Privacy notice

1. Who processes your data?

Eerik Potter is the controller of personal data relating to book sales and delivery. Send data-related questions and requests to eerik@integraltruth.ee.

2. What do we ask for, and why?

• Name, email and phone number: to fulfil the order, confirm payment, arrange delivery and communicate about the order.
• Parcel locker selection: to send the book to the correct locker. We do not ask for your home address for parcel locker orders.
• Name for a dedication: only to write the requested dedication. This is optional; please do not include other personal or sensitive information.
• Technical order and payment identifiers, amount, quantity, payment status and shipping status: to confirm the purchase, prevent duplicate actions and track fulfilment.

We cannot fulfil an order without the necessary contact and delivery details. Data is not sold or used for this website’s newsletters, advertising or a Digital Intelligence profile. Buying a book does not create a user account.

3. Legal basis

Preparing an order, processing payment, writing a dedication and sending the book are based on steps needed to enter into a contract and to perform it. Data required for tax and other legal obligations is processed on the basis of those obligations. Limited data may be processed for legitimate interests in resolving disputes, securing purchases and checking repeat requests, taking the buyer’s rights into account.

This notice explains data use; placing an order does not request consent to marketing.

4. Where is order information stored?

Order contact details, parcel locker information and dedications are stored with Stripe. Completed form details are sent to Stripe to prepare the order before payment is confirmed, so Stripe may also hold information about unfinished orders.

The website runs on the Internet Computer (ICP) network. Form data passes through the application backend to Stripe. The application’s persistent order register stores only order and payment references, time, amount, quantity and payment and shipping status. It does not store names, phone numbers, emails, locker details or dedications. The temporary checkout-attempt cache uses a hash instead of the form contents to compare repeated requests.

To dispatch a book, the seller retrieves the relevant order from Stripe in a protected admin view. A packing slip may be printed or shipping details entered into the carrier’s service. Access is limited to those who need it to fulfil the order. Full card numbers and security codes are entered in Stripe’s payment form and do not pass through our checkout backend.

5. Service providers and data transfers

Stripe processes data to provide payment and order services. For some activities Stripe acts as a processor; for payment security, fraud prevention and legal obligations it also acts as an independent controller. Stripe may process data outside the European Economic Area using the safeguards described in its agreements. See Stripe’s privacy policy and data processing agreement.

The selected carrier — Omniva, DPD or SmartPosti — receives the recipient and delivery details needed to send the parcel. Dedications and card information are not shared with the carrier. ICP infrastructure and, when you contact us by email or Facebook, the relevant service provider also process data needed to operate their services. The Facebook link is an ordinary external link, not a tracking pixel installed on this website.

6. Retention

Under normal operation, the ICP technical checkout-attempt cache is retained for up to approximately three hours; browser checkout-session identifiers are kept for the lifetime of the tab session. New checkout attempts do not cache form contents persistently. Network requests are also processed under the rules of the ICP infrastructure.

Order information is retained according to fulfilment needs, potential returns and claims, and applicable legal obligations. The application does not automatically delete paid orders. Unsubmitted, unpaid drafts are removed from the ICP register after Stripe confirms that the session has expired, usually after about an hour. This does not delete Stripe’s data. You can request deletion at eerik@integraltruth.ee; requests are assessed against the legal basis for retaining the data.

Stripe may retain data it processes as an independent controller for longer, for example to comply with law or prevent fraud. The seller cannot promise deletion contrary to Stripe’s legal obligations.

7. Browser storage and payment form

Your language choice is saved in this browser’s local storage (localStorage) so future visits open in your preferred language. You can change it using the language selector or remove it by clearing this site’s browser data.

The website does not use separate marketing or visitor analytics tools. Checkout uses tab session storage for the checkout attempt and technical identity so that refreshing the page does not immediately create another payment session. The ICP connection uses a technical environment cookie.

Stripe’s payment form on the checkout page may use cookies and device information to process payments and prevent fraud. See Stripe’s cookie policy. These technologies do not mean the seller sends you marketing. The English book page does not load the payment form.

8. Your rights

You can request access to your data, correction of inaccurate data and, where provided by law, deletion, restriction of processing or data portability. You may object to processing based on legitimate interests. Some information may need to be retained for legal obligations or ongoing claims.

Write to eerik@integraltruth.ee. Requests are normally answered within one month; you will be notified within that period of any justified extension. If necessary, we will ask for the minimum additional information needed to verify your identity. If you believe your rights have been infringed, you may contact the Estonian Data Protection Inspectorate.