Legal notice
This policy explains what personal data we process when you visit or buy from RunReads (runreads.com), what we use it for, and what rights you have. Because the store is run from Spain, we follow the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD), wherever you are.
Who is responsible
The data controller is the owner of the online store RunReads, based in Madrid, whose full details are set out in the Legal notice. Contact: hello@runreads.com.
What data we process
- Purchase and contact data: name, email address, billing address, country, and the products you buy.
- Payment data: handled by Shopify and its payment providers. We never see your full card number.
- Browsing data: IP address, device, browser, and how you use the site, collected through cookies and similar technologies according to your cookie choices.
- Communications: anything you send us by email or through the contact form.
- Newsletter: your email address, only if you sign up for new-book updates.
What we use it for, and on what legal basis
- To process your order, deliver your book, and answer your questions: performance of the contract.
- To meet legal obligations, such as tax and accounting rules: legal obligation.
- To send you new-book updates, if you sign up: your consent, which you can withdraw at any time using the unsubscribe link in every email.
- Non-essential cookies (analytics and advertising): your consent, managed through the cookie banner.
- Store security and fraud prevention: legitimate interest.
How long we keep it
For as long as needed for the purpose it was collected for, and then for the periods required by law (for example, tax and commercial law). Newsletter data is kept until you unsubscribe.
Who we share it with
With Shopify, the platform that hosts the store and processes orders, acting as our data processor; with the payment providers that handle your transaction; and with public authorities when the law requires it. We do not sell your personal information and we do not share it for cross-context behavioral advertising beyond what your cookie choices allow.
Shopify also processes some data as a controller for its own services; see its consumer privacy policy.
International transfers
Some of these providers may process data outside the European Economic Area, including in the United States. Such transfers are made with the safeguards required by the GDPR, such as European Commission adequacy decisions or standard contractual clauses.
Your rights
You can ask to access, correct, or delete your data, object to or restrict its processing, receive a portable copy, or withdraw your consent, by emailing hello@runreads.com. Residents of some US states may have similar rights under their state laws, and we will honor these requests too. If you are unhappy with how we handled your request, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority in your country.
Children
The store is not directed at children under 14 (or under 13 in the United States), and we do not knowingly collect their data.
Changes to this policy
We may update this policy. The current version and its date are always published here.
Last updated: October 20, 2026.