Privacy Policy

Last updated: September 2026.

This Privacy Policy explains what personal data we collect through the website sicanjethebook.com (the “Website”), why we process it, whom we share it with, and what your rights are. We respect your privacy and process personal data in accordance with applicable law, including the EU General Data Protection Regulation (GDPR) for users in the European Union and the Law on the Protection of Personal Data in Bosnia and Herzegovina.

1. Data controller

The controller of your personal data is the publishing project “Sicanje”, authors Josipa Karača and Marija Maračić.

For any questions about data protection or to exercise your rights, contact us at: [enter contact email, e.g. info@sicanjethebook.com].

2. What data we collect

When you order the book through the Website (the Bosnia and Herzegovina option), we collect the data needed to process your order and delivery:

  • first and last name,
  • email address,
  • phone number,
  • shipping address (street, city, postal code, country),
  • order details (product, amount, currency, status and time of order).

We do not collect or store your payment card details — you enter them directly on the secure page of our payment provider (Stripe).

As on most websites, technical data may be collected automatically (IP address, browser type, data via cookies) for the operation and security of the Website.

3. Purpose and legal basis of processing

  • Processing and delivery of your order (name, address, phone, email) — legal basis: performance of a contract.
  • Sending purchase confirmation and order-related communication by email — legal basis: performance of a contract.
  • Keeping order records and meeting accounting and legal obligations — legal basis: legal obligation and legitimate interest.
  • Operation, security and improvement of the Website (technical data, cookies) — legal basis: legitimate interest.

4. Payment (Stripe)

Payments for orders from Bosnia and Herzegovina are processed by Stripe (Stripe, Inc. and Stripe Payments Europe, Ltd.) as our processor. During payment, your card details and the data required for the charge are handled by Stripe on its secure infrastructure. Stripe’s own privacy policy also applies to this processing: stripe.com/privacy.

5. Purchases via external platforms (EU and USA)

For orders from the European Union and the United States, the Website redirects you to external book-selling platforms:

When you choose these options, you leave our Website and your data (including payment and delivery) is collected and processed by the chosen platform under its own privacy policy. In those cases we have no access to your order data and do not store it. We recommend reviewing the privacy policies of those platforms.

6. Cookies

The Website may use essential cookies for proper functioning and, where necessary, cookies of the payment provider during the payment process. You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the Website.

7. Who we share data with

We do not sell your data. We share it only where necessary, namely with:

  • the payment provider (Stripe) — for processing payments,
  • the Website’s hosting and technical-support provider,
  • the delivery service (postal/courier) — for shipping the book,
  • competent authorities where required by law.

Note: processing may involve transferring data outside BiH/the EU (e.g. Stripe in the USA), subject to appropriate safeguards provided by law.

8. How long we keep data

We keep order data for as long as necessary to fulfil the order and to meet legal (e.g. accounting) obligations. After those periods expire, we delete or anonymise the data. Data from incomplete (cancelled or expired) orders is kept for a shorter period and then removed.

9. Your rights

With regard to your personal data, you have the right to:

  • access the data we process about you,
  • rectify inaccurate or incomplete data,
  • erasure of data (“right to be forgotten”),
  • restrict processing and object to processing,
  • data portability,
  • lodge a complaint with a supervisory authority (in BiH: the Personal Data Protection Agency of Bosnia and Herzegovina; in the EU: the competent authority of your country).

10. How to request deletion of your data

If you would like us to delete your personal data from our records, send a request to [enter contact email]. We will process the request within a reasonable time and remove the data, except for data we are legally required to retain. Please note that transaction records may be retained by the payment provider (Stripe) in line with their legal obligations.

11. Security

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, loss or misuse. Payment takes place over an encrypted connection and the secure infrastructure of the payment provider.

12. Changes to this policy

We may update this Privacy Policy from time to time. The new version is published on this page with the date of the last change indicated.