Who we are

Bodies in the Bookshop Limited is the data controller and responsible for your personal data (“us”, “we” or “our” in this privacy notice) and the owner of the Bodies in the Bookshop brand.

The aim of this privacy policy is to give you information about how we process your personal data when you use our website www.bodiesinthebookshop.co.uk.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using our website, we will use it in accordance with this privacy policy. We may change this policy from time to time by updating this page. You should regularly check this page to ensure that you are happy with any changes.

Our websites are not intended for use by children and we do not knowingly collect information relating to children.

How to contact us

If you have a question about this privacy policy or our use of your personal data please contact at info@bodiesinthebookshop.co.uk

The data we collect about you

Personal data is information about you from which you can be identified. It doesn’t include anonymous data. We may collect, use, store and transfer different kinds of personal data about you depending on our relationship with you.

Collecting data enables us to sell our products and services to you and to make our product and brand experience relevant to you. Dependent on where we meet you or how you come across us, we can collect different kinds of data.

There are a few different ways in which we collect data, here are the ways that we can collect data from you:

  • Our website
  • Online purchases
  • In store events
  • In store purchases

Our website and online purchases

If you sign up to our newsletter, we collect:

  • Email Address
  • First Name
  • Last Name
  • Postal Address (if provided)

This is for the purpose of sending you information about our products.

You provide us with your contact details and details of queries if you contact us through our contact form, we use this information to respond to your query.

When you use our website, we will also collect the following information about you automatically to provide you with a better shopping experience:

  • Your device IP address – to set your default options such as currency and language, and to protect our website from fraud or malicious software.
  • The type of device you are using to access our website – to improve your shopping experience by displaying our website in the best way for your device.

If you make a purchase, we collect:

  • Payment details (these are not stored)
  • First Name
  • Last Name
  • Delivery Address
  • Billing Address
  • Email Address
  • Phone Number
  • Information about your purchases

This is to enable us to process your order, take payment and deliver your order to you and to send you information about our products (if you have agreed we can do so).

In store events and purchases

If you sign up to our newsletter in store, which could be at an event we host or when you make a purchase in store, we collect:

  • Email address (if provided)
  • First name
  • Last name
  • Postal address (if given)
  • Information about your purchases (if you provide an email address)

We will use this information to send you information about our products (if you have agreed we can do so) and/ or to process your transaction.

How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to process your personal data to perform a contract with you or to enter into a contract with you
  • Where processing your personal data is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests
  • Where we need to comply with a legal obligation
  • Where you have consented to us sending you email marketing (for example where you sign up to our newsletter). You can withdraw consent for marketing at any time by contacting us or by clicking on the unsubscribe link in an email message. If you withdraw your consent it will not affect the legality of the processing before you do so.

Data security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online and in store.

To keep your personal data secure and prevent you getting any unwanted marketing, we only provide access to customer data to designated employees. Where necessary, customer data is communicated securely through encrypted channels. In the rare event of a data breach, we follow strict procedures to make you aware of any compromises to the data we hold about you.

We do not process payments ourselves for purchases on our website but use the following service providers to do so, which helps to keep your data secure:

  • PayPal – an alternative secure and convenient payment gateway

These are the environments in which we store payment details and billing information.

Marketing communications by email

When you opt in to receive our newsletter or emails, we use the information you have given us to send you carefully selected information about our products.

Unsubscribing from marketing communications

If you’d like to unsubscribe from any of our marketing communications, you can do so by clicking the ‘unsubscribe’ link in any of our marketing emails, by emailing us at info@bodiesinthebookshop.co.uk or you can call us on 012233 485163. This does not apply to communications about orders – you will still continue to receive emails relating to any orders you have placed.

Sharing your personal data

We may share your personal data with various third party providers in order to process and fulfil orders, serve you with marketing information (if you have agreed to receive it), remember if you have opted out of marketing communications, to receive feedback, to advertise our products to provide you our customers with a high level of service and more generally to run our business:

  • Paypal for processing payments for online purchases
  • Third party service providers acting as processors of your personal data who provide services to us including providers of email marketing services, review platforms and courier services.
  • Professional advisors who provide services to us
  • HMRC and other regulators and authorities in the United Kingdom who may require reporting of processing activities in some circumstances

All third parties must respect the security of your personal data and treat it in accordance with the law. Third party service providers may not use your personal data for their own purposes but only in accordance with our instructions.

How long we keep your personal data for

We will keep your personal data for as long as we need it for the purposes we’re collecting it for, including to satisfy any legal, regulatory, tax, accounting or reporting requirements. If we receive a complaint, we may retain it for longer or if we think there may be litigation arising from our relationship with you.

We consider various factors when deciding how long to keep your data, including the amount, nature and sensitivity of the data as well as applicable legal, regulatory, tax, accounting or other requirements.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information – your rights as a data subject

Under certain circumstances you have rights under data protection laws in relation to your personal data. These do not apply in all circumstances. You can:

Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:

If you want us to establish the data’s accuracy.
Where our use of the data is unlawful but you do not want us to erase it.
Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Complaint to Information Commissioner

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), which is the UK regulator for data protection issues: www.ico.org.uk. Please do consider contacting us first thought if you have concerns so that we can put things right.

If you would like to exercise any of these rights you write to us by email: info@bodiesinthebookshop.co.uk, or at 1A Botolph Lane, Cambridge. CB2 3RD. If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

Changes to our Privacy Policy

Regularly reviewing this page ensures that you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

This privacy policy was last updated on 28th July 2024.