Privacy Policy and Data Protection Notice

This Privacy Policy and Consumer Data Notice takes effect on 2026-11-10. It applies to all electronic inquiries, support communications, and website interactions conducted with Royalsriverbooks, trading at royalsriverbooks.com, through the domain royalsriverbooks.com or at our storefront at 355 Main St, Yarmouth, Maine 04096, Yarmouth, Maine, United States.

The data controller responsible for the collection and processing of personal information under this policy is Royalsriverbooks, trading at royalsriverbooks.com. Our principal place of business and postal address, written out in full, is 355 Main St, Yarmouth, Maine 04096, Yarmouth, Maine, United States. Telephone inquiries may be directed to 207-846-8006, and electronic privacy inquiries to [email protected].

Royalsriverbooks operates an inquiry-only bookstore catalog. We do not maintain customer login accounts, do not store account passwords, and do not collect or process credit card numbers through this website. The specific data categories we collect are strictly limited to what is submitted or transmitted during communication:

• Inquiry Form Submissions (fudoe90.php): Customer full name, direct telephone number, electronic mail address, physical postal delivery address for parcel shipment quotes, inquiry classification (such as edition check, reading group order, or Maine regional title), specific book requirements, condition notes, and affirmative consent checkbox records.
• Automated Transmission Telemetry: Internet Protocol (IP) address, browser user-agent string, referring URL source, page render timestamp (hidden input 'at'), and form transmission timestamp.
• Bookseller Support Chat (zibaa26.php): Complete text conversation transcript and an alphanumeric session token maintained within local browser storage to permit conversation continuity.
• Consent Preferences: The visitor's affirmative decision regarding cookie storage, recorded in browser storage under the key site_consent_v2.
• Advertising Identifiers: Inbound marketing query parameters appended to URLs when a visitor arrives via sponsored campaign links, specifically gclid (Google Ads), msclkid (Microsoft Advertising), and fbclid (Meta Ads).

All personal information received by Royalsriverbooks is processed for defined, necessary bookseller operations:

• To verify physical volume availability, binding format integrity, publication year, and parcel shipping quotes at our 355 Main St desk.
• To communicate directly with the inquiring customer by telephone or electronic mail regarding their book reservation.
• To coordinate reading group quantities, tiered multi-copy fulfillment, and seasonal library acquisitions.
• To maintain shop server security, detect spam or robotic form transmissions, and diagnose infrastructure faults.
• To evaluate advertising campaign effectiveness and attribute inbound inquiries to marketing channels when consent is granted.

Under applicable US state privacy frameworks and international standards, our processing of data relies on the following lawful bases:

Royalsriverbooks actively runs paid commercial campaigns to introduce readers to our independent bookstore catalog. Specifically, google ads, microsoft advertising, and Meta Ads send traffic here directly to royalsriverbooks.com.

When a visitor arrives via these services, campaign tracking parameters are affixed to the destination URL: google ads attaches gclid, microsoft advertising attaches msclkid, and Meta Ads attaches fbclid. These click identifiers—gclid, msclkid, and fbclid—allow us to evaluate advertising performance and conversion quality. They are never sold or rented, and their persistent browser storage is controlled strictly by visitor consent choices.

Our website deploys consent mode v2 to ensure privacy-first measurement. Upon initial page load for any visitor, all four core consent storage signals—specifically ad_storage, ad_user_data, ad_personalization, and analytics_storage—are held denied until the visitor allows storage.

These four parameters remain denied until the visitor explicitly clicks “Allow Storage” in our consent banner. The moment the visitor declines or withdraws storage permission, ad_storage, ad_user_data, ad_personalization, and analytics_storage are immediately set back to denied. No advertising identifiers or non-essential cookies are stored on the visitor's device while these signals are held denied under consent mode.

We do not sell personal data. To maintain storefront and web operations, Royalsriverbooks engages third-party processors named one by one:

• Google Ireland Ltd / Google LLC: Google Ads, which attaches gclid to a click and receives the consent signals.
• Microsoft Ireland Operations Ltd: Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Meta Ads, which attaches fbclid, where a campaign runs there.
• Hosting Provider: The hosting provider that serves this site and stores the enquiry database in secure US data facilities.
• Mail Routing Provider: The mail provider that carries the notification to the operator's inbox at [email protected].

Royalsriverbooks operates in Yarmouth, Maine, United States. Information collected through royalsriverbooks.com is stored primarily on servers within the United States. When data is accessed by or transferred to international service providers or visitors connecting from outside the US, transfers are safeguarded through standard contractual clauses and adherence to certified adequacy frameworks.

We preserve personal information only for real, stated operational durations. We do not retain records indefinitely:

• Enquiries and their email copies: 36 months following submission to facilitate recurring reader advisory and provenance history.
• Chat transcripts: 6 months from the date of the conversation, then purged automatically.
• Server and access logs: 60 days before automatic cyclical erasure.
• The record of a consent choice: 12 months in the visitor's browser under site_consent_v2.

We enforce strict technical and physical safeguards to protect information against unauthorized disclosure, alteration, or destruction. All data transmitted between your browser and royalsriverbooks.com is encrypted using modern Transport Layer Security (TLS 1.3). Server endpoints feature automated intrusion monitoring, honeypot spam suppression, least-privilege administrative access controls, and firewall restrictions. Physical paper slips used at our 355 Main St counter are kept in secure bookseller-only workstations.

For visitors residing within the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (gdpr) provides fundamental individual rights regarding personal data:

• Access: The right of access to request confirmation and copies of any personal data we hold about you.
• Rectification: The right to rectification to require us to correct inaccurate or incomplete contact details.
• Erasure: The right to erasure to request the deletion of your inquiry history and chat records.
• Restriction: The right to restriction of processing under certain legal circumstances.
• Data Portability: The right to data portability to request an electronic copy of data you supplied to us in a structured format.
• Objection: The right to objection to object to data processing based on legitimate interests.
• Withdrawing Consent: The right to withdrawing consent at any time without penalty where processing relies upon consent.

Residents of California under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), as well as residents of Virginia, Colorado, Connecticut, Utah, and other US states with enacted comprehensive privacy legislation, possess specific statutory rights:

• The right to know what personal information categories and specific pieces we collect and use.
• The right to delete personal information held by Royalsriverbooks.
• The right to correct inaccurate personal records.
• The right to opt out of any sale or sharing of personal information for cross-context behavioral advertising. Royalsriverbooks does not sell personal data for monetary consideration.
• The right to be free from discrimination or altered pricing for exercising any privacy entitlement.

Royalsriverbooks recognizes and respects the Global Privacy Control (GPC) signal. When our web server detects the Sec-GPC: 1 header broadcast by your web browser, we treat this broadcast as an immediate, affirmative directive to opt out of advertising tracking and non-essential analytical storage without prompting you again or requiring additional manual forms.

The digital inquiry services on royalsriverbooks.com are not intended for children under 16 years of age. We do not knowingly solicit, collect, or store personal information from minors. If a parent or guardian discovers that a minor has submitted personal contact information without verifiable consent, contact us at [email protected] and we will expeditiously expunge the record.

If you believe your privacy rights have been infringed, you have the right to lodge a complaint with a regulatory supervisory authority. US residents may file complaints with their respective state Attorney General, including the Office of the Maine Attorney General, or with the California Privacy Protection Agency (CPPA) for California residents. Visitors residing in the European Union may contact their national Data Protection Authority.

To exercise any statutory right to access, rectify, delete, or export your personal information held by Royalsriverbooks, submit your written request through either of the following channels:

• By Electronic Mail: [email protected] with the subject line “Privacy Data Request”.
• By Postal Mail, written out in full: Royalsriverbooks, trading at royalsriverbooks.com, Data Privacy Desk, 355 Main St, Yarmouth, Maine 04096, Yarmouth, Maine, United States.
• By Storefront Telephone: 207-846-8006 during regular hours (10:00–18:00 EST).

We do not assess processing fees for legitimate privacy requests. A data request is answered within 5 days of receipt.

We may revise this Privacy Policy periodically to reflect changes in bookstore operations, platform tracking requirements, or statutory frameworks. Material modifications will be announced by updating the effective date at the top of this document and posting a visible advisory notice across our primary storefront pages.

For questions, clarifications, or concerns regarding our privacy stewardship or data handling practices, reach our human bookseller desk directly:

Royal River Books is committed to ensuring full digital accessibility for all readers, including individuals with disabilities. We strive to adhere to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards across royalsriverbooks.com.

Key accessibility implementations include high-contrast typography adhering to minimum 7.2:1 and 12.4:1 contrast ratios on our Cool Slate palette, persistent skip-navigation routing, keyboard navigability across all interactive drawer controls, visible focus rings, descriptive alternative text on catalog photography, and semantic document outlines.

If you encounter any barrier while accessing our catalog, inquiry forms, or documents, please contact us immediately at [email protected] or telephone 207-846-8006. We will promptly provide the requested edition information or quote through an alternative accessible format.