Legal

Privacy Policy

Last updated:

BookBridge is committed to protecting your privacy and handling your personal data responsibly. This policy explains what information we collect, why we collect it, how we use it, and your rights under UK data protection law.

1. Who We Are

BookBridge ('we', 'us', 'our') is the data controller responsible for your personal data. We operate the BookBridge platform, an accessible reading service that brings together audiobooks, digital reading, and AI narration.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at [email protected].

2. What Personal Data We Collect

We collect the following categories of personal data:

Identity and contact data: your name and email address, provided when you join our waitlist or submit an enquiry through our contact form.

Usage and technical data: your IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and other diagnostic data collected automatically when you visit our website.

Communications data: the content of messages you send us through our contact form or by email, including any information you choose to include.

Preference data: information about your reading preferences or accessibility needs that you voluntarily provide when joining the waitlist.

3. How We Collect Your Data

We collect personal data in the following ways:

Directly from you: when you complete our waitlist form, submit a contact enquiry, or communicate with us by email.

Automatically: through cookies and similar tracking technologies when you browse our website. Please see Section 8 (Cookies) for more detail.

4. Why We Use Your Data and Our Legal Basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

Consent (Article 6(1)(a)): We process your name and email address to send you updates about BookBridge, including launch announcements and platform news, where you have given us your explicit consent by joining our waitlist. You may withdraw this consent at any time.

Legitimate interests (Article 6(1)(f)): We process usage and technical data to operate, maintain, and improve our website and platform. We have assessed that our legitimate interests are not overridden by your rights and freedoms, given the limited nature of the data and the reasonable expectation that a website operator analyses how its site is used.

Contract performance (Article 6(1)(b)): Where you have entered into an agreement with us (for example, when the platform launches and you create an account), we will process your data as necessary to fulfil that contract.

Legal obligation (Article 6(1)(c)): We may process your data where necessary to comply with a legal obligation, such as responding to a lawful request from a public authority.

5. How We Share Your Data

We do not sell your personal data to third parties.

We may share your data with trusted third-party service providers who assist us in operating our website and platform, such as hosting providers, email delivery services, and analytics tools. These providers act as data processors on our behalf and are contractually required to handle your data securely and only for the purposes we specify.

We may disclose your data if required to do so by law, court order, or in response to a valid request from a public authority.

If BookBridge is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. International Transfers

Some of our third-party service providers may be based outside the UK or European Economic Area (EEA). Where we transfer your personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), Standard Contractual Clauses (SCCs), or transfers to countries with an adequacy decision from the UK Secretary of State.

You may request details of the specific safeguards we rely on for international transfers by contacting us at [email protected].

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Waitlist data (name and email): retained until the BookBridge platform launches and you create an account, or until you request removal from the waitlist, whichever is sooner.

Contact enquiry data: retained for up to 2 years from the date of your enquiry, to allow us to respond to follow-up questions and maintain a record of communications.

Technical and usage data: retained in aggregated or anonymised form for up to 26 months for analytics purposes.

When your data is no longer required, we will securely delete or anonymise it.

8. Cookies

Our website uses cookies and similar technologies to enhance your experience and help us understand how our site is used.

Strictly necessary cookies: essential for the website to function correctly. These cannot be disabled.

Analytics cookies: help us understand how visitors interact with our website by collecting information anonymously. We only place these cookies with your consent.

You can control your cookie preferences through our cookie consent banner when you first visit the site, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

Right of access: you have the right to request a copy of the personal data we hold about you (a Subject Access Request).

Right to rectification: you have the right to ask us to correct inaccurate or incomplete personal data.

Right to erasure ('right to be forgotten'): you have the right to ask us to delete your personal data in certain circumstances, for example where the data is no longer necessary for the purpose it was collected.

Right to restrict processing: you have the right to ask us to restrict how we use your data in certain circumstances.

Right to data portability: where we process your data by automated means on the basis of your consent or a contract, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to object: you have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. You also have an absolute right to object to processing for direct marketing purposes.

Rights related to automated decision-making: you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects.

Right to withdraw consent: where we rely on your consent to process your data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one calendar month. We may need to verify your identity before processing your request.

10. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO).

ICO website: ico.org.uk | Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first at [email protected].

11. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration.

All data transmitted between your browser and our website is encrypted using TLS (Transport Layer Security). Access to personal data is restricted to those who have a legitimate need to process it.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.

12. Children's Privacy

BookBridge is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us at [email protected] and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised 'last updated' date.

Where changes are material, we will take reasonable steps to notify you — for example, by sending an email to waitlist members or displaying a prominent notice on our website.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:

Email: [email protected]