Privacy notice

What we hold

When you place an order we keep your name, email address, delivery address and what you bought, because we cannot send you a parcel or answer a query about it otherwise. Before that, all we hold is a basket identified by a cookie — no name attached to it.

What we do not hold

Card details never reach us. When payment goes live it will be handled entirely by Stripe; no card number, expiry or security code will pass through an Ishaat server or be stored in our database.

We do not sell or share your details, and we do not build an advertising profile from what you browse.

Cookies

Two, both necessary: one holds your basket, one carries the token that stops a third-party site posting a form on your behalf. Neither is set with a domain, so neither can be read by any other site on ishaat.org. See cookies.

How long

Order records are kept for six years, which is what charity accounting requires. A basket that is not turned into an order is deleted after thirty days. Ask us to delete anything else and we will.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to bookshop@ishaat.org.