Privacy and personal data protection policy

[LEGAL NAME OF THE CONTROLLER], identified by [TAX ID], domiciled at [ADDRESS] and reachable at contact@srtsociety.com, is the controller of the personal data collected through this site.

To process your order we collect only: full name, email address, phone number, country, state, city and shipping address, plus any delivery notes you choose to add.

We never collect or store card details or banking credentials. That information is captured and processed directly by Stripe, Inc., the Society's payment gateway, in its own secure environment. Payment is completed on a Stripe page, not on this site.

Payment is not made on this site. Pressing “Buy the book” takes you to a payment page hosted by Stripe, Inc., where you enter your contact details, your shipping address and your card details. Stripe collects and processes that data in its own environment, and the Society then consults it from its dashboard to prepare and dispatch the shipment.

No card data is ever captured or stored on this site. Stripe acts as a processor on behalf of the Society and applies its own privacy policy, available at stripe.com. The rest of this policy applies unchanged: the same fulfilment processors, the same retention and the same rights.

While the pre-order is not open, this site does not charge: it offers a form so we can tell you when it is. If you use it, we collect only your email address, your mobile number and your country. Nothing else: we do not ask for your name or address, because they are not needed to notify you.

Those three items are used for one purpose only: to tell you that the pre-order has opened and which countries can order from. They are not used for any other communication, they are not shared with third parties and they are not combined with any other file.

We ask for the mobile number because the notice may also be sent by WhatsApp: an opening email stands a fair chance of landing in the promotions folder and never being read.

You can ask us to delete these details at any time by writing to contact@srtsociety.com, without giving any reason. We keep them until the pre-order opens and you decide whether to buy, and we delete them whenever you ask.

We use your data to: (i) process and confirm payment; (ii) prepare and dispatch your order, which includes passing the shipping details to the distributing bookstore and the courier; (iii) communicate with you about the status of your order; and (iv) meet legal and accounting obligations.

We do not use your data for third-party advertising and we do not sell it.

We share strictly necessary data with: [DISTRIBUTING BOOKSTORE NAME] (fulfilment), the assigned courier, and our infrastructure provider, which may store the information on servers outside Colombia under contractual security and confidentiality terms. Payment is processed by Stripe, Inc., which collects your data directly on its own page and stores it outside Colombia under the same contractual terms.

We keep order data for [PERIOD — e.g. 5 years] for accounting and warranty purposes, then delete or anonymise it.

You may access, update and correct your data; request proof of the authorisation you gave; be informed of how it has been used; file complaints with the Superintendency of Industry and Commerce; and withdraw your authorisation or request deletion where no legal or contractual duty prevents it.

To exercise any of these rights, write to contact@srtsociety.com. We answer queries within ten (10) business days and claims within fifteen (15) business days, as required by law.

We apply reasonable technical and administrative measures to protect your data: encrypted transmission (HTTPS), restricted database access, and separation of payment-gateway credentials from the application code.

If this policy changes, we will publish the updated version on this page with its new date.