Privacy Policy

1. Introduction

BookBazaar ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

This policy applies to all information collected through our website (bookbazaar.ee) and any related services, sales, marketing, or events (collectively, the "Services").

2. Information We Collect

2.1 Personal Data You Provide

When you join our waitlist, we collect:

• Email Address: We collect your email address when you sign up for our waitlist.
• Timestamp: The date and time of your signup is automatically recorded.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• Browser type and version
• Operating system
• IP address (anonymized)
• Pages visited and time spent on pages
• Referring website addresses

3. How We Use Your Information

We use the information we collect for the following purposes:

• Waitlist Management: To maintain our waitlist and notify you when BookBazaar launches or when we have updates to share.
• Communication: To send you information about our services, product launches, and special offers (you can opt out at any time).
• Service Improvement: To understand how users interact with our website and improve our services.
• Legal Compliance: To comply with applicable laws and regulations.
• Security: To detect, prevent, and address technical issues and fraudulent activity.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the specific context:

• Consent: When you sign up for our waitlist, you provide explicit consent for us to process your email address.
• Legitimate Interests: We process certain data based on our legitimate interests in operating and improving our services, provided these interests do not override your data protection rights.
• Legal Obligations: We may process data to comply with legal requirements.

5. How We Store and Protect Your Data

5.1 Data Storage

Your data is stored securely using industry-standard practices:

• Data is encrypted both in transit (using SSL/TLS) and at rest
• We use reputable third-party service providers with strong security practices
• Access to personal data is restricted to authorized personnel only

5.2 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Waitlist Data: Retained until you unsubscribe or request deletion, or until 2 years after our last contact with you
• Analytics Data: Anonymized and aggregated data may be retained indefinitely for statistical purposes

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you (e.g., email service providers, analytics providers). These parties are obligated to keep your information confidential.
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to our processing of your data based on legitimate interests.
• Right to Withdraw Consent: You can withdraw your consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us at:

9. Cookies and Tracking Technologies

Currently, our website does not use cookies or similar tracking technologies. If this changes in the future, we will update this privacy policy and provide appropriate notice and consent mechanisms.

10. Third-Party Links

Our website may contain links to third-party websites (such as social media platforms). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email if the changes are significant
• Post a notice on our website homepage for 30 days

We encourage you to review this privacy policy periodically to stay informed about how we protect your data.

13. Data Controller Information

14. Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

For Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

15. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us: