Privacy policy

1. Data controller

Controller

-

Address

-

Contact

contact@thequietliberation.com

No data protection officer (DPO) has been appointed, as such an appointment is not required given the nature and the volume of the processing carried out.

2. Data collected

Only the data strictly necessary to sell and deliver the book is processed:

• Email address, entered by you on the Stripe payment page: this is the address the file is sent to.
• Transaction data passed on by Stripe: session identifier, amount, currency, payment status and date, billing country.
• Server technical logs: IP address, date and time of requests, generated automatically by the host.

No card details are received or stored by this site. That information is entered directly on Stripe's infrastructure and never passes through our servers.

No user account is created, no advertising profile is built, and no data is sold, rented or passed on to third parties for commercial purposes.

3. Purposes and legal bases

• Delivering the book you bought and answering requests relating to that delivery - legal basis: performance of the contract (art. 6.1.b GDPR).
• Processing payment and preventing fraud - legal basis: performance of the contract and legitimate interest (art. 6.1.b and 6.1.f).
• Keeping accounting records relating to the sale - legal basis: legal obligation (art. 6.1.c).
• Keeping the site secure and working via technical logs - legal basis: legitimate interest (art. 6.1.f).

No data is used for marketing purposes. Buying the book will not sign you up to a newsletter.

4. Recipients and processors

Data is accessible only to the controller and to the technical providers strictly necessary to run the service:

• Stripe - payment processing and transmission of the billing email address. Stripe acts as an independent controller for payment operations.
• Email delivery provider (SMTP) - routing the message containing the book.
• alwaysdata - hosting of the site and of the technical logs.

5. Transfers outside the European Union

Some providers, in particular Stripe, may process data outside the European Union. Such transfers are covered by the safeguards required by the GDPR, in particular the standard contractual clauses adopted by the European Commission.

6. Retention periods

• Delivery email address: kept for as long as needed to deliver the book and handle any complaint, then deleted at the latest twelve (12) months after purchase.
• Accounting records relating to the sale: kept for ten (10) years, in accordance with article L123-22 of the French Commercial Code.
• Server technical logs: kept for a maximum of twelve (12) months.

7. Cookies and analytics

This site sets no cookies and uses no analytics, tracking or advertising tools. No consent banner is therefore needed.

The payment page is hosted by Stripe, which applies its own cookie policy, outside this site.

8. Your rights

Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights over your data:

• right of access: to confirm whether data concerning you is being processed, and to receive a copy of it;
• right to rectification of inaccurate or incomplete data;
• right to erasure of your data, subject to legal retention obligations;
• right to restriction of processing;
• right to object to processing based on legitimate interest;
• right to data portability for the data you provided;
• right to set instructions concerning what happens to your data after your death.

To exercise these rights, write to contact@thequietliberation.com from the email address used for the purchase, or quoting that address. You will receive an answer within one month at the latest. Proof of identity may be requested where there is reasonable doubt as to who is making the request.

9. Complaints

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07, www.cnil.fr, or with the supervisory authority of the country you live in.

10. Changes to this policy

This policy may be updated to reflect changes to the service or to the applicable rules. The date it was last updated appears at the top of this page.