Paul Schwer t/a Slow Paul Publishing (“we”, “us”, “our”) respects your privacy. This policy explains what personal data we collect through this website and when you buy from us, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is:
Paul Schwer t/a Slow Paul Publishing6 Durban Mews, Trimley St Martin,
Felixstowe, Suffolk IP11 0AD, United Kingdom
Email: hello@slowpaulpublishing.co.uk
2. What we collect and why
| Purpose | Data | Legal basis |
|---|---|---|
| Fulfilling your order | Name, delivery address, email address, phone number (if given), items ordered, signed-copy choice | Contract |
| Taking payment (via Stripe) | Payment details and billing address, handled by Stripe; we never see your full card number | Contract |
| Answering contact-form messages | Name, email address and your message | Legitimate interests (replying to your enquiry) |
| Newsletter (via Kit) | Email address, and the date you signed up and confirmed | Consent — given by double opt-in; unsubscribe at any time using the link in every email |
| Website security (Cloudflare Turnstile) | Technical data such as IP address and browser characteristics, used to check the contact form is not being misused | Legitimate interests (protecting the site from spam and abuse) |
| Website statistics (Plausible) | Anonymous, aggregated visit counts; no cookies and no personal data stored | Legitimate interests (understanding how the site is used) |
| Accounting and tax records | Order and payment records | Legal obligation |
We do not sell or rent your personal data, and we do not use it for automated decision-making.
3. Who processes your data for us
We use these service providers (processors), who handle data only on our instructions:
- Stripe — payments and the checkout page.
- Cloudflare — website hosting, the Turnstile security check and contact-form handling.
- Kit — our newsletter mailing list. Kit's sign-up form uses Google reCAPTCHA to block automated sign-ups.
- Resend — delivering contact-form messages to our inbox.
- Plausible Analytics — cookieless, privacy-friendly website statistics.
- Royal Mail — delivering your book (name and address only).
4. International transfers
Some of these providers may process data outside the UK, for example in the United States or the European Union. Where they do, the transfer is protected by appropriate safeguards: UK adequacy regulations, the UK–US Data Bridge, or the ICO's International Data Transfer Agreement or Addendum.
5. Cookies
We do not use advertising or tracking cookies, so we don't show a cookie banner.
- Stripe may set cookies when the Buy button loads and on its checkout page, to prevent fraud. These are strictly necessary for taking payment securely.
- Cloudflare Turnstile protects our contact form from spam. It is strictly necessary for the form's security.
- Kit's newsletter form loads Google reCAPTCHA to stop automated sign-ups. It is used only to provide the sign-up you ask for, and protects the form from abuse.
- Plausible Analytics is cookieless and stores nothing on your device.
- Our fonts are hosted on our own website, so no font service sees your visit.
If we ever add a service that needs non-essential cookies, we will ask for your consent first and update this policy.
6. How long we keep your data
We keep personal data only for as long as it is necessary for the purpose it was collected. Order and financial records are kept for up to 6 years for tax purposes. Contact-form messages are kept only as long as needed to deal with your enquiry. Newsletter data is kept until you unsubscribe.
7. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where we are not legally required to keep it;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw your consent at any time (for example, by unsubscribing from the newsletter).
To use any of these rights, email hello@slowpaulpublishing.co.uk. We will reply within one month.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.
8. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.