Hector Felix Byrd Books

Privacy Policy

Effective date: [EFFECTIVE_DATE]  |  Last updated: [EFFECTIVE_DATE]

[COMPANY_LEGAL_NAME] (“we,” “us,” “our,” or “Hector Felix Byrd”) operates [WEBSITE_URL] (the “Site”), a direct-to-consumer bookstore selling hardcover, paperback, and ebook titles. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights available to you. It applies to visitors, registered account holders, and guest checkout customers alike.

By using the Site or placing an order, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Site.

1. Information We Collect

1.1 Information You Provide Directly

  • Order and checkout information: name, billing address, shipping address, email address, phone number, and order contents, collected through WooCommerce at checkout — whether or not you create an account.
  • Account information: if you choose to register (accounts are optional; guest checkout is always available), we store your email, a hashed password, order history, and saved addresses via WooCommerce’s account system.
  • Payment information: we do not collect or store full card numbers, CVV codes, or bank account details. Payment is processed directly by our payment processors — currently and planned to include Stripe and PayPal — under their own privacy and security terms. We retain only limited transaction metadata (e.g., order total, payment method type, and a processor-issued transaction ID) needed for order records, refunds, and accounting.
  • Contact form and correspondence: if you email us or use a contact form on the Site, we collect your name, email address, and the contents of your message.
  • Digital delivery information: if you purchase an ebook, we record the delivery email address and download activity associated with your order for licensing and support purposes.

1.2 Information Collected Automatically

  • Device and usage data: IP address, browser type, device type, pages viewed, referring URL, and timestamps, collected automatically when you browse the Site.
  • Cookies and similar technologies: WooCommerce session and cart cookies, and — where enabled — analytics and marketing cookies. See our Cookie Policy for full detail and how to control them.
  • Analytics data: we may use analytics services (e.g., Google Analytics or comparable tools) to understand aggregate traffic and site performance. These services may set their own cookies and collect data under their own privacy policies.

2. How We Use Your Information

We use personal information to:

  • Process, fulfill, and ship physical book orders, including transmitting order and shipping details to our print-on-demand fulfillment partner (currently Lulu Direct);
  • Deliver ebook purchases and manage digital licensing and re-download access;
  • Process payments and refunds through our payment processors;
  • Create and maintain your optional customer account, including order history and saved addresses;
  • Send transactional emails (order confirmations, shipping notifications, digital delivery links, password resets, refund confirmations);
  • Respond to customer service inquiries and contact form submissions;
  • Detect and prevent fraud, abuse, and security incidents;
  • Comply with tax, accounting, and legal recordkeeping obligations;
  • With your consent or where legally permitted, send marketing communications (you may opt out at any time — see Section 7);
  • Analyze aggregate site usage to improve content, navigation, and performance.

We do not sell personal information to third parties for their own independent marketing purposes.

3. How We Share Your Information

We share personal information only as necessary to operate the Site and fulfill orders:

  • WooCommerce & hosting infrastructure: our store runs on WooCommerce, which stores order, product, and account data on our hosting environment.
  • Payment processors: Stripe and/or PayPal receive the information necessary to authorize and process your payment. Their handling of that data is governed by their own privacy policies.
  • Print-on-demand fulfillment: for physical book orders, your name and shipping address are shared with Lulu Direct (or a successor print-on-demand partner) solely to print and ship your order.
  • Email and transactional messaging providers: used to deliver order confirmations, shipping updates, ebook download links, and customer service correspondence.
  • Analytics providers: aggregate or pseudonymized usage data may be shared with analytics services as described in Section 1.2.
  • Legal and safety disclosures: we may disclose information where required by law, subpoena, or court order, or to protect the rights, property, or safety of [COMPANY_LEGAL_NAME], our customers, or the public.
  • Business transfers: if [COMPANY_LEGAL_NAME] is involved in a merger, acquisition, or sale of assets, customer information may be transferred as part of that transaction, subject to this Privacy Policy or a comparable successor policy.

4. Data Retention

We retain order and account information for as long as your account remains active, and for a reasonable period afterward to comply with tax, accounting, and legal obligations (typically a minimum of seven years for financial records, unless a longer period is required by law). Guest checkout order data is retained on the same basis, tied to the order record rather than an account. You may request deletion of your personal information subject to the exceptions described in Section 7 and Section 8.

5. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted connections (HTTPS/TLS), restricted administrative access, and reliance on PCI-DSS-compliant payment processors for all card data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. International Data Transfers

[COMPANY_LEGAL_NAME] is based in the United States, and personal information is primarily processed and stored in the United States. If you are located outside the United States, your information will be transferred to, stored, and processed in the United States and other jurisdictions where our service providers (including payment processors and fulfillment partners) operate, which may have different data protection laws than your home jurisdiction.

7. Your Privacy Rights

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we have collected, used, disclosed, and (if applicable) sold about you in the preceding 12 months;
  • Request deletion of personal information we hold about you, subject to certain exceptions (e.g., completing a transaction, legal compliance, fraud prevention);
  • Correct inaccurate personal information;
  • Opt out of the “sale” or “sharing” of personal information — we do not sell personal information, and any sharing with analytics or advertising partners is limited to what is described in this Policy;
  • Non-discrimination for exercising any of these rights.

To exercise these rights, contact us at [SUPPORT_EMAIL]. We will verify your identity before fulfilling a request, generally using the email address and order information associated with your account or orders.

7.2 European Economic Area, UK, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to:

  • Access the personal information we hold about you;
  • Request correction or rectification of inaccurate data;
  • Request erasure (“right to be forgotten”), subject to legal retention obligations;
  • Request restriction of, or object to, certain processing;
  • Request data portability in a structured, machine-readable format;
  • Withdraw consent at any time where processing is based on consent (e.g., marketing emails, non-essential cookies);
  • Lodge a complaint with your local data protection supervisory authority.

Our legal bases for processing include: performance of a contract (fulfilling your order), legitimate interests (fraud prevention, site security, aggregate analytics), consent (marketing communications, non-essential cookies), and legal obligation (tax and accounting records).

7.3 All Users

You may opt out of marketing emails at any time using the unsubscribe link included in those emails. Transactional emails (order confirmations, shipping notices, digital delivery links) are necessary to fulfill your order and cannot be opted out of while an order is active.

8. Children’s Privacy

The Site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. Parents or guardians who believe a child has provided us with personal information may contact us at [SUPPORT_EMAIL].

9. Third-Party Links

The Site may contain links to third-party websites, including payment processors and social media platforms. This Privacy Policy does not apply to those third-party sites, and we encourage you to review their respective privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date above will reflect the most recent revision. Material changes will be posted on this page; continued use of the Site after changes take effect constitutes acceptance of the revised Policy.

11. Contact Us

Questions about this Privacy Policy or your personal information may be directed to:

[COMPANY_LEGAL_NAME]
[BUSINESS_ADDRESS]
Email: [SUPPORT_EMAIL]
Phone: [PHONE_NUMBER]