Privacy Policy
Last updated: December 24, 2024
Introduction
The Literary Pharmacy (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website and services.
We operate in full compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Your privacy matters to us, and we only collect the minimum information necessary to provide our service.
Data Controller
The Literary Pharmacy is operated by Antomic Studio EOOD, a company registered in Bulgaria.
Contact Information:
- Email: [email protected]
For any privacy-related inquiries, please contact us at the email address above.
Information We Collect
We collect minimal personal information to provide our services:
Newsletter Subscription
When you subscribe to our newsletter, we collect:
- Email address — to send you our weekly book recommendations
That’s it. We don’t collect your name, location, or any other personal details unless you voluntarily provide them when contacting us.
Automatically Collected Information
We use Umami Analytics, a privacy-focused, self-hosted analytics solution that:
- Does not use cookies
- Does not collect personal data
- Does not track you across websites
- Only collects anonymous, aggregated usage statistics (page views, referrer sources, device types)
This helps us understand how our website is used without compromising your privacy.
Legal Basis for Processing
Under the GDPR, we process your personal data based on the following legal grounds:
- Consent — When you subscribe to our newsletter, you explicitly consent to receiving our emails. You can withdraw this consent at any time by unsubscribing.
How We Use Your Information
We use your email address solely to:
- Send you our weekly book recommendation newsletter
- Notify you of important service updates (rare)
- Respond to your inquiries if you contact us
We do not:
- Sell your email address to third parties
- Share your data with advertisers
- Send you unsolicited promotional content from partners
- Use your data for profiling or automated decision-making
Data Storage and Security
Your data is stored securely on our self-hosted infrastructure located within the European Union. We implement appropriate technical and organizational measures to protect your personal data, including:
- Encrypted data transmission (HTTPS/TLS)
- Secure server infrastructure
- Access controls limiting who can view subscriber data
- Regular security updates and monitoring
Data Retention
We retain your email address for as long as you remain subscribed to our newsletter. When you unsubscribe:
- Your email is removed from our active mailing list immediately
- We may retain a record of your unsubscription for up to 12 months to honor your request and for our legitimate interest in maintaining suppression lists
Your Rights Under GDPR
As a data subject in the European Union, you have the following rights:
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can request that we correct any inaccurate personal data.
Right to Erasure (“Right to be Forgotten”)
You can request that we delete your personal data. For newsletter subscribers, simply unsubscribing will remove your data.
Right to Restrict Processing
You can request that we limit how we use your data.
Right to Data Portability
You can request your data in a machine-readable format.
Right to Object
You can object to our processing of your personal data.
Right to Withdraw Consent
You can withdraw your consent at any time by clicking the unsubscribe link in any of our emails or by contacting us directly.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Local Storage
We use your browser’s local storage (not cookies) to remember your theme preference (light or dark mode). This data:
- Never leaves your device
- Is not transmitted to our servers
- Can be cleared by clearing your browser data
Third-Party Services
Affiliate Partners
We use affiliate links to book retailers (such as Amazon). When you click these links:
- The retailer may set cookies on your device to track the referral
- We do not control the privacy practices of these retailers
- We receive a small commission if you make a purchase, but no personal data about you is shared with us by these retailers
We encourage you to review the privacy policies of any retailers you purchase from.
Book Data Providers
We display book covers and metadata from third-party services such as Open Library. When you view book recommendations:
- These services may receive requests for book images
- No personal data about you is shared with these services
- We do not control the privacy practices of these third-party services
We encourage you to review the terms of these services:
- Internet Archive Terms of Use (Open Library is part of the Internet Archive)
International Data Transfers
Your personal data is stored and processed exclusively within the European Union. We do not transfer your data outside the EU/EEA.
Children’s Privacy
Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Update the “Last Updated” date at the top of this page
- Notify newsletter subscribers via email for material changes
We encourage you to review this page periodically to stay informed about our privacy practices.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority in Bulgaria:
Commission for Personal Data Protection (CPDP)
- Website: www.cpdp.bg
- Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Subject Line: Privacy Inquiry
We aim to respond to all inquiries within 7 business days.