Legal

Privacy policy

This site sells one book and collects as little about you as it can. Here is exactly what that means, including every cookie we use and how to say no to the ones you don’t need.

Last updated 11 October 2026 · Applies to williampennstone.com

1. Who we are

williampennstone.com is operated by William Pennstone, author and publisher of Vitamins and Minerals for a Youthful Body, who is the controller of your personal data. For anything in this policy, write to william@williampennstone.com.

2. What we collect

When you buy the book. Payment is taken by Razorpay. Razorpay sends us the email address and phone number you enter at checkout, the payment and order IDs, the amount and currency paid, the payment method and, for cards, the issuing bank. We never receive or store card numbers, UPI PINs or bank log-ins.

Automatically. Our server keeps standard access and security logs — IP address, browser type, pages requested and the time of the request — for security and fraud prevention. We also keep a daily count of page views and visitors (totals only, by page, referring site and country); it uses no cookies and stores no IP address or anything else that identifies you.

If you came from one of our Google ads. The ad’s click reference, kept for a short time to report the sale to Google Ads (section 5); your cookie choice and the fact that the order came from an ad are kept with the order record.

Cookies and local storage. Your cookie choice, described in section 4. Advertising cookies are set only if you accept them.

When you contact us. Your name, email address, order number if you give one, your message, and the IP address it was sent from (to stop spam).

We do not collect sensitive data such as health information, and we do not build profiles of you.

3. Why we use it, and on what legal basis

  • To sell and deliver the book — taking payment, sending your receipt and download link, and handling support: performance of our contract with you.
  • To keep the site secure and prevent fraud and abuse: our legitimate interests.
  • To keep accounting and tax records: legal obligation.
  • To measure our advertising with Google Ads cookies: your consent, which you can withdraw at any time.
  • To tell Google Ads which ad led to a sale, from our server (section 5), so we can see which ads find readers. You can refuse by pressing Reject on the cookie banner before the sale is reported; a Global Privacy Control signal from your browser counts as a refusal unless you have accepted.

4. Cookies and similar technologies

We ask before setting any cookie that isn’t needed to run the site. The banner offers Accept and Reject with equal weight, no advertising cookie is set until you choose (reporting an ad-led sale from our server uses no cookies and is explained in section 5), and you can change your mind at any time with Cookie settings (also in every page’s footer). Your choice is remembered for 12 months, then we ask again.

Strictly necessary — always on, because the site can’t work without them:

  • wps_consent (local storage, 12 months) — your cookie choice and when you made it, so we don’t ask on every page.
  • wps_open_orders (local storage, 24 hours) — the reference of an order you started here, so that pressing Reject on any page of this site reaches that order before its sale is reported.
  • Razorpay checkout cookies (set on razorpay.com inside the payment window) — needed to take your payment securely and prevent fraud.
  • Our hosting network may set a short-lived security cookie (for example __cf_bm, 30 minutes) to filter out automated traffic.

Advertising measurement — only with your consent:

  • _gcl_au and other _gcl_ cookies (first-party, set by Google Ads, up to 90 days) — link a purchase to the Google ad you clicked.
  • Google’s own cookies on google.com and doubleclick.net (for example IDE, up to 13 months) — Google uses them to measure and, where you allow it, personalise ads. See how Google uses cookies.

We don’t use analytics cookies, social-media pixels or any other trackers.

5. Advertising measurement with Google Ads

We advertise the book through Google Ads. Our pages load Google’s tag in Consent Mode: until you press Accept, it sets and reads no advertising cookies and ad data is redacted. Google may still receive basic, cookieless signals — such as that a page was viewed or a checkout was started, with the time, browser type and the page address — which it uses only in aggregate to estimate how well ads perform. If you have accepted cookies, your browser also tells Google the order ID, amount and currency when you complete a purchase (never your name, email or phone number).

If you accept, Google Ads may use cookies to attribute your purchase to an ad and, subject to your Google account settings, to personalise ads. Google acts as an independent controller for that data under the Google Privacy Policy; you can also manage ad personalisation at My Ad Center. If you reject, or withdraw consent later, we stop setting advertising cookies, delete the first-party ones already on this site, and don’t report your purchase from our server — as long as you do so before it has been reported (see below).

Reporting ad-led sales from our server. If you arrive by clicking one of our Google ads, the ad link carries a click reference (Google calls it a gclid, gbraid or wbraid). Google’s tag keeps that reference in the addresses of this site’s links as you move between pages — nothing is stored on your device for this — and when you start checkout, the page passes it to our server together with your cookie choice (if you have accepted cookies, the page may also read the reference from Google’s own cookie). If you then pay, our server tells Google Ads, about six hours later, that the ad click led to a sale: the click reference, the order ID, the amount, the currency and the time. We never send your name, email address or phone number, and nothing is sold. We do this whether or not you accept advertising cookies, so that we can see which ads find readers. We don’t do it — and don’t keep the click reference at all — if you pressed Reject before your purchase, or if your browser sends a Global Privacy Control signal and you haven’t accepted. If you press Reject after buying, on any page of this site in the same browser, before the sale has been reported, we delete the click reference and don’t report it. Once a sale has been reported, Google gives us no way to withdraw it. We delete the click reference once Google has processed the sale, seven days after a checkout that wasn’t paid, and in any case within 90 days.

6. Who we share it with

Razorpay, which processes your payment under its own privacy policy (our order there notes when a purchase came from a Google ad); the email service that sends your receipt and download link; Render and Cloudflare, which host and protect this site; and Google, as described in section 5. Service providers act on our instructions. We do not sell your personal data, and we disclose it otherwise only where the law requires.

7. Where it goes

We sell to readers in India only. Razorpay processes payments in India; our hosting (Render and Cloudflare), email and Google may process data outside India, which the Digital Personal Data Protection Act, 2023 permits except to countries the Government of India restricts. Each provider protects it under its own security and contractual commitments.

8. How long we keep it

  • Order records: seven years, as tax law requires.
  • A Google ad’s click reference stored with an order: until Google has processed the sale, seven days for a checkout that wasn’t paid, and 90 days at most.
  • Server logs: 30 days.
  • Contact messages and support correspondence: two years after the matter is closed.
  • Your cookie choice: 12 months. Cookie lifetimes are listed in section 4.

9. Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us what we hold about you and who we have shared it with, have it corrected, completed or erased, withdraw consent you have given, and nominate someone to exercise these rights for you. Email us and we will respond within 30 days, after confirming it’s you. We will never charge you or treat you differently for using these rights. You can withdraw cookie consent at any time with Cookie settings, and we treat a Global Privacy Control signal from your browser as a refusal unless you have accepted.

If you are not satisfied with our reply, you can complain to the Data Protection Board of India.

10. Security

The site is served only over HTTPS with a strict content security policy. Payments are handled by Razorpay, a PCI DSS Level 1 certified processor, and card details never touch our systems. Every order is verified on our server before a download link is issued, download links are signed and expire, secrets are kept out of the site’s code, and access to order data is limited to the author. If a breach puts your data at risk, we will tell you and the relevant authority as the law requires.

11. Children

The site is not directed at children under 16 and we do not knowingly collect their data.

12. Automated decisions

We make no decisions about you by automated means that have legal or similarly significant effects. Fraud checks by Razorpay may decline a payment. If that happens, write to us and a person will look at it.

13. Changes

If this policy changes, the new version is posted here with a new date. If a change affects what you consented to, we will ask again. Nothing will apply to data we already hold without a good reason and, where required, your consent.