Privacy policy

Last updated: 15 October 2026

This policy explains what personal data we collect when you visit https://inyourcornerbook.com, place an order, sign up for our emails or send us a press request, why we use it, who receives it and what rights you have.

1. Who is responsible

Orbita Payments Limited
Room 01, 26th Floor
Working View Commercial Building
21 Yiu Wa Street
Causeway Bay
Hong Kong
Business Registration No. 78202385
Email: support@inyourcornerbook.com
Phone: +1 646-918-5596

We are the controller for the personal data described in this policy: Orbita Payments Limited is the merchant of record of this store, sells the books in its own name and decides how the data of an order is used. Orbita Media GmbH, Ericusspitze 4, 20457 Hamburg, Germany, is the publisher of the book and receives the data it needs for production, dispatch and support (see section 6). For data protection questions, write to support@inyourcornerbook.com.

2. What we collect

Order data: your name, email address, billing and delivery address, phone number if you give one, the items you ordered, the amount, the currency, the payment method, the order number and the delivery status.
Payment data: your payment is processed by our payment providers. We receive the confirmation of the payment, the payment method and, for PayPal and Google Pay, the delivery address stored there. We never receive or store complete card numbers.
Account data: if you create a customer account, the email address and the information you keep in it.
Email signup data: if you sign up for our emails, your email address, your first name if you give it, your answer to the question asked at signup, the date and time of your signup, the wording of the consent you agreed to, the IP address and browser information at the moment of signup, and the date and time of your confirmation click. We need these details to be able to show that the consent was given by you.
Email delivery data: whether an email was delivered, bounced, opened or clicked, and which link was clicked.
Messages: anything you write to us by email, and our answers.
Website usage: IP address, browser and device information, pages viewed, products viewed, items added to the cart, referring pages and campaign parameters, and, with Microsoft Clarity, how you scroll, click and move the mouse on a page (see section 10). With your consent, Google Analytics also receives email addresses and phone numbers you enter in forms or at checkout, in hashed form (see section 10). Analytics and advertising cookies are only used if you allow them in the cookie banner.
Press requests: what you enter in the press form, and publicly available information about you and your outlet that we look up before we reply (see section 5).
eBook data: if you buy the eBook, the personal note and the code in your copy, the record that links the code to your order and the record of your downloads (see section 11).

3. Why we use it and on what legal basis

Purpose	Legal basis (GDPR and UK GDPR)
Processing and delivering your order, customer service, returns and refunds	Article 6(1)(b): performance of the contract
Fraud prevention, security of the store, keeping our systems running	Article 6(1)(f): our legitimate interest in a store that works and is not abused
Showing the Google Pay and PayPal buttons on product pages and in the cart (see section 10)	Article 6(1)(f): our legitimate interest in offering a fast way to pay with a wallet you already use
Accounting and tax records	Article 6(1)(c): legal obligation
Emails about the book that belong to your order, including the presale benefits you bought	Article 6(1)(b): performance of the contract
Marketing emails to customers in the United States and Canada about In Your Corner and related books, workbooks, courses and events (see section 4)	Where the GDPR applies at all: Article 6(1)(f), our legitimate interest in telling our customers about related products; you can object at any time (Article 21(2) and (3))
Newsletters and all other marketing emails	Article 6(1)(a): your consent, which you can withdraw at any time
Analytics and advertising cookies	Article 6(1)(a): your consent through the cookie banner
Answering press requests	Article 6(1)(f): our legitimate interest in answering media requests; Article 6(1)(b) where your request aims at an agreement with us, such as an interview or a review copy
Checking publicly available information about the person and outlet behind a press request	Article 6(1)(f): our legitimate interest in verifying media requests before we arrange interviews or send review copies
Personalising your eBook with your name and a code unique to your copy, and keeping the record that links the code to your order (see section 11)	Article 6(1)(f): our legitimate interest, and that of the author and the publisher, in protecting the book against unauthorised copying and sharing; you can object (Article 21(1))

If you live in Hong Kong, we use your data for the purposes described above and for directly related purposes, and we use it for direct marketing only with your consent (Personal Data (Privacy) Ordinance).

4. Emails

Our emails are sent with our own email system, which runs on servers in Nuremberg, Germany, and uses Amazon Simple Email Service (region eu-north-1) to deliver the messages. If you sign up for our emails, we send you a confirmation email first and add you to the list only after you click the link in it. Every marketing email contains a one click unsubscribe link, and you can also unsubscribe by writing to support@inyourcornerbook.com. We measure whether our emails are delivered, opened and clicked so that we can tell whether they arrive and whether they are useful.

Marketing emails to customers in the United States and Canada. If you have ordered from us and your order is delivered to an address in the United States or Canada, we may email you about In Your Corner and related books, workbooks, courses and events from Orbita Payments Limited, even if you did not tick the marketing box at checkout. In Canada we do this only for two years after your most recent purchase. Each of these emails says that it is a marketing email, and you can stop them at any time with the one click unsubscribe link in every email or by writing to support@inyourcornerbook.com; your order and shipping emails keep coming. If you remove the tick from a pre-ticked marketing box at checkout, we do not send you marketing emails.

If you live in the European Union, the United Kingdom, Australia, Hong Kong or any other country, we send you marketing emails only with your consent.

5. Press requests

If you send us a press request through https://inyourcornerbook.com/pages/press, we receive your name, email address, outlet, role, country, the link you give, the type of request and your message. We use these details to answer you.

Before we reply, we check whether the person and the outlet behind the request can be found in publicly available sources. For this check we send your name, your outlet and the link you gave to a web search service (Brave Search, Brave Software, Inc., USA) and ask an AI language model to summarise the search results for us. The information we obtain this way comes from publicly available sources, mainly your outlet's website and published articles, and consists of your professional role, your published work and the reach and topics of your outlet. Your message is not part of this check. The summary is a note for our team: a person on our team reads your request and decides how to answer it, and no decision is made automatically.

Your request and the result of the check are kept in our support system, which Orbita Media GmbH operates for us on servers of Hetzner Online GmbH in Germany. We delete them three years after the matter is closed. You can object to the check at any time by writing to support@inyourcornerbook.com or to the press address given on the press page; we then answer your request without it.

6. Who receives your data

Shopify Inc. and its group companies, which host this store and process orders, including Shopify Payments for card payments.
PayPal (for orders paid with PayPal: PayPal Hong Kong Limited and the PayPal group; the PayPal button also loads when you open a product page or the cart, see section 10).
Google Pay (for orders paid with Google Pay: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for customers in the European Economic Area, and Google LLC, USA, for customers elsewhere; the Google Pay button also loads when you open a product page or the cart, see section 10).
Orbita Media GmbH, Ericusspitze 4, 20457 Hamburg, Germany, the publisher of the book. It supplies the books to us, arranges their production and dispatch, answers questions about the book and the author, and operates our email and signup systems and the delivery of our eBooks on our behalf. For the dispatch and the book related support it receives your name, your delivery address and your order data; for these systems it acts on our instructions as our processor.
Hetzner Online GmbH, Germany, which hosts those systems.
Amazon Web Services, which delivers our emails through Amazon Simple Email Service.
Google Ireland Limited and Google LLC, for Google Analytics 4, Google Ads (conversion measurement and remarketing), Google Tag Manager and the Google and YouTube app of this store, if you allow analytics and advertising cookies.
Meta Platforms Ireland Limited, for the Meta pixel of the Facebook and Instagram app of this store (measurement of visits and purchases, and advertising on Facebook and Instagram), if you allow advertising cookies.
Microsoft Ireland Operations Limited, for Microsoft Clarity (analysis of how visitors use this store with session recordings and heatmaps, see section 10), if you allow analytics cookies.
Brave Software, Inc., USA, and providers of AI language models, which receive the name, outlet and link from a press request for the check described in section 5.
Carriers and fulfilment partners, which receive the delivery address in order to deliver your parcel.
Professional advisers and authorities, where we are required by law to disclose data.

We do not sell your personal data, and we do not share it for cross context behavioural advertising.

7. International transfers

We are based in Hong Kong. Our email and signup systems run in Germany; Shopify, Google, Microsoft and PayPal process data in the United States and in other countries, and the check of press requests (section 5) uses services in the United States. We create and deliver our eBooks (section 11) ourselves on the same systems in Germany; no outside eBook service is involved. Where data of people in the European Economic Area or the United Kingdom is transferred to a country without an adequacy decision, the transfer is based on the Standard Contractual Clauses of the European Commission or on the equivalent United Kingdom transfer mechanism. Transfers to Microsoft Corporation and Google LLC are based on the EU-U.S. Data Privacy Framework (see section 10).

8. How long we keep it

Order, payment and invoice data: seven years, because business records must be kept for not less than seven years under section 51C of the Inland Revenue Ordinance of Hong Kong.
Email marketing data: until you unsubscribe. The proof of your consent and of your unsubscribe is kept for three further years so that we can show that our emails were lawful.
Messages to our support address: three years after the matter is closed.
Press requests and the result of their check: three years after the matter is closed.
eBook personalisation: the record that links the code in your copy to your order, seven years like the order data; each entry in the record of your downloads, twelve months after that download (see section 11).
Website usage data collected with your consent: Google Analytics data, including Google Signals, for 14 months; otherwise as described in the cookie banner and, for Microsoft Clarity, in section 10.

9. Your rights

Depending on where you live, you have some or all of the following rights: access to the data we hold about you, correction of inaccurate data, deletion, restriction of processing, portability, objection to processing based on our legitimate interests, and withdrawal of your consent at any time with effect for the future. People in Hong Kong have the right to request access to and correction of their personal data and to require us to stop using their data for direct marketing.

To use any of these rights, write to support@inyourcornerbook.com. We answer without undue delay. If you are in the European Economic Area or the United Kingdom, you may also complain to the data protection authority of the country in which you live.

10. Cookies and similar technologies

This store uses cookies that are necessary for it to work (for example the cart and the checkout) and, if you allow them, cookies for analytics and advertising: Google Analytics 4, Google Ads, Google Tag Manager, the pixel of the Google and YouTube app, the Meta pixel of the Facebook and Instagram app, Microsoft Clarity and the analytics pixels of Shopify. You choose with the cookie banner on your first visit, and you can change your choice at any time through the “Your Privacy Choices” link in the footer of the store. Declining does not affect your ability to browse or to order.

Google Analytics, Google Signals and data you enter. If you allow analytics cookies, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to see how visitors use this store. It sets the cookies _ga and _ga_JMT4M9F4G6 (two years) and sends your IP address, information about your browser and device and the pages you view to Google. Google Analytics also recognises email addresses and phone numbers that you enter in forms or at checkout and sends them to Google only in hashed form (an irreversible code), so that visits and orders can be counted correctly; Google uses this data for advertising, for example to measure our Google Ads campaigns, only if you also allow advertising cookies. If you allow advertising cookies, we also use Google Signals: if you are signed in to a Google account and have allowed personalised ads, Google combines the analytics data with data from your Google account, such as location, search and YouTube history and data from partner sites. We only receive aggregated reports from this, for example on the devices used (including across devices), age, gender and interests; we cannot identify you from them. You can view and delete this data at https://myactivity.google.com and switch off personalised ads at https://myadcenter.google.com. Google keeps Google Analytics data, including Google Signals, for 14 months. The legal basis is your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. Google Ireland Limited transfers data to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the adequacy decision of the European Commission of 10 July 2023 and, for data from the United Kingdom, on the UK Extension to that framework. You can withdraw your consent at any time with effect for the future through the “Your Privacy Choices” link in the footer of the store. Google's privacy policy: https://policies.google.com/privacy

Microsoft Clarity. If you allow analytics cookies, we use Microsoft Clarity, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity shows us how visitors use this store: it records the pages you view and how you scroll, click and move the mouse on them as session recordings, and summarises the visits of all visitors as heatmaps. Microsoft also receives your IP address and information about your browser and device. We use this to find errors and to make the store easier to use. Clarity sets the cookies _clck (one year) and _clsk (one day) on this store. Only if you also allow advertising cookies, Microsoft sets the cookies MUID and SRM_B (13 months), MR (seven days), ANONCHK (ten minutes) and SM (until you close the browser) on its own domains clarity.ms and bing.com to recognise your browser across Microsoft services; Microsoft also uses MUID for advertising. The legal basis is your consent under section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Article 6(1)(a) GDPR. Microsoft stores the data in its Azure cloud and transfers it to Microsoft Corporation in the United States. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the adequacy decision of the European Commission of 10 July 2023 and, for data from the United Kingdom, on the UK Extension to that framework. Microsoft keeps session recordings for 30 days; recordings we mark as favourites and a random sample of recordings are kept for up to nine months. You can withdraw your consent at any time with effect for the future through the “Your Privacy Choices” link in the footer of the store; Clarity then stops on the page you are on, deletes the cookies _clck and _clsk and is no longer loaded on the pages you open next. Microsoft's privacy statement: https://privacy.microsoft.com/privacystatement

Google Pay and PayPal buttons. On product pages and in the cart we show buttons to pay directly with Google Pay and PayPal. To display them, your browser loads them from Google (pay.google.com, www.gstatic.com) and PayPal (www.paypal.com, www.paypalobjects.com) when the page opens, whatever you choose in the cookie banner. Google and PayPal receive your IP address, information about your browser and device and the address of the page, and Google logs how its button is displayed (play.google.com). We store nothing on your device for these buttons; if you are signed in to Google or PayPal in the same browser, these services can recognise their own cookies, for example to show whether you have a card saved with them. The legal basis for showing the buttons is our legitimate interest in offering a fast way to pay with a wallet you already use (Article 6(1)(f) GDPR). If you click a button and pay with it, the processing is necessary for the performance of the contract (Article 6(1)(b) GDPR), and the access to your device that the payment needs is strictly necessary for the service you asked for (section 25(2) no. 2 TDDDG). Google and PayPal are responsible for their own processing: https://payments.google.com/legaldocument?family=0.privacynotice and https://www.paypal.com/webapps/mpp/ua/privacy-full

11. Personalised eBooks

Every copy of the In Your Corner eBook that we deliver is personalised for its buyer before it is delivered.

What we put into your copy. The eBook contains a visible note that this copy was made for you, with your name and your order number. In addition, the file contains invisible marks with a code that is unique to your copy. The code does not contain your name or your email address; only we can match it to your order.

How we deliver it. We create your copy ourselves on our own systems in Germany when you first download it, and we deliver it through a personal download page on updates.inyourcornerbook.com. The link to that page is sent to you by email and also appears on the confirmation and order status pages of your order. You can download your copy up to five times within one year of your purchase or, if you pre-ordered, of the publication date; if the link has expired or the limit has been reached, write to support@inyourcornerbook.com and we will send you a new link free of charge. When you download the file, we record the date and time, your IP address, the user agent your browser sends (its name and version and your operating system, shortened to 200 characters) and how often the file has been downloaded, so that the link cannot be passed on without limit. The eBook has no copy protection and does not contact us when you open or read it.

Why we do it and on what legal basis. Delivering the eBook, including the download link and the download itself, is necessary for the performance of our contract with you (Article 6(1)(b) GDPR). Putting your name and the code into the file and keeping the record that links the code to your order are based on Article 6(1)(f) GDPR. Our legitimate interest, and that of the author and of Orbita Media GmbH as the publisher that holds the rights to the book, is to protect the book against unauthorised copying and sharing: the personal note discourages passing the file on, and the code lets us find out from which copy a file shared without permission was made, so that we can enforce our rights. We look up the code only when a copy of the book turns up somewhere without our permission, and we use the result only to clarify that case, to contact the buyer of that copy and, where necessary, to establish, exercise or defend legal claims; for this we may pass it to the publisher, to our legal advisers and to courts.

The marks stay in the file. Your name and the code are part of the file you receive. Once the file has been delivered, we cannot change them or remove them from your copy or from copies made from it, so a request to delete your data (Article 17 GDPR) does not reach those copies. You can delete your copy at any time. We delete our own records as described below.

Who receives the data. No outside eBook service receives your data. The systems that create and deliver your copy are the ones that also run our email signup: Orbita Media GmbH operates them for us on servers of Hetzner Online GmbH in Germany, and both act on our instructions as our processors (Article 28 GDPR, see section 6).

How long we keep it. We keep the record that links the code to your order, including the number of downloads, for as long as we keep your order data, that is seven years (see section 8), because the code only serves its purpose while it can be matched to an order. We delete each entry in the record of your downloads, including your IP address and user agent, twelve months after that download, unless we need it to clarify a specific case of unauthorised sharing.

Your right to object. You can object to the personalisation of your copy at any time on grounds relating to your particular situation (Article 21(1) GDPR) by writing to support@inyourcornerbook.com. If you object before we create your copy, we consider your reasons; because we sell the eBook only as a personalised copy, we may not be able to deliver it without the marks, and in that case we cancel the eBook and refund what you paid for it. An objection after delivery cannot remove the marks from copies that have already been delivered; we then keep the record only for the establishment, exercise or defence of legal claims.

12. Children

This store is not directed at children. We do not knowingly collect personal data from children. If you believe that a child has given us personal data, write to support@inyourcornerbook.com and we will delete it.

13. Security

We protect your data with encrypted connections, access controls and regular updates. No system is perfectly secure, so please do not send us passwords or payment card details by email.

14. Changes to this policy

We update this policy when our processing changes. The current version is always the one published here, with the date at the top.