This policy was updated on 5th December 2023.
The type of personal information we collect
We currently collect and process the information such as name, email address, phone number, mailing address, institution, and job role.
If you buy something from us then we will process your payment details.
If you interact with our website then we process website user stats, including data about the kind of device you used and which country you accessed it from.
If you email us you may provide us with some other information in the body of the email.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- You have bought something from us
- You have created an account on our website
- You have requested a sample/inspection copy
- You have signed up to a mailing list
- You have visited our website
- You have added things to our online shopping cart (but not actually purchased anything)
- You are using our web-based ebooks
- You have left a comment or uploaded a document to our website
- You have contacted us via email, post or telephone
- You have entered a competition or prize draw
- You have completed a survey
- You have undertaken a review or performed some other service
- You have completed some work for us in a freelance capacity
- You have written for us as an author
We also receive personal information indirectly, from 3rd party specialist educational marketing companies. This personal information consists of things such as name, job role, institution, institution type, institution address, work email address, work phone number. These companies follow strict GDPR rules and pass on data in line with GDPR.
We may receive personal information about you if you are recommended to us as a contact by a friend, colleague or some other organisation – for example, as a potential author or reviewer.
Our website uses cookies – small files that are downloaded to your computer when you visit the site. These files are used for things such as remembering what you had in your basket, and remembering any preferences. Almost every website uses cookies to perform as normal. When you visit the website a cookie banner will appear, which gives you a choice about which optional cookies to allow. (Some cookies are necessary for the website to work, and these are mandatory when visiting the site). Cookies can include information such as IP address, your geographical location and the type of hardware you are using.
You can read more about cookies in our cookie policy.
Pixels (also known as beacons) are small blocks of code placed on websites and emails. We use them to help us track and understand email campaign effectiveness. You can opt out of these emails by clicking on the unsubscribe link that is in any email we send.
Our website is aimed at people over the age of 13. If we believe we inadvertently hold any personal data belonging to people under 13 we will delete it.
How we use information about you
We process all information in line with GDPR. We do not sell information to third parties.
We use your information to:
- process orders, take payment and send orders to you
- communicate with you about the progress of orders
- ask you for feedback on products you have bought
- send marketing communications to keep you up to date with products, developments and other matters that we think you might be interested in
- provide customer support and respond to any queries
- to communicate with you if you are working with us on a project
- to pay you if you have completed work for us
- communicate with you about royalties if you are an author
- to draw up contracts
- to understand how effective our marketing, promotion and advertising has been
- to analyse how you access our website
- to recommend other products on our website that you may be interested in
- to prevent spam on our website
Who we share your information with
In order to conduct normal business operations we use a range of third party services and products. Some of these third parties receive your information to provide their services. We take measures to ensure that these third parties process your data lawfully, and keep your data confidential. Third parties who process your data include:
- Website hosting and backup services
- Website analytics services
- Email marketing software services
- Distribution and delivery companies
- E-commerce software and online payment processing gateways – we use Stripe, whose privacy policy is here: https://stripe.com/gb/privacy
- Cloud storage services, including email services
- E-textbook providers
- Freelance services providers, including third parties conducting research on our behalf
- Accountants and other financial or legal services
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent.
You are able to remove your consent at any time. You can do this by contacting privacy@eboru.com
(f) We have a legitimate interest.
Sometimes we use the grounds of legitimate interest to process your data. We use the legitimate interest basis in order to communicate with teachers who we think might be genuinely interested in our products or services. In these cases we have carefully considered our legitimate interests versus the likely impact on your own interests, and made sure that any communications are relevant, are not intrusive, and provide potential value to you. They also clearly link to this privacy policy, and provide a clear way for you to stop receiving any further communications.
Third parties
Our website includes hyperlinks and details of third-party websites. We are not responsible for the privacy policies and practices of third parties.
How we store your personal information
Your information is securely stored. It is strictly limited to only those who need to use it. Physical devices are kept physically secure. Data stored on servers is kept secure with Two Factor Authorisation access, and is encrypted using 256-bit Advanced Encryption Standard, with SSL/TSL to protect data in transit.
The time period for which we keep your information depends on why your information was collected and how it is used. Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
We dispose of your information by deleting emails, removing you from marketing subscriber lists and any associated files, and removing your information from any databases or other files.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
For the Consent basis only:
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Eboru Publishing is the trading name for Heworth Limited, registered company number 08687705, registered address: Salisbury House, London Wall, London EC2M 5SQ.
You can contact us at: Blake House, 18 Blake Street, York YO1 8QG
Please contact us at privacy@eboru.com if you wish to make a request.