No products in the cart.
Readerama is in Beta - let us know your thoughts via the Feedback tab
Introduction
We are Readerama Ltd (“we” or “us”) and we are registered with the UK Information Commissioner’s Office with registration number ZC009317. This Privacy Policy governs the manner in which we collect, use, store, maintain and disclose information collected about you (whether directly or indirectly) and through any services offered on our website https://readerama.com and our Readerama app (together the “Site”).
This Privacy Policy was last updated in March 2026.
The Site is designed for users who are at least 18.
We act as both a Data Controller and Data Processor
We collect and use personal data from anyone who uses the Site and/or our service.
In respect of the data that we need to collect from you in order to provide our service, we act as a Data Controller for the purposes of the UK’s laws on data protection. This means that we make independent decisions about how that data is processed in order to provide our services to you. More detail about the types of information we collect in our capacity as Data Controller is set out at below.
Where you choose to submit any post through the Readerama platform, we will act as an intermediary but you will be in control of this information (the “Posted Information”) and we will simply act as a platform to enable this. We will only hold and use this Posted Information for that specific purpose and you can choose to delete it at any time. In accordance with the UK data protection laws, this makes us a Data Processor of this type of information and we will ensure that we comply with all relevant obligations in that regard. Please see the section below for more detail on this: “Personal information where we are the Data Processor”.
If you have any questions about this notice or you wish to exercise any of your legal rights in respect of the personal data that we hold about you, please contact us using the details set out below:
Contact Details
Email address: [email protected]
Postal address: 266 Banbury Road, Oxford, England, OX2 7DL
Should you have any concerns about the way in which we handle your personal data, please let us know and we will do our best to address your concerns. Should it be necessary to do so, you also have the right to make a complaint about us to the Information Commissioner’s Office (the “ICO”) which is the UK supervisory authority for data protection issues (www.ico.org.uk).
Personal information where we are the Data Controller
We collect personal information from Readerama users when you open an account with us, submit information on the Site or if you correspond with us by telephone, email or otherwise. On the Site, we request information from you when you set up an account on the Site, search for an item, post an item on the Site and/or when you report a problem with the Site.
As a Data Controller, we may collect, use, store and transfer different kinds of personal data about you where we have a lawful justification for doing so as follows:
| Data type | Data specifics | Lawful justification |
|---|---|---|
| Contact data | Name, address, phone number, email address | To provide you with our service, to send you service emails |
| Profile data | For example, your book preferences, your Instagram handle etc | Consent – provision of such information is voluntary and consent can be withdrawn at any time |
| Marketing data | Your consent (if you choose to give it for specific types of marketing) to receive marketing information from us about our business | Consent – this is optional and any consent given can be withdrawn at any time |
| Transaction data | Transaction history – e.g. orders placed, items sold, refunds requested | To perform our contractual obligations and to keep records of those |
| Technical and usage data | Typically collected through cookies (see below) in respect of the manner in which you use our website and may also include: internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Site | Consent through the cookie pop-up notice on the Site – consent can be withdrawn at any time |
| Feedback data | Feedback you may choose to give us about our service | Consent – this is optional and any consent can be withdrawn at any time |
We will only use your personal information when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- where we need to perform any contract we are about to enter into or have entered into with you;
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
- where we need to comply with a legal or regulatory obligation; and
- where you have provided your consent.
We do not collect any payment information at all. All payments are handled by Stripe and Stripe has a privacy notice here Privacy Policy that applies to the collection of your personal information for payment purposes.
Personal information where we are the Data Processor
You may choose to supply different types of information over which, you retain control and where we act only as a Data Processor:
| Data type | Data specifics | Lawful justification |
|---|---|---|
| Contact data | Name, address and phone number | To enable a parcel to be sent to you from a seller and to allow us to calculate shipping costs |
| Profile data | Anything you choose to list on your profile (e.g. book preferences, social media handles) | Consent – provision of such information is voluntary and consent can be withdrawn at any time |
| Book Listing data | Your personal opinions/reviews of any book you choose to list | Consent – provision of such information is voluntary and consent can be withdrawn at any time |
We will only use the above information in our capacity as Data Processor in accordance with your instructions – unless the law applies to prevent this. We will delete the above information on your request – unless the law applies to prevent this.
You acknowledge that there are service providers listed below who may access this personal data and you agree that we may appoint carefully vetted new service providers from time to time as the business grows. An updated list of our service providers is available on request. We remain liable to you for all acts or omissions of any service provider that we choose to appoint.
Your treatment of Readerama user data
We ask that all users of Readerama respect Readerama user data and only hold onto it for as long as is necessary e.g. in order to post a parcel to them. Please see our terms and conditions for further information about the standards we expect on our Site.
Non-personal information
We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data, but is not considered personal data in law as this data does not directly or indirectly reveal your identity. We may also anonymise your personal data so that it can no longer be associated with you. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.
Non-essential cookies
The Site uses certain non-essential “cookies”. We currently use Google Analytics (as many companies do) so that we can understand and analyse the activity of those who visit the Site. The cookies collect this information in aggregate form for us to view. When you first access our site, you have the option to accept or reject these non-essential cookies.
Cookies work by placing a small piece of information onto your device for the purposes of logging in or to help track analytical information. You can change your web browser settings to disallow any non-essential cookies at any time. Different web browsers have different protocols for changing these settings. Information about most web browsers’ protocols is set out here: https://www.allaboutcookies.org.
Sharing your personal information
We do not sell, trade or otherwise provide your personal information to others, other than as set out below.
As most companies do, we use third party service providers to assist us in operating our business. As you would expect, these services include, but are not limited to, postal, IT provision, IT security and support, such as those services provided by Fastcomet, Cloudfare, Feedbackify, Sendcloud. Your name and address will be shared directly with the seller of your book so that they can complete your order. We may share your information with these third parties only so that we can operate our service to you. Any company providing services to us like this acts as a Data Processor and is contractually bound only to use personal data we share with them, for the purposes prescribed by us. We do not allow our service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We may also share your personal information with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Policy.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
International transfers of your personal data
We don’t transfer your personal data outside of the UK/European Economic Area as a matter of course. Where our service providers are based outside the UK/EEA (e.g. Google Analytics and Cloudflare), we ensure that any transfer of personal data to them is done in accordance with current UK data protection laws so that you have the comfort that your data will be protected even outside the UK/EEA. Should you have any specific questions about this, please do let us know.
Changes to this Privacy Policy and your personal information
We may update this Privacy Policy at any time. When we do so and the update is significant, a notification will be placed on the main page of the Site. You acknowledge and agree that it is your responsibility to review this Privacy Policy occasionally and to familiarise yourself with any modifications.
Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have procedures for dealing with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements.
In some circumstances, you can ask us to delete your data: see below for further information.
Your legal rights
The following rights may be available depending on the particular circumstances:
- Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
- Request access to your personal data (commonly known as a “subject access request”). This enables you to receive a copy of the personal data we hold about you and certain information to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there are valid grounds for doing so and subject to applicable law.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in certain scenarios.
- Right to data portability. You may have the right to receive certain of your information in a structured, commonly used and machine-readable format and to transmit such information to another controller.
- Object to processing of your personal data where we process your data based on legitimate interest. We will assess your objection and determine whether we have any compelling legitimate grounds or legal justification for continued processing.
For more information about your rights under data protection laws (including your rights of access to the data we hold about you), please see: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
If you wish to exercise any of your rights under the data protection laws, please contact us. We try to respond to all legitimate requests as soon as possible within one month. If that is not possible, we will notify you and keep you updated.