Kyle Alexandre Struan
This Privacy Policy explains how Kyle Alexandre Struan, publishing under the imprint Noble House Press, collects, uses, and protects personal information gathered through kylealexandrestruan.com and its associated subdomains, including the blog and store (together, the “Site”).
For the purposes of applicable data protection law — including the EU/UK General Data Protection Regulation (“GDPR”) and the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”) — the data controller is Kyle Alexandre Struan, based in Galicia, Spain.
You can contact us at any time via the Contact page or by email at privacy@kylealexandrestruan.com.
What information do we collect?
Information you provide directly
- Newsletter subscription: name and email address, when you sign up to the mailing list.
- Contact form: name, email address, and the content of your message.
- Store purchases: if you buy books or merchandise through our store, your name, shipping address, and order details are collected by our store providers (see Section 3). We do not directly process or store your payment card details; payment processing is handled securely by our store providers (Payhip and Stripe) and their payment processors.
Information collected automatically
- Standard technical data such as IP address, browser type, device type, and pages visited. This data is collected through our own self-hosted analytics platform (Matomo), run on our own server — not through Google Analytics or any third-party analytics service. Your data is never shared with, or used to build advertising profiles by, any outside analytics or advertising company. Non-essential cookies (including analytics) are only placed with your consent. See our Cookie Policy for full details.
What do we use your information for?
We process your personal data only for the following purposes and legal bases:
- To send newsletter updates about new releases, if you have subscribed (legal basis: consent, Art. 6.1.a GDPR).
- To respond to messages sent through the contact form (legal basis: legitimate interest in communicating with visitors who contact us, Art. 6.1.f GDPR).
- To fulfil orders placed through the store (legal basis: performance of a contract, Art. 6.1.b GDPR).
- To understand how the Site is used and improve it over time, via our self-hosted Matomo analytics (legal basis: legitimate interest, or consent where required for non-essential cookies).
We do not sell your personal data to third parties, and we do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.
Who do we share your information with?
We rely on the following third-party services to operate the Site. These providers act as data processors on our behalf and are bound by data processing agreements in accordance with Article 28 GDPR:
| Service | Purpose |
|---|---|
| Payhip | Direct sales of ebooks and digital products |
| Stripe | Payment processing for merchandise store purchases |
| Printful | Print-on-demand merchandise fulfilment |
| Raiola Networks | Website hosting |
Print books purchased through Amazon or IngramSpark are not listed above: for those purchases, the buyer relationship and any associated personal data are handled directly by the platform where you placed the order, not by us.
Our website analytics (Matomo), our newsletter (Mautic), and our Grav blog run on our own hosting at Raiola Networks and are not operated by an external company, so they are not listed above as third-party data processors — your data stays on infrastructure we control directly.
International data transfers
Some of the providers listed above are established outside the European Economic Area (EEA), including in the United States and Canada. Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission or another transfer mechanism recognised under Chapter V of the GDPR. You may request further information about these safeguards via the contact details above.
We encourage you to review the privacy policies of these providers, as their handling of your data is governed by their own terms once information is shared with them for the purposes above.
How long do we keep your data?
- Newsletter data: for as long as you remain subscribed.
- Contact form messages: for as long as needed to resolve your enquiry.
- Order data: for the minimum period required by applicable Spanish tax and commercial law (between 4 and 6 years).
- Analytics data (Matomo): raw visitor data is automatically deleted after 180 days.
How do we protect your data?
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will comply with our obligations under Articles 33 and 34 of the GDPR, including notifying the competent supervisory authority within 72 hours and, where required, informing affected individuals.
What rights do you have?
If you are located in the European Economic Area or the UK, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time (for example, by unsubscribing from the newsletter using the link in any email)
To exercise any of these rights, contact us via the Contact page or by email at privacy@kylealexandrestruan.com. We will respond within the timeframe set by the GDPR (generally one month).
If you believe your data has been mishandled, you have the right to lodge a complaint with your local data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).
What about children's privacy?
This Site is not directed at children under 14, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
Can this policy change?
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. If a change is substantial, we will notify you through the Site or by email before it takes effect. We encourage you to review this page periodically.
How can you contact us?
Questions about this Privacy Policy can be sent through the Contact page or by email at privacy@kylealexandrestruan.com.