Privacy Policy

Who is responsible for your data

This website, pbflower.com, is operated by the author PB Flower, who is the data controller for any personal information described below. You can reach the controller at authorpbflower@gmail.com.

What we collect, and why

We collect as little as possible. There is exactly one place on this site where you can give us personal data: the contact form.

• Your email address and message. Collected only when you submit the contact form. We use them for one purpose: to read your message and reply to it.

Legal basis (UK/EU GDPR, Art. 6(1)(f)): our legitimate interest in responding to people who choose to contact us. You are never required to write to us, and you can ask us to erase the message at any time.

We do not run analytics, advertising, tracking pixels, or behavioural profiling. We do not sell or share personal information, and we have not done so in the preceding twelve months. We do not knowingly collect data from children under 13.

Who else sees it

Messages sent through the contact form are delivered by Resend, an email delivery provider acting as our processor, and arrive in a Google-hosted inbox. Both process data in the United States. Transfers out of the UK/EEA rely on the Standard Contractual Clauses maintained by those providers.

The site is hosted on Vercel, which processes server logs (including IP addresses) for security and abuse prevention — for example, the rate limiting that stops the contact form being used to send spam.

Cookies

This site sets no advertising or analytics cookies, so there is no consent banner to click through.

A single cookie, pb_admin_token, is set only when the site’s author signs in to the private publishing area. It is strictly necessary for that authentication and is exempt from consent requirements. It is never set for ordinary visitors.

We also store your animation preference (pb-motion) in your browser’s local storage if you use the “Pause animations” control. This never leaves your device.

How long we keep it

Contact messages live in an email inbox and are kept only as long as needed to handle the correspondence — no more than 24 months — after which they are deleted. Server logs are retained by our hosting provider on their own schedule, typically under 30 days.

Security

The site is served over HTTPS, so your message is encrypted in transit. Please note that email itself is not end-to-end encrypted: once delivered, your message sits in an ordinary mailbox. Do not send sensitive personal information through the contact form.

Your rights

If you are in the UK or EEA, you have the right to access, correct, erase, restrict, or object to our processing of your personal data, and the right to data portability. If you are a California resident, you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights.

To exercise any of these, email authorpbflower@gmail.com. We will respond within one month. You may also complain to your local supervisory authority — in the UK, the Information Commissioner’s Office.

Links to other sites

Buy links point to Amazon and Google Play; social links point to Instagram, YouTube, Goodreads, and Facebook. Once you leave this site, the privacy policy of the site you land on applies. We have no control over their practices.

Changes

If this policy changes materially, we will update the date at the top of this page.