Scope and responsibility
This notice explains how Wishloom Books handles personal information when you browse the store, sign in, place or receive an order, access a digital product, submit a review, or contact customer care. Wishloom Books is responsible for the store activities described here; a linked payment, identity, delivery, or external service may also provide its own notice.
Information we collect
Depending on how you use the service, we may collect:
- Account information: name, email address, profile identifier, and sign-in status supplied through Wishloom identity services.
- Order information: products, amount, payment method, payment reference, order status, invoices, refund details, and purchase history.
- Delivery and contact information: recipient name, email, phone number, address, delivery instructions, and saved addresses.
- Digital fulfilment information: entitlements, file access, download time, and controls used to protect paid content.
- Customer-care content: enquiry topic, message, order reference, attachments or evidence you choose to provide, and our response history.
- Reviews and preferences: ratings, review text, wishlist items, and choices associated with your account.
- Technical and security information: session and security records reasonably needed to operate the service, prevent abuse, diagnose faults, and protect accounts.
Our storefront analytics are designed to use daily aggregate event counts rather than advertising profiles or customer-level browsing histories.
How we use information
We use personal information to:
- provide accounts, carts, checkout, payments, delivery, downloads, returns, and refunds;
- communicate about an order or answer a request;
- verify transactions and protect customers, content, and the service from fraud or misuse;
- maintain records, resolve disputes, enforce applicable terms, and meet legal obligations;
- improve reliability, accessibility, product selection, and customer experience using appropriate measurement; and
- send marketing only where it is permitted and you have the choices required by applicable law.
When we share information
We share only what is reasonably necessary with service providers that help us operate, such as identity, hosting, email, payment, fraud prevention, storage, and delivery providers. A delivery partner needs recipient and address information to deliver a physical order; a payment provider receives transaction information needed to process or verify payment.
We may also disclose information where required by law, a lawful authority, or legal process; to establish or defend legal rights; to protect a person or the service from serious harm or fraud; or as part of a properly managed business transfer. We do not sell personal information as a data-broker product.
Cookies and similar storage
The service uses essential cookies or browser storage for sign-in, security, carts, order access, preferences, and request protection. Blocking essential storage may prevent checkout or account features from working. If non-essential measurement or marketing technology is introduced, we will provide the notice and choices required by applicable law.
Retention
We retain information for only as long as reasonably needed for the purposes described above, including fulfilment, support, security, accounting, tax, dispute, and legal requirements. Retention periods differ by record type. We delete, anonymise, or securely isolate information when it is no longer required, subject to lawful exceptions and backup cycles.
Security
We use organisational and technical safeguards appropriate to the nature of the information, including access controls, encryption in transit, protected sessions, limited administrative access, and operational monitoring. No online service can promise absolute security. Protect your account credentials and notify us if you suspect unauthorised use.
Children and family purchases
Wishloom Books offers books and learning materials for children, but purchases and account management are intended for adults or persons with the legal authority and capacity to transact. A parent or guardian should manage a child's use and should not ask a child to submit unnecessary personal information.
Your choices and requests
Subject to applicable law and appropriate identity verification, you may ask to access, correct, update, or delete personal information; object to or restrict certain processing; withdraw consent where processing depends on consent; or ask how information has been handled. Some records must be retained for transactions, security, legal claims, or compliance.
Submit a Privacy request through our contact page. Describe the request and the account or order involved, but do not send a password or payment credential.
International service providers
Some trusted providers may process information in another country. Where that occurs, we use reasonable contractual, security, and governance measures appropriate to the information and applicable requirements.
Changes to this notice
We may update this notice when our practices, services, or legal obligations change. The effective and last-reviewed dates identify the current version. Material changes will be communicated in an appropriate way.