Privacy Policy

Last updated: October 2026

1. Who we are

bookisbn.org.uk is operated by Independent Publishing Network Ltd (“we”, “us”, “our”). We are the data controller for the personal information we collect through the Website and when you order from us.

We are registered in England and Wales (company number 11541223). Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Mailing address: MB #1869, PO Box 480, Sevenoaks, TN13 9JY, United Kingdom. Email:  contact @bookisbn.org.uk, Company Number 11541223. Privacy officer: David Allis.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Because our business is run from New Zealand, we also comply with the New Zealand Privacy Act 2020. Where we deal with customers in the European Economic Area, we also follow the EU GDPR.

2. Information we collect

• Identity and contact details: name, email address, postal address and telephone number.
• Publication details: author name, imprint name, book title, format, price, publication date and other details needed to register your title.
• Order and billing details: what you bought, when, and the amount paid. Card details are handled by our payment providers, not by us.
• Account details: login and account activity, if you create an account.
• Technical and usage data: IP address, browser and device type, and how you use the Website.
• Communications: emails and messages you send us.
• Marketing preferences, and information collected by cookies (see section 7).

We do not knowingly collect special category (sensitive) personal data.

3. How we collect it

• When you buy membership, ISBNs, barcode images or labels.
• When you submit your title details for registration.
• When you create an account or sign up for our emails.
• Automatically when you use the Website, through cookies and server logs.
• When you contact us by email or other means.

4. How we use it

• To allocate your ISBNs and register your title on the Nielsen BookData database.
• To supply barcode images and deliver barcode labels.
• To take payment and prevent fraud.
• To provide customer support and answer your questions.
• To run, secure and improve the Website.
• To send service emails about your order and, where you have agreed, marketing emails.
• To meet our legal, tax and accounting obligations.

5. Our legal bases

• Contract: to supply the products and services you order.
• Legitimate interests: to run and improve our business, keep the Website secure and prevent fraud, where our interests are not overridden by yours.
• Consent: for marketing emails and non-essential cookies. You can withdraw consent at any time.
• Legal obligation: to keep financial records and comply with the law.

6. Payments

Payments are processed by third-party providers, e.g. Stripe and PayPal, who handle your card details under their own privacy policies and security standards (PCI DSS). We do not store your full card details.

7. Cookies

We use cookies and similar technologies for:

• Essential functions, such as your basket and checkout (these do not need consent).
• Analytics, to understand how the Website is used.
• Advertising and remarketing, where used.
• Security and fraud prevention.

Non-essential cookies are only set with your consent, which you can give or withdraw through our cookie banner or your browser settings.

8. Marketing

With your consent, or where allowed by law for existing customers, we may send you emails about our products and services. We may also use remarketing on advertising platforms. You can unsubscribe at any time using the link in any marketing email or by contacting us.

9. Who we share it with

We do not sell your personal information. We share it only with:

• Nielsen BookData (and the UK ISBN Agency), to register your ISBN and title details. Title metadata such as author name, imprint and title is published to booksellers, libraries and the wider book trade as part of this service.
• Payment providers, to process payments.
• Website hosting, email, IT and security providers.
• Delivery and postal services, to send barcode labels.
• Analytics and advertising providers, where you have consented.
• Professional advisers such as accountants and lawyers, and authorities where the law requires it.

10. International transfers

Our business is run from New Zealand, so personal information you give us is processed in New Zealand. The UK and the EU both recognise New Zealand as providing an adequate level of data protection. Some of our service providers also process data in other countries, such as the United Kingdom, the European Economic Area, Australia or the United States. Where this happens, we make sure appropriate safeguards are in place, such as adequacy regulations, the UK International Data Transfer Agreement or Standard Contractual Clauses, and we meet the requirements of Information Privacy Principle 12 of the Privacy Act 2020.

11. How long we keep it

We keep personal information only as long as needed for the purposes above. We keep order and financial records for seven years to meet UK and New Zealand tax and accounting rules. Because ISBN registrations are permanent, we keep the details linked to your title registration for as long as the ISBN record exists.

12. Your rights

Depending on where you live, you have the right to:

• Access the personal information we hold about you.
• Have inaccurate information corrected.
• Have your information erased, where there is no good reason for us to keep it.
• Object to or restrict our processing.
• Data portability.
• Withdraw consent at any time, where we rely on consent.

To use any of these rights, email [email protected]. We will respond within one month.

UK and EEA residents have all the rights listed above under the UK GDPR or EU GDPR.

If you are unhappy with how we handle your information, please contact us first so we can try to put it right. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

13. Security

We use appropriate technical and organisational measures to protect your information, including encrypted (HTTPS) connections. No system is completely secure, but we work to keep your data safe.

14. Other websites

The Website may link to other sites, such as Nielsen or the British Library. We are not responsible for their privacy practices.

15. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page.