Legal
Privacy Policy
Last updated: 7 November 2026
This policy explains how we process personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). It applies to all visitors and customers, including those in the United States, the United Kingdom, Canada and Australia.
1. Data controller
The Quiet Universe Collection (“we”). Our only contact for all privacy matters is roberthalesupport@gmail.com.
2. What data we process
- Order data: name, email address, purchased edition, order date, price and country (for tax and accounting).
- Payment data: processed by the payment provider shown at checkout. We do not receive or store your full card details.
- Communication: the content of emails you send us.
- Technical data: IP address, browser type and pages visited, and, only with your consent, analytics cookies. See the Cookie Policy.
3. Purposes and legal bases
- Delivering your purchase and support – performance of a contract (Art. 6(1)(b)).
- Accounting and tax records – legal obligation (Art. 6(1)(c)).
- Security and fraud prevention – legitimate interest (Art. 6(1)(f)).
- Analytics and optional cookies – your consent (Art. 6(1)(a)).
- Newsletters, if ever offered – only with your separate consent.
4. How long we keep data
Order and accounting data are kept for as long as tax and accounting law requires (up to 10 years). Support emails are kept for up to 3 years after the last contact. Consent-based data are kept until you withdraw consent.
5. Recipients
We share data only with processors needed to run the business: website hosting, email delivery, file delivery, the payment provider and our accountant. All processors are bound by data processing agreements. We never sell your personal data.
6. International transfers
Some processors may be located outside the European Economic Area, for example in the United States. Such transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on Standard Contractual Clauses approved by the European Commission.
7. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy,
- correct inaccurate data,
- have data erased where there is no legal reason to keep it,
- restrict or object to processing,
- data portability,
- withdraw consent at any time, without affecting earlier processing.
Write to roberthalesupport@gmail.com; we answer within one month. You may also complain to the data protection supervisory authority in your country.
8. Customers outside the EU
- United Kingdom: you have equivalent rights under the UK GDPR and may contact the Information Commissioner's Office (ico.org.uk).
- United States: we do not sell or share personal information for cross-context behavioural advertising. Residents of states with privacy laws (such as California) may request access, correction or deletion by email.
- Canada: we handle personal information consistently with PIPEDA principles; you may request access and correction.
- Australia: we handle personal information consistently with the Australian Privacy Principles; you may request access and correction.
9. Security
We use encrypted connections (HTTPS), reputable processors and limited access to protect your data.
10. Children
Our products are not directed at children under 16, and we do not knowingly collect their data.
11. Changes
We may update this policy. The current version is always published on this page.