Privacy Policy

DRAFT — needs licensed-attorney review before relying on this in any jurisdiction. This template was prepared as a starting point. Legal requirements vary by US state and country; you (the operator) are responsible for tailoring this to your actual processing.

Effective date: 2026-06-23
Operator: Not Just a Puzzle (Ferrai White / Not Just a Puzzle, LLC if applicable)
Contact: webmaster@donlinestore.com

1. What this Policy covers

This Privacy Policy describes what personal information Not Just a Puzzle (“we”, “us”, “our”) collects when you visit notjustapuzzle.com (the “Site”), why we collect it, how we use it, with whom we share it, and the rights you have over your data.

2. Information we collect

We collect only what we need to run the Site and respond to you. Specifically:

  • Information you give us directly
    • Reader Club email signups — your email address (and the timestamp + IP at the moment of signup, for spam-prevention).
    • Order information — when you buy a product, our payment processor (Amazon, Stripe, or PayPal, depending on the purchase route) collects the billing details required to complete the transaction. We receive a record of the order but not your full payment card number.
    • Contact form submissions — anything you choose to type into a contact form (typically: name, email, message).
    • Comments — if you leave a comment, the email and name you provide are stored alongside the comment.
  • Information collected automatically
    • Standard web-server logs (IP address, browser user-agent, requested URL, referrer, timestamp). Retained for up to 30 days for security and debugging.
    • Strictly-necessary cookies (described in our Cookie Policy).

Information we do NOT collect: we do not use Google Analytics, Facebook Pixel, Hotjar, or any third-party advertising trackers as of the effective date. We do not sell, rent, or trade personal information to third parties.

3. Why we use it (legal bases)

Purpose Legal basis (GDPR / UK GDPR)
Send Reader Club emails you signed up for Consent
Process orders, ship products, handle refunds Contract performance
Respond to contact-form messages Legitimate interest (replying to you)
Server logs for security and debugging Legitimate interest (Site integrity)
Legal compliance (e.g. tax records) Legal obligation

4. How long we keep it

  • Reader Club emails: until you unsubscribe. After unsubscribe, your email is suppressed (kept in a “do-not-email” list) so we don’t accidentally re-add you.
  • Orders: 7 years (US tax-record retention) or longer if law requires.
  • Comments: indefinitely, unless you ask us to delete them.
  • Contact form messages: 24 months, then deleted.
  • Server logs: 30 days.

5. Who we share it with

We share personal information only with the service providers we need to run the Site:

  • Hosting: DreamHost (US)
  • Email delivery: WP Mail SMTP (transactional) + potentially MailerLite or similar (Reader Club newsletters)
  • Payments: Amazon Associates, Stripe (US), or PayPal (US) — they receive payment information directly under their own privacy policies
  • Search engines: We submit URLs (not personal data) to Bing IndexNow, Google, and similar indexing services
  • Legal requirements: If we receive a valid subpoena or court order, we may have to comply.

We do not share personal information for advertising or marketing by third parties.

6. Your rights

Wherever you live, we treat these as universal rights. Some are codified by GDPR (EU/UK), CCPA/CPRA (California), and similar laws elsewhere; we extend them to all visitors.

  • Right to access — request a copy of the personal information we hold about you.
  • Right to deletion / erasure — ask us to delete your personal data (subject to legal retention obligations such as tax records).
  • Right to correction — fix anything that’s wrong.
  • Right to withdraw consent — unsubscribe from emails at any time; the link is in every email.
  • Right to portability — receive your data in a machine-readable format.
  • Right to object — to processing based on legitimate interest.
  • Right to non-discrimination — we will not deny service, charge more, or provide a lesser experience because you exercised a privacy right.

To exercise any of these rights: visit /your-data/ or email webmaster@donlinestore.com. We respond within 30 days.

7. Children

The Site is intended for adults. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If you believe we have inadvertently collected information from a child, please contact us and we will delete it.

8. Security

We use HTTPS site-wide, hashed passwords, and security best practices for our hosting and admin access. No method of transmission over the internet is 100% secure; we will notify affected users in the event of a confirmed data breach involving personal information, in line with applicable breach-notification laws.

9. International transfers

Our servers and processors are located in the United States. If you access the Site from outside the US, your personal information will be transferred to the US.

10. Changes to this Policy

If we make material changes, we will update the effective date above and, where required, notify Reader Club subscribers by email.

11. Contact

Questions, requests, or complaints: webmaster@donlinestore.com.