Privacy Policy

The data controller for this website is A. Felix, author of the I Am A Soul children's book series, based in Portugal. For any privacy-related enquiries, please contact us via the Contact page.

We only collect personal data that you voluntarily provide to us. This includes:

• Contact form — your name, email address, organisation (optional), and message content when you submit an enquiry.
• Mailing list — your email address and first name (optional) when you sign up for book release updates.
• Book reviews — your display name and review text when you submit a review on the site.
• Reader messages — your name, optional email, and message when you send a personal note to the author.
• Purchases — if you buy directly through the site, your payment is processed by Stripe. We receive only your name, email, and order amount. We never see or store your card details.
• Account login — if you choose to log in via Manus OAuth, we store your name, email, and login method to identify your account.

We do not use advertising networks, third-party tracking pixels, or behavioural analytics tools.

This site uses a single session cookie to keep you logged in if you choose to create an account. This cookie is essential for the site to function correctly and does not track your browsing behaviour across other websites.

No advertising cookies, cross-site tracking cookies, or analytics cookies are set. Your cookie preference is stored in your browser's local storage so we remember your choice on future visits.

We use the data you provide solely for the following purposes:

• Responding to your enquiries and messages.
• Sending you book release updates if you subscribed to the mailing list.
• Displaying approved book reviews on the site.
• Processing book orders via Stripe.
• Maintaining the security of your account session.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

Under the GDPR, we rely on the following legal bases:

• Consent — for mailing list sign-ups and optional account creation.
• Contractual necessity — for processing book purchases.
• Legitimate interests — for responding to contact form enquiries and maintaining site security.

We retain your data only for as long as necessary. Contact messages and reader messages are kept until actioned and periodically reviewed for deletion. Mailing list subscribers remain on the list until they unsubscribe. Purchase records are retained as required by Portuguese and EU tax law (typically 10 years).

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — unsubscribe from the mailing list at any time.

To exercise any of these rights, please contact us via the Contact page. We will respond within 30 days.

We use the following third-party services, each with their own privacy policies:

• Stripe — payment processing. stripe.com/privacy
• Amazon — book sales via Amazon.com. amazon.com/privacy
• Manus — website hosting and OAuth authentication. manus.im/privacy

We take reasonable technical measures to protect your data, including encrypted session tokens, HTTPS, HTTP security headers, and rate limiting on all public-facing forms. No method of transmission over the internet is 100% secure, but we take data protection seriously and review our practices regularly.

This website is intended for adults and parents. We do not knowingly collect personal data from children under the age of 16. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after an update constitutes acceptance of the revised policy.

For any privacy questions or to exercise your rights, please use our Contact page.

If you are in the EU and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).