address.
  • Payment information: processed securely by Stripe and PayPal. We do not store your full card details.
  • Communications: contact form messages, support requests, review submissions.
  • Newsletter subscriptions: email address and optional first name.

Data collected automatically

  • Device and browser information: device type, operating system, browser type, screen resolution.
  • IP address: used for fraud prevention, geolocation, and analytics.
  • Browsing behavior: pages viewed, products viewed, time on site, referral source.
  • Cookies and tracking data: see our Cookie Policy for details.
  • Marketing attribution: UTM parameters, click identifiers (such as fbclid), affiliate referral codes.


3. How We Use Your Data

For each purpose, we list the data used and the legal basis for processing it:

  • Processing and fulfilling your orders: name, email, address, payment. Legal basis: contract performance.
  • Sending order confirmations, shipping updates, and delivery notifications: name, email, order details. Legal basis: contract performance.
  • Customer support and dispute resolution: name, email, order history. Legal basis: contract performance.
  • Fraud prevention and payment security: IP address, payment data, device information. Legal basis: legitimate interest.
  • Website analytics and performance improvement: browsing behavior, device information, IP address. Legal basis: legitimate interest.
  • Marketing emails and abandoned cart reminders: email, name, cart contents. Legal basis: consent or legitimate interest.
  • Advertising measurement and retargeting: browsing behavior, purchase data, cookies. Legal basis: consent.
  • Affiliate program tracking and commission calculation: referral codes, order data. Legal basis: legitimate interest.
  • Product reviews and ratings: name, email, review content, images. Legal basis: consent.


4. Third-Party Services

We share your data with the following third-party processors, solely for the purposes described above:

Payment processing

Order fulfillment

  • Production and shipping partners: receive your shipping address and order details to prepare and ship your items.

Communications

  • Amazon SES: sends transactional and marketing emails on our behalf.

Analytics and advertising

Hosting and infrastructure

  • Amazon Web Services (AWS): hosts our servers, stores files, and provides infrastructure. Data may be processed in the US or EU depending on the service region. Privacy Policy
  • Cloudflare: hosts our website frontend and provides CDN and security services. Privacy Policy

We do not sell your personal data to any third party.

5. International Data Transfers

Some of our third-party providers are based outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions.

6. Data Retention

  • Order data: retained for the duration required by applicable tax and accounting laws (typically 5 to 10 years).
  • Customer accounts: retained until you request deletion.
  • Analytics data: aggregated and anonymized after 2 years.
  • Marketing data: retained until you unsubscribe or request deletion.
  • Cookies: see retention periods in our Cookie Policy.


7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data ("right to be forgotten").
  • Right to restriction: request that we limit how we process your data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interest, including direct marketing.
  • Right to withdraw consent: withdraw consent at any time for processing based on consent (for example, marketing emails).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Marketing Communications

You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any email, or by contacting us directly. Transactional emails (order confirmations, shipping updates) are not affected by unsubscribing from marketing.

9. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure payment processing via PCI-compliant providers (Stripe, PayPal)
  • Access controls and authentication for our systems
  • Regular security monitoring


10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: [email protected]

You also have the right to lodge a complaint with your local data protection authority if you believe your data has been mishandled.