Privacy Policy

1. Who We Are

Arcopix Limited ("we", "us", "our") is the data controller for personal data collected through this website. We are registered in Hong Kong under Business Registration number 77975044, with a registered address at 2/F Tower 1 Tern Centre, 237 Queen's Road Central, Sheung Wan, Hong Kong.

For privacy enquiries, contact us at: [email protected]

2. What Personal Data We Collect

2.1 Order and Shipping Data

• Full name
• Delivery address (street, city, postcode, country)
• Email address
• Phone number (if provided)

2.2 Payment Data

Payment is processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment processing: stripe.com/gb/privacy.

2.3 Email Marketing (Optional)

If you request the opening pages of the book, we collect your email address to fulfil that request. You may unsubscribe at any time via the link in any email we send.

2.4 Cookies and Usage Data

We use cookies and similar tracking technologies to understand how visitors use our website. See Section 6 for full details.

3. How We Use Your Data

• To fulfil your order — processing your purchase, arranging delivery, and sending order confirmation
• To communicate with you — responding to enquiries, sending tracking information, handling returns
• To send the opening pages — if you requested them via the email form
• To improve our website — analysing usage patterns via cookies
• To comply with legal obligations — tax records, fraud prevention

4. Legal Basis for Processing (UK/EU GDPR)

• Contract performance — processing your order and delivering the book
• Legitimate interests — website analytics, fraud prevention
• Consent — email marketing (you can withdraw consent at any time)
• Legal obligation — tax and accounting records

5. Who We Share Your Data With

We share your data only where necessary:

• Bookvault — our print and fulfilment partner, who receives your name and delivery address to ship your order
• Stripe — payment processing
• Email service providers — for transactional and marketing emails
• Legal authorities — if required by law

We do not sell your personal data to third parties.

6. Cookies

We use the following types of cookies:

• Essential cookies — required for the website to function (e.g. cart, session)
• Analytics cookies — to understand visitor behaviour (e.g. Google Analytics)
• Marketing cookies — to measure ad campaign performance (e.g. Google Ads conversion tracking)

You can manage or disable cookies through your browser settings at any time. Disabling analytics or marketing cookies will not affect your ability to purchase.

7. Data Retention

We retain order data for 7 years for tax and accounting purposes. Email marketing data is retained until you unsubscribe. We will delete your data on request, subject to legal retention obligations.

8. Your Rights (UK/EU)

Under UK and EU GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time for consent-based processing

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Your Rights (California — CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know — what personal information we collect, use, disclose, and sell
• Right to Delete — request deletion of your personal information
• Right to Opt-Out — we do not sell personal information, so this right does not currently apply
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

We do not collect nervous system or biometric data.

To submit a CCPA request, email [email protected] with the subject line "CCPA Request".

10. International Transfers

Your data may be processed outside the UK/EU (including Hong Kong and the United States) by our service providers. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the UK ICO or European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions: