Privacy Policy

1. Data Controller

This website (“InkFireBook”) is owned and operated by:

For the purposes of Regulation (EU) 2016/679 (“GDPR”), Claudia Cappelluti acts as the Data Controller.

Privacy-related requests may be sent to support@inkfirebook.com.

2. Scope of This Privacy Policy

This Privacy Policy explains how InkFireBook collects, uses, stores and protects personal data when you:

• visit the InkFireBook website;
• create or use a Customer account;
• purchase a custom editorial service or Digital Product;
• upload manuscripts, images or other project materials;
• download purchased files;
• contact us through email or live chat;
• subscribe to marketing communications; or
• interact with the website’s checkout, payment and consent tools.

3. Personal Data We Collect

3.1 Information You Provide

Depending on how you use the website, we may collect:

• first and last name;
• email address;
• billing address, country and state;
• account login information;
• order and transaction details;
• manuscripts, images and other uploaded project files;
• project instructions and revision requests;
• messages sent by email, live chat or account communication tools;
• marketing preferences and consent records; and
• information supplied in refund, cancellation, support or legal requests.

3.2 Automatically Collected Information

When you visit or use the website, we may automatically collect:

• IP address;
• browser type and version;
• device and operating-system information;
• pages visited and actions performed;
• date and time of access;
• referring website or source;
• security and fraud-prevention information; and
• cookie and consent preferences.

4. Customer Accounts and Project Files

When you create a Customer account, we process the information required to authenticate you, maintain account security, display order history and provide access to projects and downloads.

When you purchase a Custom Service, we may process manuscripts, covers, images, instructions, proofs, revision requests and final Deliverables for the purposes of performing the contract.

Access to uploaded project files is restricted to authorised persons and service providers who require access to provide, secure or maintain the service.

Please do not submit sensitive personal data unless it is genuinely necessary for the requested service.

5. Digital Product Purchases and Download Activity

When you purchase or access a Digital Product, we may process:

• the Digital Product purchased;
• order and transaction identifiers;
• the date and time when access was provided;
• download status and download count;
• account and email delivery status;
• IP address, browser and device information associated with access;
• records of consent to immediate supply;
• records acknowledging the loss of the right of withdrawal where applicable; and
• support, replacement-link or reactivation requests.

We use this information to supply the purchased content, restore access, provide technical support, prevent unauthorised sharing, manage disputes and chargebacks, and demonstrate compliance with consumer-protection requirements.

6. Payment Information

Payments may be processed through third-party payment providers, including Stripe and PayPal.

InkFireBook does not directly store complete payment-card details.

Payment providers may process identifying, billing, device, fraud-prevention and transaction information under their own privacy terms and legal obligations.

7. How and Why We Use Personal Data

We may process personal data to:

• create and administer Customer accounts;
• process orders and payments;
• perform Custom Services;
• deliver and restore access to Digital Products;
• communicate about projects, orders, revisions and support requests;
• manage cancellations, refunds, complaints, disputes and chargebacks;
• protect the website, accounts and files from fraud, abuse and unauthorised access;
• maintain accounting, tax and transaction records;
• analyse website performance where valid consent has been provided;
• send marketing communications where you have subscribed or where otherwise lawfully permitted; and
• establish, exercise or defend legal claims.

8. Legal Bases for Processing

Depending on the context, InkFireBook relies on one or more of the following legal bases:

• Performance of a contract: to process an order, provide a service, deliver a download or respond to a contractual request.
• Compliance with legal obligations: including accounting, tax, consumer-protection and record-keeping duties.
• Legitimate interests: including website security, fraud prevention, service administration, business protection and the establishment or defence of legal claims, where those interests are not overridden by your rights.
• Consent: for non-essential cookies, analytics, marketing communications and other activities where consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

9. Analytics, Cookies and Similar Technologies

InkFireBook may use Google Analytics and other website technologies to understand traffic, improve performance and measure the effectiveness of website content.

Non-essential analytics or marketing technologies are activated only after the required consent has been provided through the cookie banner.

You may reject non-essential cookies or change your preferences at any time through the consent-management tool.

Further information is available in the Cookie Policy.

10. Email Communications and Marketing

InkFireBook may use email tools, including Mail Mint, to send:

• order and payment confirmations;
• download links and account notifications;
• project, revision and service updates;
• customer-support messages; and
• newsletters or promotional communications where valid consent has been provided or where otherwise permitted by law.

You may unsubscribe from marketing communications at any time by using the unsubscribe link contained in the message or by contacting us.

Transactional messages necessary to fulfil an order or provide a requested service may still be sent after marketing consent is withdrawn.

11. Live Chat and Customer Support

If you use the website’s live chat or support tools, we may collect your name, email address, message content, technical details and related conversation history.

This information is used to respond to requests, resolve technical issues, maintain service records and improve customer support.

Please avoid sharing unnecessary sensitive personal information through chat.

12. Data Sharing and Service Providers

Personal data may be shared only where reasonably necessary with service providers that support the operation of InkFireBook, such as:

• website hosting and technical-maintenance providers;
• WooCommerce and related ecommerce tools;
• payment providers, including Stripe and PayPal;
• email, customer-support and communication providers;
• analytics providers where consent has been obtained;
• accounting, tax, legal or professional advisers; and
• public authorities where disclosure is legally required.

Service providers may process personal data only for the relevant service and in accordance with applicable data-protection requirements.

InkFireBook does not sell personal data.

13. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where required, such transfers are protected through an adequacy decision, approved contractual safeguards or another lawful transfer mechanism under the GDPR.

14. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including:

• for the duration of a Customer account or active project;
• for the period needed to provide downloads, support and revisions;
• for up to ten years where required by Italian accounting or tax law;
• for the applicable limitation period where records may be needed to establish or defend legal claims;
• until consent is withdrawn for consent-based marketing; and
• for a limited period in technical backups, security logs and fraud-prevention records.

Download, consent and transaction records may be retained where necessary to demonstrate delivery, manage disputes and comply with consumer-protection obligations.

15. Storage and Deletion of Uploaded Content

Uploaded files may be stored on active systems and included in secure automated backups.

After completion of a service, you may request deletion of eligible uploaded content by contacting support@inkfirebook.com.

Following a verified request, eligible files will be removed from active systems. Residual copies may remain temporarily in secure backups until overwritten according to the normal backup cycle.

Some records may still be retained where required for legal, accounting, fraud-prevention or dispute-management purposes.

Customers should retain their own backup copies of manuscripts and final Deliverables.

16. Security Measures

InkFireBook uses reasonable technical and organisational measures designed to protect personal data, including:

• encrypted website connections;
• access restrictions;
• account authentication;
• security monitoring;
• software updates; and
• backup and recovery procedures.

No online system can guarantee absolute security. You are responsible for protecting your password and notifying us promptly of suspected account misuse.

17. Your GDPR Rights

Subject to the conditions and exceptions provided by law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent at any time; and
• lodge a complaint with a competent data-protection authority.

To exercise a right, contact support@inkfirebook.com. We may request reasonable information to verify your identity before acting on a request.

18. Minors

InkFireBook services are intended for adults or for users acting with valid parental or guardian consent where permitted by law.

If we become aware that personal data has been collected from a minor without the required authorisation, we may delete or restrict that information.

A parent or legal guardian may contact us to request access, correction or deletion of a minor’s eligible personal data.

19. United States and California Privacy Disclosures

19.1 Categories of Information and Recipients

For United States users, including California residents, the categories of personally identifiable information collected through the website are described in Sections 3, 4, 5 and 6 of this Policy. They may include identifiers, contact details, account information, transaction records, project files, communications, device information and online activity information.

The categories of service providers and other recipients with whom information may be disclosed are described in Section 12 and may include hosting, ecommerce, payment, email, support, analytics, accounting, tax, legal and security providers.

19.2 Reviewing or Correcting Information

Customers may review or update certain account information through their InkFireBook account where that function is available. Requests to access, correct or delete eligible information may also be sent to support@inkfirebook.com.

We may request reasonable information to verify the identity and authority of the person making the request.

19.3 Material Changes

Material changes to this Privacy Policy will be communicated by publishing the revised version on this page and updating the effective date. Where additional notice is required by applicable law, it will be provided through an appropriate method, such as email, account notice or a prominent website notice.

19.4 Do Not Track Signals

Some web browsers transmit “Do Not Track” signals. Because there is no universally accepted standard governing how websites should interpret every Do Not Track signal, InkFireBook does not currently respond to those signals as a separate automated instruction.

Non-essential analytics and marketing technologies are instead managed through the website’s consent-management tool and may also be controlled through browser settings.

19.5 Third-Party Tracking

Third-party analytics, payment, communication, advertising or embedded-service providers may collect information about online activities over time and across different websites when their technologies are active.

Where prior consent is required, non-essential technologies are activated only after the relevant consent has been provided. Further information is available in the Cookie Policy.

19.6 State Privacy Laws

Residents of certain United States states may have additional privacy rights where the relevant law applies to InkFireBook and to the particular processing activity.

InkFireBook does not represent that it currently meets the statutory thresholds that make every United States comprehensive state privacy law, including the California Consumer Privacy Act, applicable to the business.

InkFireBook does not sell personal data for monetary consideration. Where an applicable law grants an eligible right to access, correct, delete, obtain a copy of, or object to particular processing of personal information, requests may be sent to support@inkfirebook.com.

Where an applicable law requires recognition of a valid browser-based opt-out preference signal, InkFireBook will process that signal as required by law.

20. Changes to This Privacy Policy

InkFireBook may update this Privacy Policy to reflect changes in legal requirements, business activities, service providers or website functionality.

The updated version will be published on this page with a revised “Last updated” date.

21. Contact

Questions, complaints and privacy-rights requests may be sent to: