Privacy Policy

This page explains what information Timbuktu Bookstore collects when you use this site, why we collect it, and who we share it with.

1. Information we collect

When you create an account, browse, or place an order, we collect:

• Account details — your name and email address, managed by our authentication provider, Clerk.
• Delivery details — phone number and delivery address, which you can save to your profile or enter at checkout. These are stored so we can deliver your order and pre-fill future checkouts.
• Order history — the items, prices, and status of orders you place, kept so you and we can track them.
• Newsletter subscription — your email address, if you subscribe, kept separately from your account.
• Basic technical data — your IP address is used briefly to prevent abuse (rate limiting on order and newsletter submissions) and is not stored long-term.

We don't collect or store payment card details — Cash on Delivery is our only payment method.

2. Cookies

We use a small number of cookies, all functional rather than for advertising:

• A session cookie that lets guests (not signed in) keep items in their cart across page visits.
• Authentication cookies set by Clerk to keep you signed in.
• A cookie that remembers you've seen the site's intro animation, so it doesn't repeat every visit.

3. How we use your information

• To create and manage your account, and to let you sign in.
• To process, deliver, and communicate with you about your orders — including confirmation and status-update emails.
• To pre-fill your name, phone, and address at checkout if you've saved them to your profile.
• To send newsletter updates, if you've subscribed.
• To administer the store — for example, our team can view orders and registered users to fulfil deliveries and provide support.

4. Who we share it with

We use a small number of service providers to run the site, each of whom only receives what they need to do their job:

• Clerk — authentication and account management.
• Cloudflare — hosting, content delivery, and our database.
• Resend — delivery of order and newsletter emails.

We don't sell your information to third parties.

5. How long we keep it

We keep account and order data for as long as your account is active, so you can view your order history. If you'd like your account and associated data deleted, contact us and we'll action it, subject to any records we're required to keep for legal or accounting reasons.

6. Your choices

• You can update or remove your saved phone number and delivery address any time from your Profile page.
• You can cancel a pending order from your Order History.
• You can unsubscribe from the newsletter at any time by contacting us.
• You can request a copy of, or the deletion of, your personal data by contacting us.

7. Contact

Questions about this policy or your data? Email hello@timbuktubooks.com or message us on WhatsApp.

This page is a plain-language starting point and is not legal advice. Consider having it reviewed by a lawyer familiar with data protection law in South Sudan before relying on it.