BookishQuotes

Bookish Quotes Privacy Notice

At BookishQuotes, we take privacy very seriously.  This notice explains how we treat your personal information when you give it to us and includes detail on your rights connected with this. 

1. Who we are

Controller

Magnocarta Limited (trading as “BookishQuotes”) is the data controller of your personal data.  We are responsible for its security and for the way in which we use it. 

If you have any questions about this privacy notice or your rights, please contact us using the details set out below.

Contact details

We are Magnocarta Limited (trading as “BookishQuotes”).  Our registered address is BookishQuotes, Suite 272, 266 Banbury Road, Oxford OX2 7DL

If you need to get hold of us for any reason in connection with your personal data, please email us at [email protected]

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns about data protection before you approach the ICO so please contact us in the first instance.

Changes to the privacy notice and your duty to inform us of changes

This version was last updated on 5^th September 2023    

2. The information we collect about you and why we collect it

We do not ask you to disclose any more personal information than is reasonably necessary to enable you to participate in      the website and to improve our online services.  Below, we list the types of data we collect and explain why we collect it from you. 

This website is not intended for use by anyone under 18. If you are under 18 you may not use this website.                               

As set out above, we will only ever process your information if we have a lawful basis to do so. The lawful basis we rely on are:

●       Contract – This is where we process your information to fulfil a contractual arrangement we have made with you.

●       Consent – This is where we have asked you to provide explicit permission to process your data for a particular purpose.

●       Legitimate Interests - This is where we rely on our interests as a basis for processing. Generally this is to provide you with the best products and services in the most secure and appropriate way, but not where our interests are overridden by your interests.

●       Legal Obligation – This is where we have a statutory or other legal obligation to process the information, such as for the investigation of crime or to meet responsible lending criteria.

3. How is your personal data collected?

We use different methods to collect data from and about you including through:

·       Direct interactions. We collect the majority of your data when you choose to give this to us on our website or by email or otherwise in the course of conducting business with us. 

·       Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data and Usage Data about your browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. For more information about the cookies we use, and how to disable them, please see our Cookie Policy.

·       Third parties. We may receive Technical Data about you from analytics providers such as Google with servers based outside of the European Economic Area (EEA) which is governed by our Cookie Policy.

4. Disclosure of your personal data

We will need to share your personal data as below for the purposes set out in paragraph 2 above.

·       All personal information is stored through an IT service company with servers based in the UK

·       We share Newsletter Data with our email management company.

·       We may share Technical and Usage Data with analytics providers which may have servers based in the US to analyse website activity.  

·       We may share data with third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.We may share your personal data we think this is necessary to in order to protect the rights, property, or safety of Magnocarta Limited, our commercial partners, or our customers; and with government authorities and/or law enforcement officials if required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

5.    Advertising and links to third party content

We may include links on our website to third party websites (including to social media pages such as Facebook, TikTok or Instagram) or permit third party advertising service providers to place advertisements on our website. If you click on a link or advertisement which takes you to another website, they will not be covered by this privacy policy. We do not control, nor are we responsible for any third party websites or any cookies or other data collecting technologies used on those sites.  If you click on a link to a third party website, please read its privacy policy and terms and conditions.

Our third party advertising service providers may set cookies and data collecting technologies when serving advertisements to users on our website.

We currently use the following third party advertising service providers (but they may change from time to time)

Google Ads is a digital advertising platform offered by Google LLC, herein referred to as "Google," which facilitates the creation, placement, and management of online advertisements. To optimize ad relevance and performance, Google may collect user data, including but not limited to search queries, browsing history, location information, and device identifiers, in accordance with its privacy policy. This data may be utilized for ad personalization, analytics, and measurement purposes. Additionally, Google Ads may employ cookies, which are small text files stored on users' devices, to track and record user interactions with ads and websites. Users have the option to manage their cookie preferences through browser settings.

6.  International transfers

Our IT service company has servers based in the UK and our email management company is based in the US.  This involves a transfer of your personal information outside the UK. 

Whenever we transfer your personal data out of the UK or EEA, we ensure a similar degree of protection is afforded to it by ensuring that:

·       we have a specific contract with that processor in a form approved by the European Commission or the Information Commissioner's Office which ensures that the service provider gives your personal data the same protection it has in the UK; 

Please contact us [email protected] if you want further information on the specific mechanism used by us when transferring your personal data out of the UK or EEA.

7. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way.           . In addition, we limit access to your personal data to our employees, agents or business partners who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Data retention

How long will you use my personal data for?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

9. Your legal rights

You have the right in certain circumstances to:

·       Request access to your personal data (a "data subject access request").

·       Request correction of the personal data that we hold about you.

·       Request erasure of your personal data.

·       Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.

·       Request restriction of processing of your personal data.

·       Request the transfer of your personal data to you or to a third party.

For more information on these rights and when they apply is available here:

https://ico.org.uk/for-organis...

You will not have to pay a fee to access your personal data (or to exercise any of the other rights).

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. 

We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.