Privacy notice
Last updated: 14 June, 2026
Golden House Publications, with registered office at Piazza Andrea del Sarto 2, 56122 Pisa, Italy, VAT Number (Partita IVA) 02584220509 hereinafter the "Controller", "Data Controller", "we", "our"), informs you pursuant to Article 13 of Regulation (EU) 2016/679 ("GDPR") about how your personal data are collected, used, stored, and protected when you use our website and services. We process personal data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. This Privacy Notice may be reviewed and updated in order to reflect changes in applicable laws, regulations, or our business practices.
1. Data Controller
Golden House Publications
Registered office: Piazza Andrea del Sarto 2, 56122 Pisa, Italy
VAT Number: 02584220509
Email: golden.house.publications@gmail.com
For any request concerning your personal data or the exercise of your rights, you may contact us using the details above.
2. Categories of Personal Data Collected
We may collect and process the following categories of personal data:
• Name and surname
• Email address
• Telephone number
• Billing address
• Delivery address
• Company, institution, or department affiliation
• Payment information necessary to process purchases
• Technical information relating to website use, including IP address, browser type, operating system, language settings, device information, date and time of access, and navigation data
• Information submitted through contact forms, newsletter subscriptions, or correspondence with us
We collect personal data directly from you when you:
• Place an order
• Subscribe to our newsletter
• Contact us by email or through our website
• Request information regarding our publications or services
We may also automatically collect technical information when you visit our website through cookies and similar technologies.
3. Purposes of Processing
Your personal data may be processed for the following purposes:
a) Provision of Services and Order Fulfilment: We may process your personal data to process and fulfil orders, arrange shipping and delivery, issue invoices and receipts, provide customer support, and manage contractual relationships; b) Website Administration: We may process your personal data to ensure the proper functioning and security of the website, monitor website performance, conduct technical maintenance and troubleshooting, and improve website usability and services; c) Communications and Customer Support: We may process your personal data to respond to enquiries, requests, and comments, provide information regarding products and services, and notify you of changes affecting our services; d) Compliance with Legal Obligations: We may process your personal data to fulfil accounting, tax, and regulatory obligations and to maintain records required by applicable law; e) Newsletter and Marketing Communications: Subject to your consent where required, we may process your personal data to send newsletters and marketing communications, including news about new publications, special offers, publishing guides and industry information, and updates regarding our services. You may withdraw your consent at any time.
4. Legal Basis for Processing
We process personal data on the following legal bases:
- Contract (Article 6(1)(b) GDPR): We process personal data where necessary for the performance of a contract, including order management, delivery of products, provision of customer support, and the supply of requested services. Failure to provide the personal data required for these purposes may prevent us from fulfilling your order or providing the requested services.
- Legal Obligation (Article 6(1)(c) GDPR): We process personal data where necessary to comply with our legal obligations, including accounting, tax, and other regulatory requirements.
- Consent (Article 6(1)(a) GDPR): We process personal data on the basis of your consent in relation to newsletter subscriptions, marketing communications, and certain categories of cookies where consent is required by law. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out prior to such withdrawal.
- Legitimate Interest (Article 6(1)(f) GDPR): We process personal data where necessary for our legitimate interests, including maintaining website security, preventing fraud, protecting our business and users, and improving our products and services.
5. Recipients of Personal Data
We respect our customers' privacy and do not sell, rent, or otherwise disclose personal data to third parties for their own marketing purposes. Personal data may be shared with selected third parties where necessary for the purposes described in this Privacy Policy.
Service Providers and Data Processors: We may share personal data with carefully selected service providers and data processors who assist us in operating our business and delivering our services. These may include companies contracted to fulfil your order, such as distributors, carriers, and delivery service providers, as well as website hosting and website management providers, payment processing providers, professional advisers such as accountants, auditors, and legal consultants, and newsletter and email marketing service providers. These third parties process personal data only on our instructions and are required to implement appropriate security and confidentiality measures.
Wix: Our website is hosted and operated through Wix.com Ltd., which may process personal data on our behalf in connection with the provision, maintenance, and operation of the website. Where purchases are made through our website, payment-related information necessary to process the transaction may be collected and processed through Wix's platform. Wix implements a range of technical and organisational security measures designed to protect personal information, including secure HTTPS access, SSL/TLS encryption for the transmission of sensitive payment information, and compliance with the Payment Card Industry Data Security Standard (PCI DSS). Further information about Wix's processing activities can be found in its Privacy Policy.
Brevo: Newsletter subscriptions and email communications may be managed through Brevo (Sendinblue SAS). Where you subscribe to our newsletter, your email address and, where provided, your name may be processed by Brevo on our behalf for the purpose of managing subscriber lists and distributing communications. Brevo operates in accordance with GDPR principles, including fairness, transparency, purpose limitation, and data minimisation. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link included in every newsletter or by contacting us directly.
Authorities: Where required by law or where necessary to comply with legal obligations, protect our rights, or respond to lawful requests, personal data may be disclosed to courts, regulators, tax authorities, law enforcement agencies, or other competent public authorities.
6. International Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where such transfers occur, appropriate safeguards are implemented in accordance with Chapter V GDPR, including Adequacy Decisions adopted by the European Commission; or Standard Contractual Clauses approved by the European Commission. Further information may be requested from the Data Controller.
7. Data Retention
Personal data are retained only for as long as necessary for the purposes for which they were collected.
In particular:
- Customer and transaction records: up to 10 years where required by tax and accounting legislation
- Customer service communications: up to 5 years after the last interaction
- Newsletter subscription data: until consent is withdrawn
- Technical logs and security records: for periods reasonably necessary for security and operational purposes
Where retention is required by law or necessary for the establishment, exercise, or defence of legal claims, data may be retained for longer periods.
8. Cookies
Our website uses cookies and similar technologies to ensure proper operation, security, and functionality. Where required by law, non-essential cookies will only be installed after obtaining your consent. Further information regarding the cookies used by our website is available in our Cookie Policy.
9. Rights of Data Subjects
Under the General Data Protection Regulation (GDPR), you have a number of rights in relation to your personal data. These include the right to access the personal data we hold about you, to request the rectification of inaccurate or incomplete data, and to request the erasure of your personal data where applicable. You also have the right to request the restriction of processing, to object to certain types of processing, and to receive your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another controller (data portability).
Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of any processing carried out before the withdrawal. In addition, you have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data infringes applicable data protection laws.
Requests relating to the exercise of your rights may be submitted using the contact details provided above.
10. Complaints
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. For controllers established in Italy, the competent authority is the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
11. Security Measures
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
12. Changes to this Privacy Notice
Any updates to this Privacy Notice will be published on this page.
Last update: 14 June, 20256