Privacy Policy

Last updated: August 2026

1. Who is responsible for your data

Mando Systems Ltd (Company No. 17168657, 10 Pilgrims Walk, Worthing BN13 1RJ, United Kingdom) is the data controller for personal data processed through bookb.co.uk. For anything in this policy, contact admin@bookb.co.uk.

2. What we collect

• Purchase data — the email address you give at checkout, what you bought, the amount, the date, and the private token behind the download link we email you. Payments are handled by PayPal: your card details go to PayPal and never to BookB, so we never see or store your card number.
• Account data — an email address, a display name and a securely hashed password. We hold these only if you set a password for the online library or create an account directly; buying a book does not need one. Where an account comes from a purchase, the display name is derived from your email address rather than asked for, and that name and email are printed on the imprint page of your PDF, which is how each copy is licensed to a named reader.
• Reading data — if you read in the browser, which chapter you last read and how far through a book you are, so your progress syncs between devices.
• Waitlist data — if you join the membership waitlist, your email address, the tier you said you were interested in, the page you joined from, and the IP address the form was submitted from (kept to trace abuse of a public form).
• Technical data — standard server logs (IP address, browser type, pages requested) kept for security and to keep the service running.

3. Why we can use it (lawful bases)

We process purchase, account and reading data because it is necessary to perform our contract with you — to take payment, send you the book, and run the online library where you have one. We hold waitlist details with your consent, which you can withdraw at any time. We process server logs and fraud-prevention data under our legitimate interest in keeping the service secure and available. We keep tax and accounting records because the law requires us to.

4. Who we share it with

We use a small number of processors to run BookB: PayPal (payment processing), the provider that delivers our email (your receipt, the book attached to it, and any password link you ask for), and our hosting provider (where the site and database run). Each handles data only on our instructions — except PayPal, which is also a controller in its own right for the payment it takes and the card details it collects, and its own privacy policy covers that part.

Two third parties are reached by your browser directly rather than by us. On the checkout page, PayPal's payment components load into the page so the payment can happen there, and on devices that offer Google Pay a script from Google loads alongside them; both receive what any browser sends when it requests a file, including your IP address. On every page, our two typefaces are loaded from Google Fonts in the same way. Beyond that we use no analytics, advertising or tracking services at all. We do not sell your personal data, we do not share it with advertisers, and we do not send marketing emails without your consent.

5. How long we keep it

The private download link in your receipt does not expire, so the order record behind it is kept for as long as your purchase stands; order records are in any case kept for six years after the tax year they relate to, as UK tax law requires. Account and reading data are kept while your account exists — ask us to close it and we delete or anonymise it, apart from anything we must keep for tax. Waitlist entries are kept until membership opens and we have told you, or until you ask to be removed, whichever comes first. Server logs are kept for a short rolling period for security purposes.

6. Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased where there is no good reason for us to keep it, to receive a portable copy of data you provided, and to object to or restrict certain processing. To exercise any of these rights, email admin@bookb.co.uk from the address you bought with or the address on your account, and we will respond within one month. Where we rely on your consent — the membership waitlist — you can withdraw it at any time, and withdrawing it does not affect anything we did before you withdrew it.

7. Complaints

If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), the UK supervisory authority.

8. Cookies

We use only the essential cookies needed to sign you in and protect forms — no tracking or advertising cookies. On the checkout page, PayPal's payment components may set cookies of their own to complete the payment and prevent fraud. The detail is in our Cookie Policy.

9. Changes

If we change this policy in a way that matters, we will tell you by email or with a notice on the site before the change takes effect.