Privacy Policy

MyPuzzleBook ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share information when you visit our website, create a puzzle book or contact us. It is written to comply with the EU General Data Protection Regulation (GDPR) and equivalent privacy laws.

1. Who we are

The data controller for personal data collected via this website is MyPuzzleBook. You can reach us at simon@brandguys.se for any privacy questions or requests.

2. What information we collect

• Order information: name, shipping address, email address and the configuration of your puzzle book.
• Payment confirmation: we receive a transaction reference from our payment processor (e.g. Stripe). We do not store full card details on our servers.
• Contact form submissions: your name, email address and the content of your message.
• Lead/email capture: if you submit your email for updates or to save a draft, we store that email and the source page.
• Analytics events: aggregated, pseudonymous events such as page views, "Start Building" clicks, book creation, checkout clicks and purchase completion. We assign a random session identifier; we do not store IP addresses or device fingerprints.
• Uploaded cover images: images you upload to design a custom cover. These are used solely to produce your book.

3. Why we collect it (legal basis)

• Performance of a contract — to print and ship the book you ordered.
• Legitimate interests — to operate, secure and improve the service, including basic analytics and fraud prevention.
• Consent — when you voluntarily submit your email to receive updates.
• Legal obligation — to retain transaction records for tax and accounting purposes.

4. How long we keep your data

We keep order and transaction data for as long as required by applicable accounting laws (typically 7 years in the EU). Analytics events are kept for up to 24 months. Contact submissions and marketing emails are retained until you ask us to delete them.

5. Who we share it with

• Our print and fulfilment partner, solely to produce and ship your book.
• Our payment processor (Stripe), to process payments securely.
• Our hosting and database provider, to operate the website and store data.
• Authorities when legally required.

We do not sell your personal data to third parties.

6. International transfers

Some of our service providers may process data outside the EU/EEA. When this happens we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten").
• Restrict or object to processing.
• Request portability of your data in a machine-readable format.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact simon@brandguys.se. We will respond within 30 days.

8. Cookies and tracking

We use only essential storage required for the cart/session and a random session identifier for analytics. We do not use advertising trackers or cross-site tracking cookies.

9. Security

Data is stored on secure infrastructure with encryption in transit (HTTPS) and at rest. Access is limited to staff who need it to operate the service.

10. Children

The service is not directed to children under 16. We do not knowingly collect data from minors.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above.

12. Contact

For any privacy-related question or request, please email simon@brandguys.se.