Privacy policy

Stone Bridge Books, Bulevar Vudroa Vilsona 4a, Savski venac, 11000 Beograd, Srbija, is responsible for your personal data. For any question or request about it, write to [email protected].

For an order: first and last name, delivery address, phone and email. For an account, also your saved addresses, order history and wishlist. For an enquiry: your name, email, optionally a phone number, and your message.

We store no card details. When card payment is switched on, those will pass directly through the bank.

To take, deliver and support your order and to run your account: performance of the contract.

To issue invoices and keep accounting records: legal obligation.

To keep the shop secure, stop fake orders and spam (Cloudflare Turnstile and request limits) and find technical faults (Sentry): our legitimate interest in a safe, working shop.

To measure how the shop is used (Google Analytics): your consent, which you can withdraw at any time.

Invoices and accounting records are kept as long as accounting and tax law requires. Order details are kept as long as needed for the contract, complaints and legal claims. Account data is kept until you ask us to delete the account. Everything else is deleted once we no longer need it.

The courier receives the details needed to deliver, and our accountant receives invoice details. Service providers process data on our behalf to run the shop: Vercel (website hosting), Railway (shop system and database), Cloudflare (security check and file storage), Google Workspace (email), Sentry (error reports) and, only with your consent, Google Analytics.

Because we ship from Skopje, delivery details are transferred to North Macedonia. Some providers also process data in the EU and the United States. We use providers that protect it with appropriate safeguards, such as standard contractual clauses. We do not sell or trade customer data.

The browser stores your basket, language preference and a sign-in token needed to keep your account session. Cloudflare's security check may store a short-lived token to tell people from bots. These are strictly necessary and need no consent.

Google Analytics sets its own cookies to measure how the shop is used, with every advertising feature switched off. It runs only if you press Accept in the cookie banner. You can withdraw that at any time under Cookie settings at the bottom of every page, which also deletes its cookies; the shop works exactly the same without them.

You have the right to access your data, have it corrected or deleted, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. Write to [email protected] and we reply within 30 days, usually sooner.

You also have the right to complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection.