Basket, items: 0
Search
Menu

Privacy policy

Last updated: 21 October 2026

This page explains what personal information Nottingham Books collects when you use nottinghambooks.co.uk, why we
need it, who we share it with and what your rights are. We’ve tried to keep it short and plain.

Who we are

Nottingham Books is an online bookshop run by LeftLion Ltd, a company registered in England and Wales (company number
08661252), registered office Unit 49, Freckingham Street, Nottingham NG1 1DQ. We are the “controller” of your
personal information under UK data protection law. Our registration number with the Information Commissioner’s
Office (ICO) is ZB189632.

If you have any questions about your information, email shop@leftlion.co.uk.

The short version

  • We use your details to take your order, post it to you and keep the records the law requires.
  • Card payments are handled by Stripe. We never see or store your full card number.
  • We only send you our newsletter if you sign up for it, and you can unsubscribe at any time.
  • We don’t sell your information, and we don’t use advertising cookies.
  • We only use analytics cookies if you agree to them.

What we collect and why

When you place an order

We collect your name, postal address, email address, phone number, what you ordered and how much you paid. We use
these to process and post your order, send you order emails, deal with any problems with delivery, and handle
returns of damaged items.

Legal basis: we need this information to carry out our contract with you. We keep order and invoice records
because tax law requires it.

When you pay

Payments are processed by Stripe. Your card details go straight to Stripe and are not stored on our website. Stripe
may also use information about your device and the payment to help prevent fraud. Stripe tells us whether the
payment worked and gives us limited details such as the card type and last four digits.

Legal basis: contract, and our legitimate interest in preventing fraud.

If you create an account

We store your login details, saved addresses and order history so you can check your orders and check out faster next
time.

Legal basis: contract. You can ask us to close your account at any time.

If you contact us

If you email us or use our enquiry form, we use your name, email address and message to reply to you.

Legal basis: our legitimate interest in answering your questions.

If you sign up to our newsletter

We store your email address so we can send you news about new books and offers. Every email has an unsubscribe link,
and you can also ask us to remove you at any time.

Legal basis: your consent.

How you use our website (only if you agree)

If you accept analytics cookies, we use Google Analytics 4 to count visits and see which pages and books people look
at, so we can improve the shop. Google Analytics doesn’t store your full IP address, and we’ve turned off its
advertising features. If you don’t accept, no analytics cookies are set.

Legal basis: your consent, which you can change at any time from the cookie settings link at the bottom of
every page.

Keeping the website secure

Like most websites, our servers record technical information such as your IP address and browser type. We use
Cloudflare Turnstile on our login, registration, checkout and enquiry forms to check that a real person is filling
them in, and security software that logs suspicious activity.

Legal basis: our legitimate interest in keeping the website and your information secure.

Who we share your information with

We only share what each company needs to do its job for us:

  • Stripe processes card and wallet payments (such as Apple Pay and Google Pay).
  • Royal Mail and other couriers deliver your order. Most parcels go by Royal Mail; larger or
    international parcels may go with another courier. We give the carrier your name and address and, where they
    need it for delivery, your phone number or email address.
  • Postmark sends our order and account emails.
  • SendGrid (Twilio) sends our newsletter, if you have signed up.
  • Cloudflare provides the Turnstile check on our forms.
  • Hetzner hosts our website and its data, in Helsinki, Finland.
  • Google provides Google Analytics, if you have agreed to analytics cookies.

We may also share information if the law requires it, for example with HMRC or the police.

Information sent outside the UK

Some of these companies, including Stripe, Postmark, SendGrid, Cloudflare and Google, are based in or use servers in the
United States or the European Economic Area. Where your information leaves the UK, it is protected by safeguards
approved under UK law, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the
EU-US Data Privacy Framework.

How long we keep it

  • Orders and invoices: six years from the end of the financial year they relate to, as tax law
    requires.
  • Accounts: until you ask us to close your account, or after two years without use.
  • Newsletter: until you unsubscribe.
  • Enquiries: up to two years after we last hear from you.
  • Analytics: Google Analytics keeps its data for 14 months.
  • Website and security logs: deleted automatically, normally within 90 days.

Cookies

These cookies are needed for the website to work, so they are always on:

  • Basket and checkout (WooCommerce) remember what’s in your basket.
  • Login (WordPress) keeps you signed in to your account.
  • Payments (Stripe) help prevent fraud during checkout.
  • Bot checks (Cloudflare Turnstile) help tell people from automated spam.

These cookies are only set if you agree:

  • Analytics (Google Analytics 4, cookies named _ga and _ga_…) help us
    understand how the shop is used.

We don’t use advertising cookies. You can change your cookie choice at any time from the cookie settings link at the
bottom of every page, and you can block or delete cookies in your browser settings, though the basket and checkout
won’t work without the essential ones.

If you ordered before 1 October 2026

Until 1 October 2026, Nottingham Books was run by The Bookcase in Lowdham. When LeftLion took on the website, customer
accounts and order history were transferred to us so we could continue to serve existing customers. If you’d rather
we deleted your old account, email us and we will.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the information we hold about you;
  • ask us to correct anything that’s wrong;
  • ask us to delete your information (we may need to keep order records for tax purposes);
  • ask us to limit how we use it, or object to how we use it;
  • ask for your information in a format you can take elsewhere;
  • withdraw your consent to the newsletter at any time.

To do any of these, email shop@leftlion.co.uk. We’ll reply within one month.

If you’re unhappy with how we’ve handled your information, please tell us first so we can try to put it right. You
also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we use your information, we’ll update this page and the date at the top.