Legal

Privacy policy

Last updated 28 September 2026 · Applies to williampennstone.com

This site sells one book and collects as little about you as it can. Here is exactly what that means.

1. Who we are

williampennstone.com is operated by William Pennstone, author and publisher of Vitamins and Minerals for a Youthful Body. For anything in this policy, write to william@williampennstone.com.

2. What we collect

When you buy the book. Payment is taken by Razorpay. Razorpay sends us the email address and phone number you enter at checkout, the payment and order IDs, the amount and currency paid, the payment method, and for cards the network and last four digits. We never receive or store full card numbers.

Automatically. Our server keeps standard access logs — IP address, browser type, pages requested and the time of the request — for security and fraud prevention. Logs are deleted after 30 days.

The launch-price cookie. On your first visit we set a single first-party cookie (__Host-wps_offer) recording when your six-hour launch price began. It contains a timestamp and a signature, no personal data, cannot be read by scripts, and expires after 30 days. Your browser’s local storage also remembers your currency choice.

When you contact us. Your name, email address, order number if you give one, and your message.

3. Why we use it

To deliver the book, send your receipt and download link, handle support requests and answer your questions (performance of our contract with you); to keep the site secure and prevent fraud (our legitimate interests); and to keep the accounting records the law requires of us (legal obligation).

4. Advertising measurement

We advertise the book through Google Ads, including Gmail. Where conversion measurement is switched on, Google may set cookies on this site to attribute a purchase to an ad you clicked. Where the law requires it, we ask for your consent before any such cookie is set, and you can decline without affecting your purchase. Google’s own privacy policy explains how it handles that data.

5. Who we share it with

Razorpay, which processes your payment under its own privacy policy; the email service that sends your receipt and download link; and the company that hosts this site. Each acts on our instructions. We do not sell personal data, and we disclose it otherwise only where the law requires.

6. Where it goes

We sell to readers in the United States, Canada and the United Kingdom, and our providers may process data in any of those countries, the European Union or India (where Razorpay is based). Where data leaves your country we rely on recognised safeguards such as adequacy decisions and standard contractual clauses.

7. How long we keep it

Order records for seven years, as tax law requires. Server logs for 30 days. Support correspondence for two years after the matter is closed.

8. Your rights

Wherever you live, you can ask us what we hold about you, have it corrected or deleted, and object to how we use it — email us and we will respond within 30 days. If you are in the UK or the European Union you also have rights under the GDPR, including data portability and the right to complain to the Information Commissioner’s Office or your local authority. If you are a California resident, the CCPA gives you the right to know, delete and correct, and to opt out of the sale of personal information — which we do not do. If you are in Canada, PIPEDA gives you rights of access and correction and the right to complain to the Privacy Commissioner.

9. Security

The site is served only over HTTPS. Payments are handled by Razorpay, a PCI DSS Level 1 certified processor; card details never touch our systems. Every order is verified on our server before a download link is issued, download links are signed and expire, secrets are kept out of the site’s code, and access to order data is limited to the author.

10. Children

The site is not directed at children under 16 and we do not knowingly collect their data.

11. Changes

If this policy changes, the new version is posted here with a new date. Nothing will apply to data we already hold without a good reason and, where required, your consent.