Last Updated: 11/18/2020
Bookshop.org, including all of its features and content and related or commonly-owned or controlled websites (“Website”), is a service made available by Bookshop, Inc. (“Bookshop.org”), a public benefit corporation that provides independently owned booksellers, industry partners, and conscious consumers with a direct-to-consumer e-commerce solution competitive to that of major retailers.
Quick Guide to Contents
What Information Bookshop.org Collects and Receives
How Bookshop.org Uses the Information It Collects
How Bookshop.org Shares the Information It Collects
Tracking and Other Technologies
Links to Other Websites and Services
Cross-Border Data Transfers
What Information Bookshop.org Collects and Receives
In order for you to use the Website, Bookshop.org needs to collect and process certain information, which depending on how you use the Website, may include the following.
Information You Provide
Bookshop.org collects information you provide by using the Website, such as when:
Users complete forms on or through the Website or subscribe to our newsletter. The information you provide may include your name, email address, mailing address, or telephone number.
Make a request or transaction through the Website. Bookshop.org and Platform Sellers offer products for sale through the Website, and Bookshop.org and its payment processor will need to collect and use information such as your name, mailing address, billing address, email address, telephone number, and payment card information to process these requests and transactions.
Communicate with Bookshop.org, such as when you request support, submit comments or questions, or report a problem to Bookshop.org.
2. Information Automatically Collected
Bookshop.org also automatically or passively collects information that relates to your usage of the Website or that is necessary for the proper functioning or improvement of the Website, including:
Times and dates and the extent of your usage of the Website.
Time zone, language, screen resolution, and other usage preferences you select when using the Website.
Device keyboard settings.
Usage history such as areas and pages within the Website that you access or use and/or which buttons on the Website you click on.
The search terms you entered into a search engine that may have led you to the Website.
The Internet service provider (ISP) or mobile platform you use.
Other device and Website access information such as your browser type, operating system, Internet Protocol (IP) address, referring/exit pages, and other unique device identifiers.
Bookshop.org also collects and maintain aggregated, anonymized, or pseudonymized information to protect the safety and security of the Website, improve the Website, or comply with its legal obligations.
You may decline to provide Bookshop.org with some or all of your information. However, doing so will limit your ability to use the Website.
How Bookshop.org Uses the Information It Collects
Bookshop.org uses the information it collects from and about you for the following purposes:
To enable Bookshop.org to provide you and other Users with the Website, and to improve, protect, and promote the Website and services;
To address inquiries and respond to customer service requests, questions, and comments;
To contact you with newsletters, offers, promotions, and other product specials or to customize your experience on the Website;
To track and analyze use of the Website and Bookshop.org’s services, such as to identify trends, conduct data analysis, and determine the effectiveness of marketing and promotion efforts, and other service offerings, so that Bookshop.org can improve its performance and provide Users with the best experience possible;
For other purposes that Bookshop.org believes are necessary to protect its rights and the rights of others, or as otherwise described to you at the time of collection.
How Bookshop.org Shares the Information It Collects
Bookshop.org may share the information it collects from and about you in the following ways:
Service Providers: Bookshop.org may share your information with certain service providers to help provide, improve, promote, or protect the Website, process payments, or manage ads on other websites. Bookshop.org requires those service providers use your information only for the purposes Bookshop.org has authorized and protect your personal information at least to the same standards as Bookshop.org does.
Affiliates: Bookshop.org may share your contact information with an Affiliate if you visited Bookshop.org’s website via that Affiliate’s referral link, or you shopped from the Affiliate’s book lists or shop page on our Website. We will only share your information with Affiliates from whom you purchase.
Legal Matters; Safety: Bookshop.org reserves the right to disclose information Bookshop.org collects from or about you when doing so is reasonably necessary to comply with the law or law enforcement, to prevent fraud or abuse, or to protect the legal rights, property, or the safety of Bookshop.org, Users, or others.
Sale or Transfer of Assets: In the event that Bookshop.org is acquired by or merged with a third-party entity, or sells all or substantially all of its assets, Bookshop.org reserves the right, in any of these circumstances, to transfer or assign the information it has collected from and about Users as part of such merger, acquisition, sale, or other change of control. In the unlikely event of bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, Bookshop.org may not be able to control how your personal information is treated, transferred, or used.
Aggregate or Anonymous Information: Bookshop.org may also share information that is aggregated or anonymized in a way that it does not directly identify you.
Publicly Available Information: When Platform Sellers post Content, all Users will be able to view such Content. Platform Sellers should not post any information, including personal information, that they do not want to be publicly accessible.
5. Tracking and Other Technologies
A. Types of Cookies Bookshop.org Utilizes
Bookshop.org uses the following types of cookies and other technologies:
User Information: Bookshop.org will store a logged-in User’s information to keep track of items in your shopping cart and remember the customer information you gave us so that you do not have to re-enter it when making additional purchases.
Localization: Some cookies help Bookshop.org provide localized experiences, such as displaying the Website in the local language.
Site Features and Services: Certain cookies provide greater functionality to the Website and help Bookshop.org deliver our products and services.
Performance: Bookshop.org uses performance cookies to help route traffic between servers and understand how the Website is performing so Bookshop.org can provide Users with the best experience possible.
Analytics and Research: Cookies and other technologies also help Bookshop.org to understand, improve, and research features and content on the Website. These types of cookies include Google Analytics, which you can opt out of at https://tools.google.com/dlpage/gaoptout.
B. Limiting or Blocking Cookies and Our Do Not Track Policy
Your browser may give you the ability to control cookies, which may depend on the type of cookie, and browsers can be set to reject browser cookies. However, blocking or deleting cookies may prevent you from using most of the Website.
C. Web Beacons
The Website may contain electronic images known as web beacons (sometimes called single-pixel gifs) and are used along with cookies to compile aggregated statistics to analyze how the Website is used. Bookshop.org uses third parties to gather information about how you and others use the Website. For example, Bookshop.org will know how many Users access a specific page and what Website Content they clicked on. Bookshop.org uses this aggregated information1 to understand and optimize how the Website is used.
D. Social Media Plug-Ins
Bookshop.org may use certain social media plug-ins (e.g., Facebook, Twitter, YouTube) to allow you to communicate with such services and interact (e.g., “like” or “comment”) with various Website content. The social media plug-in will enable a direct communication between your end user device and the servers of the applicable social media provider, allowing the applicable social media provider to communicate with you and collect information about you browsing the Website. If you decide to use a social media plug-in, Bookshop.org may transfer your information to the social media provider, whether or not you have a registered user account with the applicable social media provider. Bookshop.org is not responsible for the content and the data collection on respective third-party websites or apps and that Bookshop.org neither controls the extent of personally information collected by the respective plug-in provider nor knows the processing’s purpose or the period your personally information will be retained. For further information as to how and for what purpose certain social network providers process your data, please see the relevant privacy policies of the applicable social media provider.
6. Your Rights
A. Information for California Residents
California residents may also take advantage of the following rights under the California Consumer Privacy Act (CCPA):
Access: You may request, up to two times each year, that we disclose to you the categories and specific pieces of personal information that we have collected from and about you, and how we used, disclosed, and sold that personal information.
Deletion: You may request that we delete any personal information that we have collected from or about you. Please note that we may not always be able to fully address your request, such as if we need the information to complete a transaction for you, to detect and protect against fraudulent and illegal activity, to exercise our rights, or to comply with a legal obligation.
Sale Opt-Out: Our company policy is not to sell your personal information. If we share your personal information to third parties, or to our affiliated companies that do not share common branding, you may opt out. To effect the opt out, please click on the Do Not Sell My Personal Information link https://mailchi.mp/bookshop.org/donotsell or contact us as instructed below.
To take advantage of these rights, please contact us at [email protected] or (800) 484-6309
We value your privacy and will not discriminate in response to your exercise of your privacy rights.
We collected the following categories of personal information within the previous 12 months: identifiers/contact information, commercial information, internet or other electronic network activity information, geolocation, and inferences drawn from the above.
We disclosed the following categories of personal information for a business purpose within the previous 12 months: identifiers/contact information, commercial information, internet or other electronic network activity information, geolocation, and inferences drawn from the above. We disclosed this personal information to the service providers described in Section 4, above.
We sold the following categories of personal information within the previous 12 months: identifiers/contact information, commercial information, internet or other electronic network activity information, geolocation, and inferences drawn from the above. We sold this personal information to the Affiliates described in Section 4, above.
B. Information for European Economic Area Residents
If you are a resident of the European Economic Area and would like to gain access to, update, erase, or restrict or withdraw any consent to the processing of certain information collected from and about you through the Website, please contact us at [email protected].
In addition, residents of the European Economic Area also have the right to object to the processing of such information and, in some instances, the right to request that we export, in a structured, commonly used, machine readable, and interoperable format, and transmit to another controller, such information.
The European Union’s General Data Protection Regulation (GDPR) requires a “lawful basis” for collecting and retaining personal information from citizens or residents of the European Economic Area. Bookshop.org’s lawful bases include:
Consent: In certain cases, you have affirmatively provided Bookshop.org with your consent to collect your personal information for a specific purpose, such as providing your name and email address when you register for an Account.
Contract: Bookshop.org may need your personal information to comply with contractual obligations to deliver the Website, such as fulfilling transactions for Merchandise.
Legal Obligations: Sometimes the law requires the collection and use of your information. For example, applicable tax laws may require Bookshop.org to retain records of payments made through the Website.
Legitimate Interests: This is a technical term that means Bookshop.org has a good and fair reason to use your information and in ways that do not harm your interests and rights, such as in a way that might reasonably be expected as part of running our business and that does not materially impact your rights, freedom, or interests. For example, Bookshop.org uses identity, device, and location information to prevent fraud and abuse and to keep the Website secure. We may also send you promotional communications about the Website and services subject to your right to opt out, as well as analyze how Users interact with the Website so Bookshop.org can understand better what elements do or do not work well, thereby facilitating improvements and developments in the quality of the online experience for all Users.
C. Email Notifications
Bookshop.org wants to communicate with you only if you want to hear from us. Bookshop.org will send you emails relating to your transactions on or through the Website, as well as service-related announcements when necessary. You may also elect to receive marketing emails, in accordance with your preferences, and from which you may opt out at any time by adjusting your notification settings. Bookshop.org will try to keep emails to a minimum and give you the ability to opt in to any marketing communications.
7. Links to Other Websites and Services
8. Data Retention
9. Cross-Border Data Transfers
Bookshop.org is based in the United States so your information will be collected and processed in the United States, which has its own laws governing data protection and access to it, including by the government. If you reside outside of the United States, be advised that the rules that protect your personal information under United States federal, state, and local law may differ from those of your home country.
With respect to any personal information that may be originally collected and stored in the European Economic Area, if and when Bookshop.org transfers your personal information to countries outside the European Economic Area, it will do so under the European Commission’s model contracts for the transfer of personal information to third countries (i.e., standard contractual clauses) pursuant to 2004/915/EC or 2010/87/EU (as appropriate). For a copy of these Standard Contractual Clauses, please contact Bookshop.org at [email protected]
10. Children’s Privacy
The privacy of children is of the utmost importance, and Bookshop.org is committed to complying with applicable privacy law, including the federal Children’s Online Privacy Protection Act (COPPA), the California Consumer Privacy Act (CCPA), and the European Union’s General Data Protection Regulation (GDPR). Bookshop.org does not knowingly collect or process personal information from children under the age of sixteen (16). If Bookshop.org ever discovers that it has inadvertently collected or processed personal information from a child under the age of sixteen (16) on or through the Website, Bookshop.org will take steps to delete such personal information from its records as soon as possible. We do not knowingly sell the personal information of minors under the age of sixteen (16) without such persons’ affirmative authorization as required by applicable law.
Bookshop.org takes security seriously, and the security of your personal data is important to us. Bookshop.org follows industry-standard practices to protect the data Bookshop.org collects and maintains, including using Transport Layer Security (TLS) to encrypt information as it travels over the Internet.
However, the nature of security risks is constantly evolving, as are the technical and organizational industry standards relating to management of those risks, and Bookshop.org cannot guarantee the complete security of any information it collects, stores, or uses.
13. Contact Us