Fios mu phrìobhaideachd

This notice explains what personal information Acair collects when you use this website or buy from it, what we do with it, who else sees it, and how long we keep it.

Who we are

The website is run by Acair, a Scottish charity (number SC047866), of An Tosgan, 54 Seaforth Road, Stornoway, Isle of Lewis HS1 2SD. We are the "controller" of your information, which means we are responsible for it.

For any question about your information, or to use any of the rights described below, email info@acairbooks.com, ring 01851 703020, or write to us at the address above.

When you place an order

At checkout we ask for:

• your name and email address
• a phone number, if you choose to give one
• a delivery address, unless you are collecting from our office or buying only audiobooks
• any note you add to the order

We keep this together with what you bought and what you paid. We use it to take payment, post or prepare your order, email you a receipt and your audiobook links, let you know when your order has been posted or is ready to collect, and answer any question you have about it. We need it to carry out our contract with you.

We never see your card details. You pay on a page run by our payment provider, Stripe, and the card number goes to them, not to us.

If you sign up to our newsletter

We send our newsletter through Mailchimp. When you sign up, your email address goes to Mailchimp, which sends you an email asking you to confirm. You are only added once you do. Every newsletter has a link to unsubscribe, and you can also ask us to remove you. We rely on your consent, and you can withdraw it at any time.

When you visit the website

Like almost every website, our server keeps a log of the requests it receives. Each entry includes the address of the device that made the request (its IP address), the page asked for, and the type of browser. We use these logs to keep the site secure and working, and to count how many people visit which pages. The counts are made from shortened IP addresses that cannot identify you, and the logs themselves are deleted after about two weeks. This is in our legitimate interest in running a secure website.

We do not use advertising or tracking cookies, and we do not use any outside analytics service.

Cookies

The website stores a few small cookies on your device, only to make the site itself work:

• acair_cart remembers what is in your basket. It lasts 60 days.
• acair_newsletter remembers that you have seen, or answered, the invitation to join our newsletter, so it does not keep appearing. It lasts a year.
• acair_banner_dismissed remembers which notices you have closed. It lasts 180 days.

A fourth, acair_admin, is used only by our staff when they sign in to manage the shop.

Videos

Some book pages have videos hosted on YouTube. Nothing is loaded from YouTube until you press play. If you do, the video comes from YouTube's privacy-enhanced service, and YouTube (which is part of Google) receives information about your visit under its own privacy policy.

Who else sees your information

We do not sell your information, and we only share it with the services we use to run the shop:

• Stripe takes your payment.
• Xero, our accounting software, holds an invoice for each order. The invoice includes your name, address and email.
• Royal Mail receives your name and address so that we can print a postage label.
• Amazon Web Services sends our order emails from an EU data centre.
• Mailchimp holds our newsletter list.
• Amazon Web Services hosts the website and its database, in an EU datacentre.

Each of them handles your information under contract with us, or as required by law. Stripe and Mailchimp may process it outside the UK, including in the United States. Where they do, it is protected by the safeguards UK law requires, such as the UK's approved contract terms.

We would also share information if the law required us to, for example with HM Revenue & Customs.

How long we keep it

• Your name, email, phone number, address and order note are deleted from our website four weeks after your order is posted or collected. We keep a record of what was bought and what was paid, with no personal details. Your audiobook links keep working after this.
• If you start a checkout and do not pay, the details you entered are deleted after a week.
• Your invoice in Xero is kept for as long as the law requires us to keep accounting records, which is usually six years.
• Stripe keeps its record of your payment for as long as it is legally required to.
• Newsletter: until you unsubscribe.
• Server logs: about two weeks.

Your rights

You have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that is wrong
• ask us to delete your information, or to stop using it
• object to how we use it
• ask for your information in a form you can take elsewhere
• withdraw your consent, where we rely on it, for example to unsubscribe from the newsletter

Some of these rights have limits. For example, we cannot delete an invoice we are legally required to keep. We will reply within a month. Get in touch using the details under "Who we are".

If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this notice

If we change how we use your information, we will update this page and the date at the top.