Privacy Policy
1. About this Privacy Policy
Idris Barclay respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how Idris Barclay collects, uses, stores and protects personal data when you visit our website, contact us, purchase our books or other products, subscribe to our communications, or otherwise interact with us.
For the purposes of UK data protection law, the organisation responsible for your personal data is Idris Barclay, the trading name of the author.
This Privacy Policy applies to personal data collected through our website, by email and through other sales or communication platforms operated or used by Idris Barclay.
We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, together with the Privacy and Electronic Communications Regulations 2003 (PECR), where applicable.
2. What personal data do we collect?
Depending on how you interact with us, we may collect:
- your first and last name;
- email address;
- postal address;
- telephone number, where provided;
- details of products or services you purchase or enquire about;
- information contained in correspondence between you and Idris Barclay;
- your communication preferences;
- information you provide when subscribing to newsletters or other communications; and
- other information that you voluntarily provide to us.
We only seek to collect personal data that is relevant and reasonably necessary for the purpose for which it is being processed.
We do not intentionally collect special category personal data, such as information concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health, genetic or biometric data, or information concerning a person’s sex life or sexual orientation.
If you voluntarily provide such information to us in correspondence, we will handle it in accordance with applicable data protection law.
3. How do we collect your personal data?
We may collect personal data:
- when you visit or use our website;
- when you contact us by email or another communication method;
- when you subscribe to our newsletter or other communications;
- when you purchase a product;
- when you make an enquiry;
- when you participate in competitions, promotions or other activities operated by Idris Barclay; or
- when you otherwise voluntarily provide information to us.
Where personal data is obtained from a third party or another platform rather than directly from you, we will provide any privacy information required by applicable data protection law.
4. How do we use your personal data?
We may use your personal data for the following purposes:
Responding to enquiries
We may use your contact details and information contained in your enquiry to respond to you and provide the information or assistance you have requested.
Providing products and services
We may process your personal data where necessary to fulfil an order, provide a product or service, communicate with you about that order, and deal with related customer-service
matters.
Communications and newsletters
If you have subscribed to receive communications from Idris Barclay, we may use your contact details to send newsletters, information about new books, publications, events and other
relevant updates.
Where required by law, marketing communications will only be sent where the necessary consent has been obtained.
You may unsubscribe from marketing communications at any time by using the unsubscribe facility provided in the communication or by contacting us at:
idris@idrisbarclay.com
Administration and legal obligations
We may use personal data where necessary to maintain appropriate records, comply with legal or regulatory obligations, establish or exercise legal rights, or defend legal claims.
Website operation and security
We may process information where necessary to operate, maintain and secure our website and systems and to prevent fraud, misuse or unauthorised access.
5. Our lawful bases for processing
Under the UK GDPR, we must have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on one or more of the following lawful bases:
Contract
We may process personal data where this is necessary to enter into or perform a contract with you, for example when you purchase a product from us.
Consent
We may process personal data on the basis of your consent where you have freely and specifically agreed that we may use your information for a particular purpose.
Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Legitimate interests
We may process personal data where this is necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.
Examples may include operating and improving our website, communicating with customers and readers where permitted by law, maintaining appropriate business records and protecting our systems.
Legal obligation
We may process personal data where necessary to comply with a legal or regulatory obligation.
The appropriate lawful basis depends on the particular circumstances and purpose of the processing. We do not rely on consent as the lawful basis for every type of processing.
6. Marketing communications
We may use personal data to send information about Idris Barclay, including books, publications, events, news and other relevant information.
Electronic marketing is also subject to the Privacy and Electronic Communications Regulations 2003 (PECR). Where PECR requires consent, we will obtain the required consent before sending the relevant marketing communications.
You have an absolute right to object to the use of your personal data for direct marketing.
If you no longer wish to receive marketing communications, you can unsubscribe using the link provided in the communication or contact:
idris@idrisbarclay.com
The ICO confirms that direct marketing must have an appropriate data-protection lawful basis and that PECR may additionally require consent for electronic marketing
7. Who do we share your personal data with?
We do not sell your personal data.
Where necessary for the operation of our business, we may share personal data with trusted third parties who provide services on our behalf. These may include, depending on the services we use:
- website hosting and technical service providers;
- email and newsletter providers;
- payment and transaction providers;
- book distributors, retailers or fulfilment providers where necessary to complete an order;
- professional advisers;
- IT, security and support providers; and
- government, regulatory or law-enforcement bodies where we are legally required to do so.
Where third parties process personal data on our behalf, we will take appropriate steps to ensure that the data is handled securely and in accordance with applicable data protection law.
We will only disclose personal data to other organisations where there is a lawful basis fordoing so.
8. International transfers
Some service providers may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable data protection law and that appropriate safeguards are in place where required.
Where relevant, further information about international transfers and the safeguards used can be obtained by contacting us at:
idris@idrisbarclay.com
9. How do we protect your personal data?
We take reasonable and appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
These measures may include appropriate access controls, passwords, encryption, firewalls, antivirus protection and other security measures appropriate to the systems and information involved.
Access to personal data is restricted to those who need it for legitimate business purposes.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
10. How long do we keep your personal data?
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to satisfy legal, accounting or reporting requirements.
The appropriate retention period will depend on the nature of the information and why we hold it.
Where you have subscribed to marketing communications, we will retain the necessary information for as long as you remain subscribed, unless we have another lawful reason to retain it.
When personal data is no longer required, we will securely delete or otherwise dispose of it in accordance with our procedures.
11. Your data protection rights
Depending on the circumstances and the applicable legal requirements, you may have rights including:
- the right to be informed about how your personal data is used;
- the right of access to the personal data we hold about you;
- the right to rectification of inaccurate or incomplete personal data;
- the right to erasure of your personal data in certain circumstances;
- the right to restrict processing in certain circumstances;
- the right to object to certain processing, including direct marketing;
- the right to data portability in certain circumstances; and
- the right to withdraw consent where we rely on consent as our lawful basis.
These rights are not absolute and may be subject to legal conditions and exceptions.
To exercise any of your rights, please contact:
Email: idris@idrisbarclay.com
We may need to request additional information to verify your identity before responding to a request.
12. Complaints
If you have concerns about how we have used your personal data, we would encourage you to contact us first so that we can try to resolve the matter.
You also have the right to complain to the UK’s data protection supervisory authority:
Information Commissioner’s Office (ICO)
The ICO provides information about data protection rights and how to make a complaint through its website.
13. Cookies and similar technologies
Our website may use cookies and similar technologies.
Cookies may be used for purposes such as ensuring that the website operates correctly, remembering preferences, understanding how visitors use the website, or providing other website functionality.
The cookies and similar technologies actually used on the website may change from time to time.
Where applicable law requires consent before non-essential cookies or similar technologies are used, we will ask for that consent.
Further information should be provided in our Cookie Policy, where applicable.
14. Children's privacy
Our website and products are not specifically directed at children.
We do not knowingly collect personal data from children where this is not permitted by law.
If you believe that a child has provided us with personal data and you would like us to review or remove it, please contact us at:
idris@idrisbarclay.com
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, the services we use, applicable legislation or regulatory guidance.
The latest version will be published on our website and will include the date on which it was last updated.
16. Contact us
If you have any questions about this Privacy Policy, how we use your personal data, or wish to exercise your data protection rights, please contact:
Idris Barclay
Email: idris@idrisbarclay.com
Last updated: 29 September 2026
SUBSCRIBE
Stay up to date on news and events, and get exclusive
short stories from Idris straight to your inbox.
© IDRIS BARCLAY 2026 | Designed by Roots Creative | Privacy Policy