Privacy Policy

1. Who We Are

Bookfluence is operated by Utterly Social Ltd, a company registered in England and Wales. We are the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:

• Email: [email protected]
• Website: bookfluence.io

2. What Data We Collect

We collect the following types of personal data when you use our website and services:

Information you provide directly

• Account and order information - your name, email address, and billing details when you make a purchase.
• Questionnaire responses - the information you provide about yourself, your book, your audience, and your goals through our author questionnaire. This may include details about your personal background, professional experience, and creative work.
• Communications - any messages you send to us via email or through our website.

Information collected automatically

• Website usage data - pages visited, time spent on pages, click behaviour, and referring URLs, collected via Google Analytics.
• Device and browser information - IP address, browser type, operating system, and screen resolution.
• Advertising data - interactions with our ads and website activity tracked via the Meta (Facebook) Pixel for advertising measurement and optimisation.
• Cookies and similar technologies - see Section 7 for full details.

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose	Legal Basis
To create and deliver your personalised strategy document	Performance of a contract
To process your payment	Performance of a contract
To send order confirmations and delivery updates	Performance of a contract
To send marketing emails about bookfluence products and updates	Consent (you can unsubscribe at any time)
To analyse website usage and improve our services	Legitimate interest
To measure advertising effectiveness	Consent (via cookie preferences)
To respond to your enquiries and provide customer support	Legitimate interest

4. Who We Share Your Data With

We do not sell your personal data to third parties. We share your data only with the following trusted service providers who help us operate our business:

Provider	Purpose	Data Shared
Stripe	Payment processing	Name, email, billing details, transaction data
Funnel Launch	Email communications, CRM, and website hosting	Name, email, order history, questionnaire responses
Google Analytics	Website analytics and performance monitoring	Anonymised usage data, IP address (anonymised), device info
Meta (Facebook) Pixel	Advertising measurement and audience targeting	Website activity, device info, IP address

Each of these providers processes data in accordance with their own privacy policies and is contractually obligated to protect your information.

5. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order and payment records - 6 years, as required by UK tax and accounting regulations.
• Questionnaire responses and strategy documents - for as long as your account is active, or until you request deletion.
• Marketing email preferences - until you unsubscribe or request removal.
• Website analytics data - retained in accordance with Google Analytics and Meta data retention settings (typically 14-26 months).

6. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access - you can request a copy of the personal data we hold about you.
• Right to rectification - you can ask us to correct any inaccurate or incomplete data.
• Right to erasure - you can ask us to delete your personal data, subject to our legal obligations to retain certain records.
• Right to restrict processing - you can ask us to limit how we use your data in certain circumstances.
• Right to data portability - you can request your data in a structured, machine-readable format.
• Right to object - you can object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent - where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies and Tracking

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us understand how you use our website.

Essential cookies

These are necessary for the website to function properly, such as maintaining your session and processing payments. They cannot be disabled.

Analytics cookies (Google Analytics)

We use Google Analytics to understand how visitors interact with our website. This helps us improve our content and user experience. Google Analytics uses cookies to collect anonymised data about page views, session duration, and user behaviour. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Advertising cookies (Meta/Facebook Pixel)

We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising campaigns, deliver more relevant ads, and build custom audiences. This pixel may collect data about your website activity, device information, and IP address. You can manage your ad preferences through your Facebook Ad Settings.

Managing cookies

You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption on all pages of our website
• Secure payment processing through Stripe (PCI DSS compliant)
• Access controls limiting who within our organisation can view your data
• Regular review of our data handling practices

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

9. International Transfers

Some of our third-party service providers (such as Stripe and Google) may process your data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with UK data protection law.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised date shown below.

We encourage you to review this policy periodically. Continued use of our website and services after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us at:

Last updated: 28 March 2026