Individual customers privacy policy
Effective date: 16th December 2025
Who are we?
This policy applies to Cicerone Press Ltd., located in the United Kingdom. For the purposes of this policy, Cicerone Press Ltd. will be referred to as we, us, and our. We operate different sites, an app, and an online retail shop.
We’re committed to protecting the personal information of all our users. We do not share personal information with third parties except to allow us to take orders and deliver products and services to our users.
In handling any personal information, Cicerone acts as a data controller. We can be contacted at our offices at Juniper House, Murley Moss, Oxenholme Road, Kendal, Cumbria, LA9 7RL, or via the form here. Cicerone is incorporated in England, company number 03690943.
Personal data? What is that?
We collect several different types of information for various purposes to provide and improve our service to you.
Types of data
Name
Billing address
Shipping address
Telephone number
Email address
Reviews and ratings in our app
Social media handle(s) and/or websites (if applicable)
Cookies and Usage data
Device data
How do we collect your personal data?
When you use our website or mobile application, we may automatically collect information. For example, the type of mobile device you use, your IP address, your mobile operating system, the type of internet browser you use, and other diagnostic data.
Here are some of the ways that we commonly collect and process personal data:
When you provide your personal data directly to us when accessing our website and services.
When we analyse the personal data we already hold about you to better understand your use of our products and services.
Viewing or subscribing to our websites and social media functions.
Corresponding with us using services such as web contact forms, telephone, email, or written letter.
Signing up for marketing material or our newsletter (via Klaviyo).
Through Meta Lead Gen adverts.
Entering competitions.
Applying for a job vacancy, including personal data collected from third parties as part of reference checks.
Purchasing, or accessing products, including mobile applications.
What about location data?
We may use and store information about your location if you permit us to do this. We use this data to provide features of our website and mobile application. You can enable or disable location services at any time by changing your device settings.
What are cookies?
We use cookies and other tracking technologies to monitor the activity on our website and mobile application, and we hold certain information.
Cookies are files with a small amount of data, which might include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you don’t accept cookies, you might not be able to use some portions of our website or mobile application.
Examples of cookies we use:
Session cookies: We use these to operate the website and mobile application.
Preference cookies: We use these to remember your preferences and various settings.
Security cookies: We use these for security purposes.
How do we use your personal data?
Our main reason for collecting your personal data is to identify you, particularly if you’re ordering from our website or using our mobile application. If we don’t have your personal data, you may miss out on what we can offer.
We might also use your data in the following ways:
To provide you access to personalised areas of our website and mobile application.
To fulfil online payments or orders for any products you purchase through our website.
To notify you about changes to our products and/or services.
To provide you with information about other goods and services we offer, like those you have already purchased or enquired about.
To allow you to participate in interactive features of our services when you choose to do so.
To provide customer support.
To gather analysis or valuable information so that we can improve our services.
To monitor the usage of our services.
To detect, prevent, and address technical issues.
To tailor marketing efforts, including retargeting adverts on Facebook and Instagram based on your interactions with our services and adverts.
To improve our services by analysing customer preferences and engagement with our website and ads.
What about data deletion?
We value your privacy and provide all users worldwide the ability to request the deletion of their personal data in accordance with the applicable data protection laws. You can request data deletion by following the steps below.
Within our mobile app
If applicable, you might be able to request data deletion directly through your account settings in the Cicerone app.
Contact us directly
You can send a request to delete your personal data via email at info@cicerone.co.uk. Please include "Data Deletion Request" in the subject line and provide sufficient details to verify your identity.
Third-party services
If your personal data is collected and stored by third-party services we use (e.g., Google, Facebook), you might need to contact those services directly to delete the data stored on their systems.
Upon receiving your request, we will process it promptly and ensure that your data is deleted in accordance with applicable laws.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
Your consent. You are able to remove your consent at any time. You can do this by contacting us at info@cicerone.co.uk.
We have a contractual obligation.
We have a legitimate interest.
How do we store personal information?
We store information for order processing (see above), whenever a customer creates an account on our website or uses our mobile application. We store this information securely.
We keep personal information such as your name, email address, address, and phone number for five years. We will then dispose of your information by manually removing it from our records.
Shipping and order fulfilment
We work with our distribution and logistics partner, BookSource, to process and despatch all orders and hold financial records of sales. All information we transmit to BookSource is encrypted. See details on BookSource below – their privacy policy is available on their website.
In common with many other publishers, Cicerone works very closely with a distributor, in our case BookSource who are based in Glasgow. BookSource hold our stock and picks, packs and ship our orders. They also take payment from phone orders (but not website orders which Cicerone does directly with secure payment providers, see below). In addition, they collect and report to us all our sales, royalty, and inventory information. BookSource are an extension of our own service and run to the same standards, especially in the area of privacy.
Addresses
We work with a postcode look-up service called Ideal Postcodes to assist purchasers in filling in address details. This is provided by Ideal Postcodes – whose privacy policy can be found here.
Payments
To take payment, the Cicerone website requests credit or debit card or PayPal/wallet-type payment information. Cicerone never sees this information, card or other details, which are securely encrypted and passed directly to our payment providers. We work with the following “payment gateways” to ensure secure payments.
These are:
PayPal – their privacy policy can be found here.
Stripe – their privacy policy can be found here.
Your account at Cicerone
Most online purchases are made through an account on the Cicerone website, which lets you manage your personal details and select your marketing preferences. Website users buying guidebooks for the first time are invited to open an account when making a purchase. Users with an account already are invited to open their accounts to smooth the buying process.
Alternatively, you can buy products from Cicerone through our Guest Checkout facility without opening an account. However, if you open an account, Cicerone will store your purchase history of guidebooks, eBooks and other products. You can also register guidebooks acquired at different retailers, whether online or in shops, in the UK or elsewhere.
Having an account allows you to access other Cicerone services, such as the ability to download GPX files, to use an app product purchase in the Cicerone app, and more. It is also integral to buying eBooks from Cicerone via our eBook provider, Booxtream, as we need to retain information about the guides you buy to enable you to download them. We are unable to provide these additional services unless you have an account.
Accordingly, having an account with Cicerone is a contractual condition for accessing these services, and we may contact you from time to time regarding your account and our services. You can request that your account be deleted at any time.
Third-party services
Cicerone holds name and address information to mail catalogues and other information about guidebooks, and email addresses to send email newsletters and similar communications regularly. This information is held securely at Cicerone.
Booxtream is a cloud-based, API-driven service that provides social DRM (digital watermarking) and personalisation for eBooks in EPUB and Mobi formats. It enables Cicerone to securely sell eBooks by embedding customer data (your name, email address, and order number), allowing us to trace and deter illegal distribution without restricting your user experience.
We also use Klaviyo (Klaviyo, Inc.) to manage our email marketing communications. By subscribing to our newsletter, you acknowledge that your information will be transferred to Klaviyo for processing.
The data we process includes your email address, name, IP address, and data related to your interactions with our website and emails (e.g. clicks, opens, and abandoned carts). We use this data to send you personalised marketing, provide customer support, and to improve our services. We process this data based on your explicit consent (i.e. you subscribed to email marketing) or our legitimate interest (for essential service updates).
Klaviyo is based in the United States. Data transfers are protected under the EU-US Data Privacy Framework (DPF) and the UK Extension to the DPF. Where these do not apply, we rely on the European Commission's Standard Contractual Clauses (SCCs) included in Klaviyo's Data Processing Agreement.
You can withdraw your consent at any time by clicking the "unsubscribe" link in any email, or by contacting us at info@cicerone.co.uk.
We sometimes use Meta Lead Generation Ads (Facebook and Instagram) to find new subscribers interested in our products. When you complete a lead form on these platforms, we collect your personal data to fulfil your request (e.g., sending you a discount code or adding you to our newsletter subscriber list).
The data we process includes your name, email address, and any other information you provide in the lead form. We also receive technical data from Meta about the ad you interacted with. Data collected via Meta forms is automatically synced to our email platform, Klaviyo, for automated follow-ups. We process this data based on your explicit consent, provided at the moment you submit the lead form. You must actively click "Submit" or "Sign-up" to confirm your agreement.
Meta (Meta Platforms, Inc.) also processes your data in accordance with its Data Policy. You can manage your ad preferences directly within your Facebook or Instagram settings.
We use the Meta Pixel (provided by Meta Platforms, Inc.) to track your behaviour on our website, including products viewed and items added to your cart. We may occasionally share some of this behavioural data (e.g., products you've viewed, items you've added to your cart, abandoned baskets) with Meta, which allows us to show you relevant advertisements on Facebook and Instagram based on your past interactions with our site.
The data we process includes your IP address, device type, browser information, and specific actions you take on our website (e.g., viewing a product). We use this data to improve the relevance of our advertising and measure the effectiveness of our marketing campaigns. We process this data based on your explicit consent, which you provide via our cookie consent banner.
You can withdraw your consent at any time by updating your cookie settings or by using Meta's Ad Preferences to disable personalised ads.
We use the Reddit Pixel, a tracking tool provided by Reddit, Inc., on our website to understand user behaviour and measure campaign effectiveness. The pixel may collect hashed identifiers, IP addresses and browsing behaviour on our site.
We may share data collected on our website (e.g. visits to specific pages, purchases) with Reddit to create "Customer Audiences". Based on these audiences, we may use Reddit's "Lookalike Audiences" feature to show ads to users on Reddit who share similar characteristics to our existing customers.
Information shared with Reddit for these purposes is used to deliver personalised advertisements on the Reddit platform. We ensure this processing complies with UK data protection laws, relying on legitimate interests and consent via our cookie consent banner. You can control what ads you see on Reddit by adjusting your settings in the Reddit app or web preferences.
You can withdraw consent at any time by updating your cookie settings.
When we mail catalogues, we pass name and address information to our mailing house, Cumbria Mailing. They use this information to create mailing forms. They also perform tests on the information to eliminate duplicate information, to remove letters from a mailing where occupants are known to have died, addresses do not actually exist and other checks to ensure more accurate mailings. This information allows us to keep our records up to date.
Analytics
We may use third-party service providers to monitor and analyse the use of our Service.
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.
You can opt-out of certain Google Analytics features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy?hl=en
For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en
Firebase is an analytics service provided by Google Inc. You can opt out of certain Firebase features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy?hl=en
We’d also recommend that you review Google's policy for safeguarding your data: https://support.google.com/analytics/answer/6004245.
For more information on what type of information Firebase collects, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en
Communications with users
Cicerone has a healthy dialogue with users of our guidebooks and other services. We welcome this as it helps us improve our guidebooks and the parts of the world we cover. Often this will include update information about changes that have taken place since the guidebook was published. It is important to confirm such updated information before publishing it so we can share it with our authors and, with their agreement, we post the information online.
We regard users as having consented to the use of the information provided in update notes and, in due course, in our products, and to our passing contact details to our authors. Although it will usually be Cicerone responding to users, sometimes the details can only be resolved by direct communication with the author, provided the author has agreed to do so.
Please note that we do not include details of correspondents in update notes or guidebooks. From time to time, we may contact selected consumers to research whether our guidebooks are meeting your needs. This is generally by email and may be on a regional basis.
From time to time, we may also invite users to provide feedback on our service or products by sending a Trustpilot review request via our marketing platform, Klaviyo. There is no obligation for users to provide feedback, and data will be recorded and stored by Trustpilot only if the user consents to creating a Trustpilot account and uploading a public review of our services.
Social media
To help us communicate with users, Cicerone has accounts on Facebook, Twitter, Instagram, Pinterest and other social media platforms. All these services have their own privacy policies.
Cicerone does not take any personal information from users of these social media services. We may communicate directly with users of these services through the mechanisms they make available. Our use of them conforms to all regulations.
Privacy Rights
You have important rights concerning any personal information held about you. You can exercise these rights either through managing your account online, unsubscribing, or contacting Cicerone using the Contact form here.
These rights are:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to the restriction of processing - You have the right to request that we stop processing your personal data temporarily or permanently.
Your right to data portability - You have the right to request a copy of your personal data in a portable and readily useable format.
Your right to know about automated decision-making - You have the right to request information about automated decision-making and likely outcomes of using it, including profiling.
Your right to opt out of automated decision making - You have the right to refuse the use of automated decision-making technology with regards to personal data, including profiling.
Your right to non-discrimination for exercising privacy rights.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at info@cicerone.co.uk, or by calling us on 01539 562069 if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at:
Cicerone,
Juniper House,
Murley Moss Business Park,
Oxenholme Road,
Kendal
LA9 7RL
You can also call us on 01539 562069 or email us at info@cicerone.co.uk.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire
SK9 5AF
Helpline number: 0303 123 1113.
ICO website: https://www.ico.org.uk