Privacy policy

Data controller

SIA Blusa Entertainment, registration No. 40203726725, Latvia. E-mail: my@blusabook.com.

What we collect and why

• Order data — e-mail address, name, billing country, the books you bought, amount and date. Needed to deliver your e-books and send download links (performance of the contract, GDPR Art. 6(1)(b)) and to keep accounting records (legal obligation, Art. 6(1)(c)).
• Download records — IP address, browser type and time of each download. Used to prevent link sharing and abuse (legitimate interest, Art. 6(1)(f)). Kept for 12 months.
• Review invitation — about a week after your purchase we send one e-mail asking for a review of the books you bought (legitimate interest). Just ignore it if you are not interested; we do not send newsletters without your consent.
• Reviews — if you write one: your first name, country, rating, text and optional photo. Published on the site until you ask us to remove them.
• Campaign source — if you reach us through a tagged link (for example from one of our YouTube videos or posts on X), the link’s campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term, such as “youtube” or “forbidden-energy”) are saved with your cart when you go to checkout — also if you then do not complete the payment — and with your order, so we can see which channels lead to purchases (legitimate interest, Art. 6(1)(f)). The tags describe the link, not you; we never store click IDs such as fbclid or gclid. They are kept with the cart and order records.
• Messages — if you write to us, we keep the correspondence as long as needed to help you.

Payments

Payments are handled by Stripe Payments Europe, Ltd. (Ireland), which acts as an independent controller for payment data. We never receive your full card number. Stripe's privacy policy: stripe.com/privacy.

Who else processes your data

• Our hosting provider (servers located in the EU), which runs this website and stores the order database.
• Our e-mail provider, which delivers order and download e-mails.

We do not sell your data and do not share it for advertising.

How long we keep it

Order and accounting records are kept for the period required by Latvian accounting law. Download records are deleted after 12 months. Unfinished checkouts (carts that never became an order, including the campaign source and any e-mail entered for a promo code) are deleted after 90 days. An e-mail address typed into the “Lost your download?” form is used only to limit repeated requests and is deleted within 2 days. Deletion runs once a day, so a record may stay up to one day longer than stated. Reviews stay online until you ask us to remove them.

Cookies and local storage

We use no advertising or profiling cookies. Your cart is saved only in your own browser (local storage) so it is still there when you come back, and the only always-present cookie is a technical login cookie for our staff admin area.

Two small technical cookies belong to the language switch: bb_geo holds the two-letter country code our server reads from your IP address, so that visitors from Latvia are offered the Latvian shop, and bb_lang remembers which language you chose. Both last a year, neither is shared with anyone, and deleting them only makes the switch forget your choice.

We would also like to count visits with Google Analytics (Google Ireland Limited) to see which books readers look for. It is loaded only after you press “Allow” in the bar at the bottom of the page — until then nothing is sent to Google. Your IP address is shortened, Google advertising features are switched off, and you can change your mind at any time with “Cookie settings” at the bottom of every page (or by clearing this site’s data in your browser). If you press “No thanks”, no analytics cookies are set at all and the site works exactly the same.

With the same “Allow”, your browser also keeps the campaign tags of the link you arrived through (local storage entry bb_utm) for up to 30 days, so a purchase made a few days later is still credited to that link. Without “Allow” nothing is saved on your device: the tags are only held in the open page and are forgotten when you reload it or close the tab. Pressing “No thanks”, or withdrawing your consent under “Cookie settings”, also deletes a saved entry, and an entry older than 30 days is deleted on your next visit.

Your rights

You can ask for access to your data, correction, deletion, restriction or portability, and you can object to processing based on legitimate interest. Write to my@blusabook.com. You may also complain to the Data State Inspectorate of Latvia (dvi.gov.lv) or the data protection authority in your country.