GB Publications (collectively "Merchant Store Name", "we", "us") respect your privacy. We ensure that your personal data is protected when you use our website or place an online order with us.
This Privacy Policy explains how we collect, use, and share your personal information when you visit or make a purchase from gb-publications.sumupstore.com (the “Site”). It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions, you can contact us via the contact form at the bottom of this page.
1. Who we are
GB Publications provides goods and services and is the data controller of the personal data you provide when you order goods or use our Site.
Our Data Protection Contact can be reached via the contact form at the bottom of this page.
2. Personal data we collect
Order Information
When you make or attempt to make a purchase, we collect:
Name
Billing and shipping address
Email address
Phone number
Payment information (note: we do not store or have access to your full payment card details — these are processed securely by our payment provider, SumUp)
Device Information
When you visit the Site, we automatically collect certain information about your device, including:
Web browser and IP address
Time zone and country
Cookies stored on your device
Pages or products you view, referring websites or search terms, and your interactions with the Site
We collect this Device Information using:
Cookies – data files placed on your device (see Section 6 below)
Log files – track actions on the Site (IP address, browser type, ISP, date/time)
Web beacons / tags / pixels – used to analyse browsing behaviour and advertising performance
3. How we use your personal information
We use Order Information to:
Process and fulfil orders (including payments, shipping, invoices, and confirmations)
Communicate with you about your order
Screen for potential fraud or risk
Send you marketing communications (only if you have opted in — see Section 6)
We use Device Information to:
Improve and optimise our Site
Generate analytics on browsing and purchasing behaviour
Assess the effectiveness of marketing and advertising campaigns
Screen for fraud and security risks
Our legal bases for processing are:
Contract: to fulfil the order you place with us
Legitimate interests: e.g., fraud prevention, improving services
Consent: for marketing communications and non-essential cookies
4. Sharing your personal information
We share your personal data only where necessary:
SumUp powers our online store and processes payments securely.
Google Analytics helps us understand how customers use our Site. You can read how Google uses your information here and opt out here.
Service providers under contract (e.g., couriers) who support our business operations. These providers may only use your data in connection with the services they perform for us.
We may also share data:
To comply with legal obligations (e.g., tax reporting, lawful requests)
To protect our rights and property
5. International transfers
Some providers may process your data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place, such as:
Transfers to countries recognised as providing adequate protection by the UK Government; or
Standard contractual clauses or equivalent safeguards.
6. Cookies & marketing
Cookies
We use essential cookies to operate the Site and optional cookies (e.g., analytics, advertising) to improve your experience.
Where required by law, we will ask for your consent before placing non-essential cookies on your device.
You can manage cookies via your browser settings. For more information, visit www.allaboutcookies.org.
Marketing
We will only send you marketing emails or communications if you have explicitly opted in.
You can unsubscribe at any time by clicking “unsubscribe” in our emails or contacting us.
7. Your rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Request correction or deletion of your data
Restrict or object to our processing of your data
Request transfer of your data to another provider (data portability)
Withdraw consent (where processing is based on consent)
Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk
To exercise your rights, please contact us using the contact form below.
8. Data retention
We keep your personal data only as long as necessary:
Order Information is retained for as long as required to fulfil your order, comply with legal obligations (e.g., tax), or resolve disputes.
After this period, data will be securely deleted or anonymised.
9. Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for operational reasons. Updates will be posted on this page.
10. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us via the contact form at the bottom of this page.