1. Who is responsible for your information
BookDrop is the trading name of Rebeca Vargas, located at Ruta Nacional Treciaria 310, San José, Santa Ana, 10906, Costa Rica. That operator is responsible for the personal information described in this policy.
For privacy questions or requests, contact bookdropshop@gmail.com.
2. Information we handle
We handle information you provide when creating an account, ordering, contacting support, or suggesting collections. This includes your name, email address, account information, purchase history, order/payment references and status, and the content of your messages. We also maintain marketing preferences and unsubscribe records.
PayPal processes payment credentials. We do not receive or store full credit or debit card numbers or card security codes. PayPal may provide transaction, payer, and billing information needed to confirm payments, prevent fraud, handle refunds, and resolve disputes.
Our website and service providers may process technical information necessary to operate and protect the service, including IP addresses, browser information, login activity, and error or security logs. We do not use advertising trackers or track email opens or clicks.
3. Why we use information
We use information to create and manage accounts, fulfill orders, deliver download links, maintain purchase access, process refunds, respond to messages, protect the service, and meet applicable recordkeeping and legal obligations. Providing the information necessary for accounts and orders is required to use those features; subscribing to promotional emails is optional and is not required to create an account or purchase.
Where applicable law requires identification of a legal basis, we process necessary order/account information to perform our agreement with you, keep legally required records to meet legal obligations, and seek informed consent where required. Where permitted by applicable law, we rely on legitimate interests to secure the service and prevent fraud, balanced against your rights. We obtain express informed consent where required, including for promotional emails.
4. Daily deals and service emails
If you choose to subscribe using the optional signup checkbox, we will send daily emails featuring BookDrop deals and collections. You can unsubscribe at any time using the link in a promotional email or by contacting bookdropshop@gmail.com.
Unsubscribing does not close your account or remove access to purchases. We may still send necessary order, download, security, and account-service messages. We keep a record of your marketing preferences so that we can respect your choices.
5. Service providers and disclosure
We do not sell or rent customer personal information or share customer lists with other businesses for their own marketing.
We use providers to operate BookDrop. PayPal processes payments; Google Drive hosts downloadable files; Google/Gmail handles support email; SendGrid delivers transactional and promotional emails; and our hosting provider supports website operation and storage. They may process information needed for those services. PayPal also handles information under its own privacy terms.
We may disclose information when required by law or reasonably necessary to respond to valid legal requests, protect rights and security, or handle payment disputes. We limit disclosures to information appropriate for the purpose.
6. Cookies and similar technologies
We use cookies and similar technologies needed for account sign-in, shopping-cart functions, checkout, and security. PayPal may also use technologies necessary to provide and secure its payment service. We do not use advertising cookies or optional website analytics.
You can control or delete cookies through your browser settings. Blocking necessary cookies may prevent sign-in, shopping-cart, or checkout functions from working properly. PayPal explains its own use of data and cookies in its privacy information.
7. International processing
BookDrop operates from Costa Rica, and its service providers may process information in other countries. Those countries may have different privacy laws. For transfers subject to legal safeguards, we use the protections required by applicable law, such as appropriate contractual arrangements, and obtain consent where required. Contact us for information about providers and safeguards relevant to your data.
8. Retention and security
We retain account and purchase information as needed to operate your account and maintain access to purchases. We also retain information needed for applicable accounting, legal, dispute, and security purposes. We keep a limited unsubscribe record to respect requests not to receive marketing.
Resolved support messages are normally deleted 12 months after resolution, and routine security logs after 90 days. We may retain relevant information longer where needed to investigate an incident, resolve a dispute, or meet legal obligations. Financial records are retained for the period required by applicable law.
After account closure, we delete or anonymize information no longer needed for these purposes. Limited backup copies may remain until overwritten in the normal backup cycle and are not used for routine business activity. Marketing contact details are retained while you remain subscribed; a minimal suppression record is retained after you unsubscribe.
We use reasonable technical and organizational measures to protect personal information and limit access to those who need it to provide the service. No internet service or storage system can be guaranteed completely secure. Please keep your account credentials private and contact us if you suspect unauthorized access.
9. Your choices and rights
You may contact us to request access to or correction of your information, account closure, deletion, or withdrawal of consent. Depending on applicable law, you may also have rights to object to or restrict processing and receive a portable copy of your information. We will respond under the requirements and timelines that apply to your request.
We may need proportionate information to verify your identity. Some records may need to be retained to comply with law or resolve existing transactions or disputes; we will explain relevant limitations. Withdrawing consent does not change the lawfulness of processing already carried out on that basis.
Closing your account affects access to your purchase dashboard. Contact us before closure if you need help retrieving your downloads. You may also complain to Costa Rica's data-protection authority, PRODHAB, or another competent authority where applicable.
10. Adults only
BookDrop is intended for people aged 18 or older. We do not knowingly create accounts for or collect personal information from people under 18. Contact us if you believe a minor has provided information so that we can investigate and take appropriate action.
11. Updates
We will update this policy when our practices change and revise its effective date. We will provide additional notice and obtain further consent where required. A policy update alone does not authorize a new use that requires your consent.
Privacy contact: bookdropshop@gmail.com.