Privacy Policy

We collect the following categories of personal information:

• Identifiers — name, email address, IP address
• Contact information — shipping address (required for checkout; saved to your account when you are signed in)
• Commercial information — order history, items purchased, return requests, saved wishlists
• Financial information — payment details are processed by Stripe and never stored on our servers
• Internet activity — pages visited, browser type, referring URL, session data, application error traces
• Search queries — text entered into the search bar, stored with a timestamp and (for signed-in users) your user ID, used to improve catalog coverage and search results
• Book requests — if you submit a “Notify me” request for a title we do not carry, we store your email address and the requested ISBN to send you one notification if that title becomes available
• Communications — messages sent via contact forms or email

• To process and fulfill your orders
• To send order confirmations, shipping updates, and return status emails
• To respond to your questions and support requests
• To improve our catalog, pricing, and site experience
• To detect and prevent fraud and abuse
• To comply with legal obligations

We do not sell your personal information to third parties.

We use essential cookies to keep your shopping cart active and maintain your login session. These cookies are necessary for the site to function and cannot be disabled. We do not currently use third-party advertising or tracking cookies.

We share data with the following trusted services only as needed to operate the site. Each is bound by its own privacy policy and data processing agreements:

• Stripe — payment processing (PCI-DSS compliant; stripe.com/privacy). Your card details are tokenised by Stripe and never stored on our servers.
• Resend — transactional email delivery (order confirmations, shipping updates, return notifications, newsletter)
• Mapbox — address autocomplete during checkout. Partial address input is sent server-side to Mapbox to return suggestions; your full address is never sent until you select it.
• Sentry — application error monitoring. Error reports may include your user ID, the page you were on, and anonymised request data. No payment or password data is included.
• Anthropic — AI-powered book description generation (admin-only feature). Book metadata (title, author, ISBN) may be sent to Anthropic to generate catalog descriptions. No personal customer data is sent.

We retain your account and order information for as long as your account is active or as required by law (typically 7 years for financial records). You may request deletion of your account by contacting us; some data may be retained to comply with legal obligations or resolve disputes.

• Search logs — deleted automatically after 90 days
• Book request notifications — pending requests are retained until fulfilled; once the notification email is sent, the request is deleted within 30 days
• Saved shipping address — retained on your account until you update or delete it in Settings, or close your account
• Order and payment records — retained for 7 years to comply with financial recordkeeping requirements

We use industry-standard measures to protect your data, including encrypted connections (TLS), access controls, and third-party PCI-DSS compliant payment processing. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

In the event of a data breach reasonably likely to result in risk to affected individuals, we will notify affected users within 72 hours of discovery via email, and will notify applicable regulatory authorities as required by law.

Depending on where you live, you may have rights to access, correct, or delete your personal data. To exercise these rights, email us at privacy@pristinetext.com. We will respond within 30 days.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete — request deletion of your personal information, subject to certain exceptions
• Right to correct — request correction of inaccurate personal information
• Right to opt-out — we do not sell personal information, so no opt-out is required; we also do not use personal information for cross-context behavioral advertising
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, email privacy@pristinetext.com with the subject line “CCPA Request.” We may need to verify your identity before processing the request.

Pristine Text is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@pristinetext.com and we will delete it promptly.

Pristine Text operates from the United States. If you are located outside the US, including in the European Union or United Kingdom, your personal information will be transferred to and processed in the United States. By using the site, you consent to this transfer. EU and UK users have rights under the GDPR — contact us to exercise them.

We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the site at least 14 days before the change takes effect.

Questions about this policy? Email us at privacy@pristinetext.com.