1. Who handles your data
The controller for personal data collected through this website is REFLOW SOLUTIONS LTD, a company registered at Companies House (England and Wales) under number 16559023, with its registered office at 167-169 Great Portland Street, London, England, W1W 5PF.
For anything concerning personal data, including the rights set out in section 7, write to contato@reflowsolutionsbook.com.
2. What we collect
This site was built to gather as little as possible. In practice, personal data passes through in four situations.
2.1 When you browse
Our server keeps a standard access log: IP address, date and time, the page requested, the response code, your browser and operating system. Every web server does this. We use it for security and for working out what has broken.
2.2 When you use the basket
The titles you add are stored in your own browser, using a facility called local storage. That data is never sent to us and never leaves your device. Clear your browsing data and it disappears.
2.3 When we work out which currency to show
So that prices appear in a sensible currency, the site makes one request to api.country.is, a third-party service that returns the country associated with your IP address. Your IP address is visible to that service in order for it to answer.
The result — a two-letter country code — is stored in your browser for 30 days so the request is not repeated on every page. If you pick a currency manually, your choice takes priority and the lookup stops mattering. If the request fails or you have blocked it, the site falls back to a guess based on your browser's own language and time zone, which involves no network request at all.
2.4 When you write to us
The contact and newsletter forms on this site do not post to a server of ours. Pressing send opens your own email application with the message filled in, and you choose whether to send it. From that point we receive what you wrote — typically a name, an email address and the message — in our inbox.
Once purchasing is live we will also process what is needed to issue a receipt and deliver the file, such as a name and email address.
3. Why we use it
- To reply to you: dealing with the question or request you sent.
- To deliver what you bought: sending the file and the receipt to the address you gave.
- To show a sensible price: choosing a currency for your location.
- To meet legal duties: keeping accounting and tax records for the required period.
- For security: spotting abuse, intrusion attempts and faults from the access logs.
- For optional updates: emailing you about new titles, only if you asked, with an exit at any time.
We do not sell personal data. We do not use it for advertising profiles and we do not pass it to third parties for that purpose.
4. Lawful basis
Depending where you are, the UK General Data Protection Regulation and, for visitors in Brazil, the Lei Geral de Proteção de Dados (Law 13.709/2018) apply. The bases we rely on:
- Performance of a contract — to deliver what you bought and support it afterwards.
- Consent — for the mailing list, withdrawable whenever you like.
- Legal obligation — for keeping financial records.
- Legitimate interests — for site security and for showing prices in a usable currency, both narrow in scope and involving no automated decisions about you.
5. Third parties
Three outside parties are involved in running this site:
- Our hosting provider, whose server keeps the access logs described in 2.1.
- Google Fonts, which supplies the typefaces. Loading any page sends your IP address to Google.
- api.country.is, which returns a country code for your IP address so we can pick a currency, as described in 2.3.
When we begin taking payments, the payment provider will process what the transaction requires. This policy will be updated to name that provider before any charge is ever taken.
6. How long we keep it
- Messages you send: for as long as we are dealing with them, and up to 2 years afterwards for reference.
- Purchase records: for the period required by tax law.
- Server logs: up to 12 months.
- Country code for currency: 30 days, in your browser only.
- Mailing list: until you ask to come off it.
7. Your rights
At any time you may:
- Ask whether we hold data about you, and ask for a copy
- Have anything incomplete, inaccurate or out of date corrected
- Ask us to delete data held on the basis of consent
- Ask for your data to be transferred to another provider
- Withdraw consent you gave for messages
- Object to processing you consider unjustified
- Complain to a supervisory authority — the ICO in the United Kingdom, or the ANPD in Brazil
Write to contato@reflowsolutionsbook.com and we will respond within one month.
8. Security
The site is served only over an encrypted connection (HTTPS) with a valid certificate. Access to the server is restricted and key-based. No measure removes risk entirely, but we keep the environment patched and the exposed surface small.
9. Children
This site is not aimed at anyone under 18 and we do not knowingly collect data about children. If we find such data, we delete it.
10. Changes to this policy
This policy will change when the site does — particularly once payments are integrated. The date at the top always marks the version in force. Anyone on our mailing list will be told about significant changes by email.