Privacy Policy

Who we are

Willows Publishing (registered legal name Jade Soucy-Gaudreau) is the data controller responsible for your personal data. You can reach us at the address below or by email.

What we collect

We collect only what we need to sell you a book and deliver it:

• Your name and email address.
• Your shipping address — for physical orders only.
• Your order history and payment status (paid, refunded) — never your card number.
• A hashed, irreversible version of your IP address, used only to prevent download-link abuse.

We never see or store your card details.

How payments are handled

Card payments are processed by Stripe, our payment processor. Your card details are entered directly on Stripe's systems and never touch our servers. We receive only the payment status and the information needed to fulfil your order.

Why we use your data

We use your personal data to:

• Fulfil your order and deliver your ebooks (GDPR: performance of a contract; PIPEDA: consent).
• Send you transactional email such as order confirmations and delivery links (contract).
• Prevent fraud and download-link abuse (legitimate interest).
• Understand aggregate, anonymous site usage (legitimate interest).

Ebook delivery and watermarking

Each ebook (PDF) you buy is stamped with a licence line containing your name, email, and order number. This watermark deters unauthorised sharing. Download links expire 30 days after purchase.

Service providers

We share the minimum necessary data with a small number of trusted providers who process it on our behalf:

• Stripe — processes payments.
• Resend — sends our transactional email.
• Supabase — provides our database, authentication, and file storage.
• Sentry — monitors errors, configured to scrub personal data.
• Umami — provides privacy-friendly, cookieless analytics that collects no personal data.

Some of these providers process data in the United States, which involves an international transfer of your personal data.

Cookies

We use only strictly necessary functional cookies to keep your cart, checkout, and session working. They stay on your device and can't be read by other sites or scripts. We set no third-party tracking cookies and no advertising cookies, and our analytics are cookieless — so we do not show a cookie-consent banner.

Data retention

We keep order records for as long as needed to fulfil the order and to meet our legal and tax obligations. Download links and their tokens expire about 30 days after purchase.

Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Ask us to delete your data.
• Receive a copy of your data in a portable format.
• Withdraw your consent at any time.

To exercise any of these rights, email us at jade.willows@willows-publishing.com

EU customers may lodge a complaint with their local data-protection supervisory authority. Customers in Canada may contact the Office of the Privacy Commissioner of Canada.

Children

Our store is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The "last updated" date above always reflects the current version.

Contact

For any questions about your privacy or this policy, email us at jade.willows@willows-publishing.com