Privacy policy

Last updated: 2 October 2026

This policy explains what personal data we collect when you visit https://inyourcornerbook.com, place an order, sign up for our emails or send us a press request, why we use it, who receives it and what rights you have.

1. Who is responsible

Orbita Payments Limited
Room 01, 26th Floor
Working View Commercial Building
21 Yiu Wa Street
Causeway Bay
Hong Kong
Business Registration No. 78202385
Email: support@inyourcornerbook.com
Phone: +1 646-918-5596

We are the controller for the personal data described in this policy: Orbita Payments Limited is the merchant of record of this store, sells the books in its own name and decides how the data of an order is used. Orbita Media GmbH, Ericusspitze 4, 20457 Hamburg, Germany, is the publisher of the book and receives the data it needs for production, dispatch and support (see section 6). For data protection questions, write to support@inyourcornerbook.com.

2. What we collect

Order data: your name, email address, billing and delivery address, phone number if you give one, the items you ordered, the amount, the currency, the payment method, the order number and the delivery status.
Payment data: your payment is processed by our payment providers. We receive the confirmation of the payment, the payment method and, for PayPal and Google Pay, the delivery address stored there. We never receive or store complete card numbers.
Account data: if you create a customer account, the email address and the information you keep in it.
Email signup data: if you sign up for our emails, your email address, your first name if you give it, your answer to the question asked at signup, the date and time of your signup, the wording of the consent you agreed to, the IP address and browser information at the moment of signup, and the date and time of your confirmation click. We need these details to be able to show that the consent was given by you.
Email delivery data: whether an email was delivered, bounced, opened or clicked, and which link was clicked.
Messages: anything you write to us by email, and our answers.
Website usage: IP address, browser and device information, pages viewed, products viewed, items added to the cart, referring pages and campaign parameters, and, with Microsoft Clarity, how you scroll, click and move the mouse on a page (see section 10). Analytics and advertising cookies are only used if you allow them in the cookie banner.
Press requests: what you enter in the press form, and publicly available information about you and your outlet that we look up before we reply (see section 5).

3. Why we use it and on what legal basis

Purpose	Legal basis (GDPR and UK GDPR)
Processing and delivering your order, customer service, returns and refunds	Article 6(1)(b): performance of the contract
Fraud prevention, security of the store, keeping our systems running	Article 6(1)(f): our legitimate interest in a store that works and is not abused
Showing the Google Pay and PayPal buttons on product pages and in the cart (see section 10)	Article 6(1)(f): our legitimate interest in offering a fast way to pay with a wallet you already use
Accounting and tax records	Article 6(1)(c): legal obligation
Emails about the book that belong to your order, including the presale benefits you bought	Article 6(1)(b): performance of the contract
Marketing emails to customers in the United States and Canada about In Your Corner and related books, workbooks, courses and events (see section 4)	Where the GDPR applies at all: Article 6(1)(f), our legitimate interest in telling our customers about related products; you can object at any time (Article 21(2) and (3))
Newsletters and all other marketing emails	Article 6(1)(a): your consent, which you can withdraw at any time
Analytics and advertising cookies	Article 6(1)(a): your consent through the cookie banner
Answering press requests	Article 6(1)(f): our legitimate interest in answering media requests; Article 6(1)(b) where your request aims at an agreement with us, such as an interview or a review copy
Checking publicly available information about the person and outlet behind a press request	Article 6(1)(f): our legitimate interest in verifying media requests before we arrange interviews or send review copies

If you live in Hong Kong, we use your data for the purposes described above and for directly related purposes, and we use it for direct marketing only with your consent (Personal Data (Privacy) Ordinance).

4. Emails

Our emails are sent with our own email system, which runs on servers in Nuremberg, Germany, and uses Amazon Simple Email Service (region eu-north-1) to deliver the messages. If you sign up for our emails, we send you a confirmation email first and add you to the list only after you click the link in it. Every marketing email contains a one click unsubscribe link, and you can also unsubscribe by writing to support@inyourcornerbook.com. We measure whether our emails are delivered, opened and clicked so that we can tell whether they arrive and whether they are useful.

Marketing emails to customers in the United States and Canada. If you have ordered from us and your order is delivered to an address in the United States or Canada, we may email you about In Your Corner and related books, workbooks, courses and events from Orbita Payments Limited, even if you did not tick the marketing box at checkout. In Canada we do this only for two years after your most recent purchase. Each of these emails says that it is a marketing email, and you can stop them at any time with the one click unsubscribe link in every email or by writing to support@inyourcornerbook.com; your order and shipping emails keep coming. If you remove the tick from a pre-ticked marketing box at checkout, we do not send you marketing emails.

If you live in the European Union, the United Kingdom, Australia, Hong Kong or any other country, we send you marketing emails only with your consent.

5. Press requests

If you send us a press request through https://inyourcornerbook.com/pages/press, we receive your name, email address, outlet, role, country, the link you give, the type of request and your message. We use these details to answer you.

Before we reply, we check whether the person and the outlet behind the request can be found in publicly available sources. For this check we send your name, your outlet and the link you gave to a web search service (Brave Search, Brave Software, Inc., USA) and ask an AI language model to summarise the search results for us. The information we obtain this way comes from publicly available sources, mainly your outlet's website and published articles, and consists of your professional role, your published work and the reach and topics of your outlet. Your message is not part of this check. The summary is a note for our team: a person on our team reads your request and decides how to answer it, and no decision is made automatically.

Your request and the result of the check are kept in our support system, which Orbita Media GmbH operates for us on servers of Hetzner Online GmbH in Germany. We delete them three years after the matter is closed. You can object to the check at any time by writing to support@inyourcornerbook.com or to the press address given on the press page; we then answer your request without it.

6. Who receives your data

Shopify Inc. and its group companies, which host this store and process orders, including Shopify Payments for card payments.
PayPal (for orders paid with PayPal: PayPal Hong Kong Limited and the PayPal group; the PayPal button also loads when you open a product page or the cart, see section 10).
Google Pay (for orders paid with Google Pay: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for customers in the European Economic Area, and Google LLC, USA, for customers elsewhere; the Google Pay button also loads when you open a product page or the cart, see section 10).
Orbita Media GmbH, Ericusspitze 4, 20457 Hamburg, Germany, the publisher of the book. It supplies the books to us, arranges their production and dispatch, answers questions about the book and the author, and operates our email and signup systems on our behalf. For the dispatch and the book related support it receives your name, your delivery address and your order data; for the email systems it acts on our instructions as our processor.
Hetzner Online GmbH, Germany, which hosts those systems.
Amazon Web Services, which delivers our emails through Amazon Simple Email Service.
Google Ireland Limited and Google LLC, for Google Analytics 4, Google Ads (conversion measurement and remarketing), Google Tag Manager and the Google and YouTube app of this store, if you allow analytics and advertising cookies.
Meta Platforms Ireland Limited, for the Meta pixel of the Facebook and Instagram app of this store (measurement of visits and purchases, and advertising on Facebook and Instagram), if you allow advertising cookies.
Microsoft Ireland Operations Limited, for Microsoft Clarity (analysis of how visitors use this store with session recordings and heatmaps, see section 10), if you allow analytics cookies.
Brave Software, Inc., USA, and providers of AI language models, which receive the name, outlet and link from a press request for the check described in section 5.
Carriers and fulfilment partners, which receive the delivery address in order to deliver your parcel.
Professional advisers and authorities, where we are required by law to disclose data.

We do not sell your personal data, and we do not share it for cross context behavioural advertising.

7. International transfers

We are based in Hong Kong. Our email and signup systems run in Germany; Shopify, Google, Microsoft and PayPal process data in the United States and in other countries, and the check of press requests (section 5) uses services in the United States. Where data of people in the European Economic Area or the United Kingdom is transferred to a country without an adequacy decision, the transfer is based on the Standard Contractual Clauses of the European Commission or on the equivalent United Kingdom transfer mechanism. Transfers to Microsoft Corporation are based on the EU-U.S. Data Privacy Framework (see section 10).

8. How long we keep it

Order, payment and invoice data: seven years, because business records must be kept for not less than seven years under section 51C of the Inland Revenue Ordinance of Hong Kong.
Email marketing data: until you unsubscribe. The proof of your consent and of your unsubscribe is kept for three further years so that we can show that our emails were lawful.
Messages to our support address: three years after the matter is closed.
Press requests and the result of their check: three years after the matter is closed.
Website usage data collected with your consent: as described in the cookie banner and, for Microsoft Clarity, in section 10.

9. Your rights

Depending on where you live, you have some or all of the following rights: access to the data we hold about you, correction of inaccurate data, deletion, restriction of processing, portability, objection to processing based on our legitimate interests, and withdrawal of your consent at any time with effect for the future. People in Hong Kong have the right to request access to and correction of their personal data and to require us to stop using their data for direct marketing.

To use any of these rights, write to support@inyourcornerbook.com. We answer without undue delay. If you are in the European Economic Area or the United Kingdom, you may also complain to the data protection authority of the country in which you live.

10. Cookies and similar technologies

This store uses cookies that are necessary for it to work (for example the cart and the checkout) and, if you allow them, cookies for analytics and advertising: Google Analytics 4, Google Ads, Google Tag Manager, the pixel of the Google and YouTube app, the Meta pixel of the Facebook and Instagram app, Microsoft Clarity and the analytics pixels of Shopify. You choose with the cookie banner on your first visit, and you can change your choice at any time through the “Your Privacy Choices” link in the footer of the store. Declining does not affect your ability to browse or to order.

Microsoft Clarity. If you allow analytics cookies, we use Microsoft Clarity, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity shows us how visitors use this store: it records the pages you view and how you scroll, click and move the mouse on them as session recordings, and summarises the visits of all visitors as heatmaps. Microsoft also receives your IP address and information about your browser and device. We use this to find errors and to make the store easier to use. Clarity sets the cookies _clck (one year) and _clsk (one day) on this store. Only if you also allow advertising cookies, Microsoft sets the cookies MUID and SRM_B (13 months), MR (seven days), ANONCHK (ten minutes) and SM (until you close the browser) on its own domains clarity.ms and bing.com to recognise your browser across Microsoft services; Microsoft also uses MUID for advertising. The legal basis is your consent under section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Article 6(1)(a) GDPR. Microsoft stores the data in its Azure cloud and transfers it to Microsoft Corporation in the United States. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the adequacy decision of the European Commission of 10 July 2023 and, for data from the United Kingdom, on the UK Extension to that framework. Microsoft keeps session recordings for 30 days; recordings we mark as favourites and a random sample of recordings are kept for up to nine months. You can withdraw your consent at any time with effect for the future through the “Your Privacy Choices” link in the footer of the store; Clarity then stops on the page you are on, deletes the cookies _clck and _clsk and is no longer loaded on the pages you open next. Microsoft's privacy statement: https://privacy.microsoft.com/privacystatement

Google Pay and PayPal buttons. On product pages and in the cart we show buttons to pay directly with Google Pay and PayPal. To display them, your browser loads them from Google (pay.google.com, www.gstatic.com) and PayPal (www.paypal.com, www.paypalobjects.com) when the page opens, whatever you choose in the cookie banner. Google and PayPal receive your IP address, information about your browser and device and the address of the page, and Google logs how its button is displayed (play.google.com). We store nothing on your device for these buttons; if you are signed in to Google or PayPal in the same browser, these services can recognise their own cookies, for example to show whether you have a card saved with them. The legal basis for showing the buttons is our legitimate interest in offering a fast way to pay with a wallet you already use (Article 6(1)(f) GDPR). If you click a button and pay with it, the processing is necessary for the performance of the contract (Article 6(1)(b) GDPR), and the access to your device that the payment needs is strictly necessary for the service you asked for (section 25(2) no. 2 TDDDG). Google and PayPal are responsible for their own processing: https://payments.google.com/legaldocument?family=0.privacynotice and https://www.paypal.com/webapps/mpp/ua/privacy-full

11. Children

This store is not directed at children. We do not knowingly collect personal data from children. If you believe that a child has given us personal data, write to support@inyourcornerbook.com and we will delete it.

12. Security

We protect your data with encrypted connections, access controls and regular updates. No system is perfectly secure, so please do not send us passwords or payment card details by email.

13. Changes to this policy

We update this policy when our processing changes. The current version is always the one published here, with the date at the top.