Effective Date: January 28, 2026
Welcome to y-minshu.org. I am committed to protecting your personal data and being transparent about how it is collected and used. This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
The data controller for this website is Oliver Grant Carrasco, located at 15 Fieldhead Terrace, Woodhouse, Leeds LS7 1AY, United Kingdom. For any data-related inquiries, you can reach me at [email protected].
2. The Data We Collect
We may collect and process the following types of personal data:
- Identity Data: Name, surname, and username.
- Contact Data: Email address, phone number, and shipping/billing address.
- Financial Data: Payment card details (processed securely via encrypted third-party gateways; we do not store this data on our servers).
- Technical Data: IP address, browser type, time zone setting, and operating system (collected via cookies).
- Usage Data: Information about how you use our website, products, and services.
3. How and Why We Use Your Data
We only use your data when the law allows us to. Most commonly, we use it for:
- Contract Fulfillment: To process and deliver your book orders.
- Legitimate Interests: To send you updates about new “No-BS” resources and financial insights (provided you have opted in).
- Legal Compliance: To comply with tax and accounting laws in the UK.
- Website Improvement: To analyze site traffic and ensure our content is relevant to you.
4. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (usually 6 years for tax purposes in the UK).
5. Third-Party Disclosures
We do not sell your data. We only share information with trusted third parties to run our business:
- Service Providers: Courier services (Royal Mail/DHL) and email marketing platforms.
- Payment Processors: Stripe/PayPal for secure transactions.
- Analytics: Google Analytics to monitor site performance.
6. International Transfers
If we transfer your data outside the UK (e.g., using a US-based email provider), we ensure that a similar degree of protection is afforded to it by using specific contracts approved for use in the UK.
7. Your Legal Rights
Under the UK GDPR, you have the right to:
- Access your data.
- Correct any inaccurate information.
- Request erasure of your data (“Right to be forgotten”).
- Object to or restrict the processing of your data.
- Data Portability (requesting a transfer of your data).
To exercise these rights, please contact [email protected].
8. Cookies
You can set your browser to refuse all or some browser cookies. If you disable cookies, please note that some parts of this website may become inaccessible or not function properly.