​​​​​

We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect personal information from our website (www.giantpandapress.co.uk), our services, and our interactions with customers, creatives (authors, illustrators, composers, narrators), retailers, distributors, and other stakeholders. Our services include the creation, publication, distribution, and sale of children’s books, e-books, audiobooks, music, and ancillary products (e.g., merchandise, apps, educational materials) , distributed globally. Giant Panda Music, our internal unit, handles audiobook and music production.

This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR) for customers in the European Union. It aligns with our Terms and Conditions (available at www.giantpandapress.co.uk/terms-and-conditions) and applies to all users of our website and services.

By using our website or engaging with our services, you acknowledge that you have read, understood, and agree to this Privacy Policy.

​

1. Information We Collect

We collect the following types of information:

​

1.1. Personal Information

• Identity and Contact Details: Name, email address, postal address, phone number, and other identifiers provided when you create an account, place an order, submit a manuscript, or contact us.

• Account Information: Login credentials (username, password) for registered users.

• Payment Details: Credit/debit card information, billing address, and other payment data for transactions on www.giantpandapress.co.uk.

• Communications: Feedback, comments, product reviews, recommendations, or inquiries sent to us (e.g., via support@giantpandapress.co.uk).

• Contributor Information: For authors, illustrators, composers, or narrators, we collect additional details such as professional profiles, contracts, and royalty payment information.

• Marketing Preferences: Your consent to receive promotional messages or newsletters.

1.2. Non-Personal Information

• Technical Data: Internet Protocol (IP) address, browser type, operating system, device information, and connection details.

• Usage Data: Session information (e.g., page response times, visit duration, page interactions), browsing methods, and clickstream data.

• Aggregated Data: Statistical or anonymized data derived from personal information, used to analyze trends and improve services.

1.3. Cookies and Tracking Technologies

• We use cookies and similar technologies (e.g., web beacons, pixels) to enhance your experience, analyze usage, and deliver personalized content. See Section 7 for details.

​​

2. How We Collect Information

We collect information through:

• Direct Interactions: When you:

  • Create an account or log in to www.giantpandapress.co.uk.

  • Place an order for books, e-books, audiobooks, music, or ancillary products.

  • Submit manuscripts, illustrations, or music via www.giantpandapress.co.uk/submissions.

  • Contact us via email (e.g., support@giantpandapress.co.uk), phone (+44 (0) 131 123 4567), or post (4 River Don Crescent, Bucksburn, Aberdeen, Scotland AB21 9FP).

  • Provide feedback, reviews, or participate in surveys, competitions, or prize draws.

• Automated Technologies: When you interact with our website, we collect technical and usage data via cookies, server logs, and analytics tools (e.g., Google Analytics).

• Third Parties: We may receive information from:

  • Payment processors (e.g., PayPal, Apple Pay) for transaction data.

  • Social media platforms (e.g., Facebook Like Popup) for engagement data.

  • Giant Panda Music for contributor data related to audiobook/music production.

  • Distributors (e.g., Gardners Books, Amazon) for order fulfillment data.

  • Analytics providers for aggregated usage data.

​​

3. Why We Collect Information

We collect and process personal information for the following purposes, based on legal grounds under UK GDPR:

• To Provide and Operate Services (Contract Necessity):

  • Process and fulfill orders (e.g., books, audiobooks, gift cards).

  • Manage accounts and deliver purchased digital content (e.g., e-books via www.giantpandapress.co.uk).

  • Process submissions and contracts with creatives.

  • Pay royalties to authors, illustrators, composers, and narrators.

• To Provide Customer Support (Contract Necessity, Legitimate Interests):

  • Respond to inquiries, troubleshoot issues, and resolve disputes.

  • Process returns, refunds, or warranty claims (per T&Cs Section 19).

• To Communicate (Consent, Legitimate Interests):

  • Send service-related notices (e.g., order confirmations, account updates).

  • Deliver promotional messages, newsletters, or event invitations (with consent).

  • Conduct surveys or questionnaires to gather feedback.

• To Improve Services (Legitimate Interests):

  • Analyze usage data to enhance website performance and user experience.

  • Create aggregated statistical data to improve products and marketing strategies.

• To Comply with Legal Obligations (Legal Obligation):

  • Meet requirements under UK GDPR, EU GDPR, Data Protection Act 2018, and tax laws (e.g., VAT reporting).

  • Handle complaints via the EU ODR platform for EU customers (per T&Cs Section 20).

• To Ensure Security (Legitimate Interests):

  • Protect against fraud, unauthorized access, or misuse of our website.

  • Maintain secure payment processing (PCI-DSS compliant).

​​

4. How We Store and Secure Your Information

• Storage: Your data is stored on secure servers provided by Wix.com, our website hosting platform, which uses firewalls and encryption (TLS/HTTPS) to protect data. Additional data may be stored in GPP’s internal systems or with trusted third-party providers (e.g., Giant Panda Music, payment processors).

• Security Measures:

  • Encryption of sensitive data (e.g., payment details) during transmission and storage.

  • Access controls to limit data access to authorized personnel only.

  • Regular security audits and compliance with PCI-DSS standards for payment processing.

• Retention: We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, typically:

  • Customer data: 7 years from the last transaction, per UK tax and consumer laws.

  • Contributor data: Duration of the contract plus 7 years for royalty and tax purposes.

  • Technical/usage data: Up to 2 years for analytics, unless anonymized.

  • You may request deletion earlier (see Section 8).

​​

5. How We Share and Disclose Information

We do not sell your personal information to third parties for marketing purposes. We may share your information with:

• Giant Panda Music: Our internal unit for audiobook and music production, accessing contributor details (e.g., names, payment information) as part of GPP’s operations.

• Service Providers: For operational purposes, including:

  • Payment Processors: PayPal, Apple Pay, Clearpay, and others (PCI-DSS compliant) to process transactions.

  • Distributors: Amazon, Gardners Books, Audible, Spotify, etc., for order fulfillment and delivery.

  • Analytics Providers: Google Analytics for usage data (anonymized where possible).

  • Marketing Platforms: For sending newsletters (with consent, e.g., via Mailchimp).

• Legal Compliance: To comply with legal obligations, such as tax authorities, law enforcement, or court orders.

• Business Transfers: In the event of a merger, acquisition, or sale of GPP assets, your data may be transferred to the successor, with notice provided.

• International Transfers: For global operations (e.g., EU, US), we ensure data transfers comply with UK GDPR and EU GDPR (e.g., using Standard Contractual Clauses or adequacy agreements).

All third parties are bound by confidentiality and data protection agreements to safeguard your information.

​

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies are small data files stored on your device.

6.1. Types of Cookies

• Strictly Necessary Cookies: Essential for website functionality (e.g., login, cart).

• Performance Cookies: Collect anonymized data on page visits and performance (e.g., Google Analytics).

• Functional Cookies: Enable personalization (e.g., remembering preferences).

• Targeting Cookies: Used by third parties (e.g., social media platforms) for advertising.

6.2. Third-Party Tools

• Social Features: Facebook Like Popup or similar for engagement.

• Third-Party Apps: PayPal, Clearpay, Apple Pay for payments; Wix.com apps for functionality.

• Custom Code: JavaScript or embeds for enhanced features.

• Analytics: Google Analytics for usage insights (opt-out at http://tools.google.com/dlpage/gaoptout).

6.3. Managing Cookies

• Adjust cookie preferences at www.giantpandapress.co.uk/cookies.

• Configure browser settings to block cookies (e.g., Firefox, Chrome, Safari, Internet Explorer, Android). Note: Blocking cookies may affect website functionality.

• Learn more at www.allaboutcookies.org.

​​

7. Your Data Protection Rights

Under UK GDPR and EU GDPR, you have the following rights:

• Access: Request a copy of your personal information.

• Correction: Request correction of inaccurate or incomplete data.

• Deletion: Request deletion of your data, subject to legal retention requirements.

• Restriction: Request restriction of processing in certain cases (e.g., while disputes are resolved).

• Objection: Object to processing for marketing or legitimate interests.

• Data Portability: Request your data in a structured, machine-readable format.

• Withdraw Consent: Withdraw consent for marketing or non-essential processing at any time.

To exercise these rights, contact us at data@giantpandapress.co.uk or 4 River Don Crescent, Bucksburn, Aberdeen, Scotland AB21 9FP. We will respond within 30 days, per UK GDPR.

​

8. How to Withdraw Consent or Opt Out

• Marketing Communications: Unsubscribe from emails via the link in each message or contact support@giantpandapress.co.uk.

• Data Processing: To stop processing of your data (except where required by law), email data@giantpandapress.co.uk or write to 4 River Don Crescent, Bucksburn, Aberdeen, Scotland AB21 9FP.

• Cookies: Opt out via www.giantpandapress.co.uk/cookies or browser settings.

​​

9. International Customers

• EU Customers: For EU residents (e.g., Republic of Ireland), we comply with EU GDPR. Complaints may be escalated to the EU ODR platform (https://ec.europa.eu/odr) or your local data protection authority (e.g., Data Protection Commission in Ireland).

• Non-EU Customers: Data processing complies with UK GDPR, and you may contact your local data protection authority for complaints.

• EU Representative: For EU-related data inquiries, contact our EU Authorised Representative at [Insert EU Address, e.g., Dublin, Ireland].

​

10. Children’s Privacy

Our services are aimed at children aged 0-14, but purchases and submissions must be made by individuals over 18. For users under 13 participating in competitions or submitting feedback, we require parental consent. Contact support@giantpandapress.co.uk for consent processes.

​

11. Privacy Policy Updates

We may update this Privacy Policy to reflect legal, operational, or business changes. Updates will be posted at www.giantpandapress.co.uk/privacy-policy and take effect immediately. For material changes, we will notify you via email or a website notice at least 30 days in advance. Continued use of our website or services constitutes acceptance of the updated policy.

​

12. Contact Information

For questions, complaints, or to exercise your data protection rights, contact:

• Email: data@giantpandapress.co.uk

• Post: Giant Panda Press, 4 River Don Crescent, Bucksburn, Aberdeen, Scotland AB21 9FP

• Phone: +44 (0) 131 123 4567

• Website: www.giantpandapress.co.uk/customer-service

For UK data protection complaints, contact the Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk

• Phone: +44 (0) 303 123 1113

• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

For EU customers, contact your local data protection authority or use the EU ODR platform (https://ec.europa.eu/odr).

Your trust is fundamental to us. We are dedicated to safeguarding your personal information and ensuring transparency in our data practices.