Privacy Policy
The Bookshelf, LLC – Privacy Policy
(including California Notice)
Last Updated: September 9, 2025
Introduction
We know privacy policies aren’t page-turners, but they matter. This Privacy Policy (“Policy”) explains how The Bookshelf, LLC (“The Bookshelf,” “TBS,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our website and related services (collectively, the “Site” and “Services”). By using the Services, you agree to this Policy and our Terms. If you don’t agree, please do not use the Services.
Who we are (Controller):
The Bookshelf, LLC
2051 Gattis School Rd, Suite 540 #166
Round Rock, TX 78664, USA
Email: [email protected]
1) Information We Collect
a) Personal Information
Information that identifies or can be reasonably linked to you, such as:
Name, email address, account credentials.
Communication preferences; support inquiries and correspondence.
Purchase or subscription details handled through third-party processors (see “Third Parties”).
In some regions (e.g., EEA), IP addresses and online identifiers may also be Personal Information.
You are not required to provide Personal Information to browse the Site, but certain features (e.g., accounts, purchases, support) may require it.
b) Non-Personal Information
Information that does not directly identify you, including:
Device and usage data (IP address, browser type, pages viewed, referring/exit pages, timestamps, general location, clickstream).
Cookie, pixel, and similar technology data (see “Cookies and Other Technology”).
c) Geolocation (Optional)
If you grant permission via your device or browser, we may access approximate location to tailor certain features. You can disable this in your settings.
d) Social Logins / Integrations (Optional)
If you connect a third-party social or platform account, we may receive information those services share (subject to your settings with them).
2) Where/How We Collect Information
Directly from you: account creation, purchases, forms, surveys, emails, and support.
Automatically: via cookies, pixels, logs, and similar tools when you use the Site.
From third parties: service providers (e.g., hosting, analytics, payment processors), partners, and integrations you connect.
3) Cookies and Other Technology
We use cookies and similar technologies to operate the Site, remember preferences, analyze traffic, and improve Services. You can adjust cookie settings in your browser; blocking some cookies may affect functionality.
4) How We Use Information
We use Information for legitimate business purposes, including to:
Provide, maintain, personalize, and improve the Services.
Create and manage accounts; authenticate logins.
Respond to inquiries and provide support.
Process purchases and subscriptions (via third-party processors).
Analyze usage, develop insights, and enhance security and fraud prevention.
Communicate about Services, updates, policy changes, and (if you opt in or as permitted by law) promotions.
Comply with legal obligations, enforce our terms, and protect rights, safety, and property.
Evaluate or conduct business transactions (e.g., merger, acquisition, or asset sale).
You can opt out of promotional emails at any time via the unsubscribe link in our messages.
5) How We Share Information
We do not sell Personal Information. We also do not share Personal Information for cross-context behavioral advertising (as defined by California law).
We may disclose Personal Information:
Within our corporate family/affiliates for the purposes described in this Policy.
To service providers (e.g., hosting, email delivery, analytics, customer support, payment processing) who act on our behalf under appropriate safeguards and contractual restrictions.
To third parties you authorize (e.g., integrations you connect).
For legal and safety reasons (e.g., to comply with law, respond to lawful requests, enforce terms, protect users and our Services).
Business transfers (e.g., merger, acquisition, restructuring), subject to this Policy or a successor policy with comparable protections.
With your consent.
We may share aggregated or de-identified information that does not identify you.
6) Information Security
We use reasonable administrative, technical, and physical safeguards (e.g., HTTPS, restricted access, cloud security practices) to protect Personal Information. No security program is perfect; transmission and storage carry inherent risk.
Please contact us promptly if you believe your account has been compromised.
7) Data Retention
We retain Personal Information as long as needed for the purposes described in this Policy—such as providing Services, complying with legal obligations, resolving disputes, and enforcing agreements—after which we delete or de-identify it per our retention practices.
8) Children’s Privacy
Our Services are not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. If we learn that we’ve collected such information without verifiable parental consent, we will delete it as required by law.
9) Links to Third-Party Sites
Our Site may link to third-party websites/services. Their privacy practices are governed by their own policies. We are not responsible for third-party content or practices.
10) Your Choices
Account & profile: update information via your account (where available) or by contacting us.
Marketing emails: opt out using the “unsubscribe” link in the email.
Cookies: control through your browser settings (functionality may be affected).
11) Additional Information for EEA/UK Residents
Legal Bases for Processing
We process Personal Information under:
Legitimate interests (e.g., to provide, secure, and improve Services; respond to inquiries; analyze usage).
Contract (e.g., to provide Services you request).
Consent (e.g., certain marketing or cookies, where required).
Legal obligation (e.g., tax, regulatory, compliance).
Your Rights
Subject to exceptions under applicable law, you may have rights to:
Access, correct, or delete your Personal Information.
Object to or restrict certain processing.
Data portability.
Withdraw consent where processing is based on consent (without affecting prior processing).
To exercise rights, email [email protected]. We may verify your identity before responding.
International Transfers
If we transfer Personal Information outside your region (e.g., to the U.S.), we use appropriate safeguards (e.g., Standard Contractual Clauses) where required by law.
12) California Privacy Notice (CCPA/CPRA)
Scope
This section applies to California residents and supplements this Policy.
Categories of Personal Information We Collect (12 months)
Identifiers: name, email, online identifiers.
Customer Records categories (Cal. Civ. Code §1798.80(e)): name and similar account/contact information.
Internet/Network Activity: browsing and usage data (e.g., device information, pages viewed, timestamps).
Geolocation (approximate): if you grant permission.
Inferences: product/service preferences derived from your interactions.
We collect these categories from you, automatically, and from service providers/partners as described above.
Purposes for Collection/Use
See “How We Use Information” above (e.g., to provide Services, support, security, analytics, communications, and legal compliance).
Disclosure of Personal Information
In the past 12 months, we disclosed the categories above for business purposes to: service providers, affiliates, authorized third parties (at your direction), and as otherwise permitted by law. We do not sell Personal Information and do not share Personal Information for cross-context behavioral advertising. We do not use or disclose Sensitive Personal Information for any purpose requiring a “Right to Limit” under California law.
Your California Rights
Subject to exceptions, you may have the right to:
Know/Access: the categories and specific pieces of Personal Information we collected, sources, purposes, and categories of third parties to whom we disclosed it.
Delete: Personal Information we collected from you.
Correct: inaccurate Personal Information.
Data portability.
Non-discrimination: we will not discriminate against you for exercising your rights.
Shine the Light (1798.83): request certain disclosures about direct marketing (see “How to Contact Us”).
We will confirm, process, and respond to verifiable requests within the timelines required by law (generally 45 days, with one 45-day extension if reasonably necessary).
Submitting a Request & Verification
Email [email protected] with “California Privacy Request” in the subject line. Please provide enough information to verify your identity (and, if applicable, your authority to act for another) and describe your request with sufficient detail. We will only use Personal Information provided in a request to verify and respond. You may submit up to two access requests in a 12-month period.
Authorized Agents
If you use an authorized agent, we may require proof of authorization and also verify your identity directly with us, unless you have provided a lawful power of attorney.
Financial Incentives
We do not currently offer programs that qualify as financial incentives under California law. If that changes, we’ll provide required terms and obtain your opt-in consent.
13) “Shine the Light” (California Civil Code §1798.83)
California residents may request information about our disclosures (if any) of Personal Information to third parties for their direct marketing during the prior calendar year. Submit requests to [email protected] with “Shine the Light Request” in the subject line.
14) Changes to This Policy
We may update this Policy from time to time. We’ll post the updated Policy and update the “Last Updated” date. Your continued use of the Services after changes become effective means you accept the revised Policy.
15) How to Contact Us
Questions or requests about this Policy or your data?
Email: [email protected]
Mail: The Bookshelf, LLC, Attn: Privacy Officer
2051 Gattis School Rd, Suite 540 #166
Round Rock, TX 78664, USA
