Privacy notice

Draft for review. Items highlighted like this must be supplied or confirmed by the seller, and the whole text should be checked by their lawyer before launch. Remove this note and the highlights once done.

Last updated: [date of publication]

Who is responsible

B2G Consulting Pte. Ltd., 16 Collyer Quay, #12-18 Collyer Quay Centre, Singapore 049318, is responsible for the personal data processed when you buy The Turnaround Blueprint on this website. Contact our data protection officer at admin@b2g-consulting.com. [Confirm who the data protection officer is. Singapore law requires the company to appoint one.]

[If an EU representative is appointed under article 27 GDPR, give its name and contact here. Otherwise delete this paragraph.]

What we collect

• When you order: your name, email address and, optionally, company name.
• For paperbacks: the delivery address and a phone number for the carrier.
• Order details: format, quantity, amounts paid, shipping method, invoice and tax details (billing country, VAT number if you give one), the date you accepted the terms, and for the ebook the date you confirmed immediate access.
• Payment: handled by Stripe. We receive the payment status, the billing country and the country of the card, but never your full card details.
• Technical data: the country your connection comes from (to show prices and shipping, and as VAT evidence) and whether your download link has been used.

We only collect what you enter in the order form or what is created by your order. We do not buy data from third parties.

Why we use it

• To fulfil your order, deliver the ebook, print and ship the paperback, and send order and shipping emails (performance of the contract).
• To keep invoices and tax records as the tax and accounting laws of Singapore and of the countries where we account for VAT require (legal obligation).
• To answer your questions and handle returns or complaints (contract and legitimate interest).
• To prevent fraud and keep the shop secure (legitimate interest).

We do not send marketing emails and we do not contact people who started but did not complete an order. [If this changes, e.g. a newsletter with opt-in, add it here.]

Who we share it with

• Stripe (Stripe Payments Singapore Pte. Ltd.): payment processing, fraud prevention and invoices. For ebook orders, [Stripe entity named in the Managed Payments terms] is the seller of record and processes your order details as a separate controller under its own privacy policy, including to meet its tax obligations.
• Lulu (Lulu Press, Inc., USA), paperback orders only: your name, delivery address, phone number and email, to print and ship your book. Lulu prints in the facility that serves your country (United States, Canada, United Kingdom, France, Australia or India) and passes the delivery details to the carrier.
• Resend (Resend, Inc., USA): sending our order emails.
• Cloudflare (Cloudflare, Inc., USA): hosting of this website and our order database.
• Our accountants, our tax representative in France [only if the company registers for French VAT, otherwise delete], and tax authorities, where the law requires it.

We are based in Singapore, and some of our providers are in the United States, so your data may be processed outside your country. We protect it with contracts that require our providers to keep it secure and use it only for the purposes above, such as the European Commission's standard contractual clauses and their UK and Swiss equivalents. [Confirm for each provider before launch.]

How long we keep it

• Orders, invoices and tax evidence: 10 years. Singapore law requires at least 5 years, and the VAT rules of some countries we sell to (for example the EU) require 10.
• Started but unpaid orders: [12 months], then deleted.
• Ebook download links stop working after one download, or 30 days if unused.
• Emails you send us: as long as needed to handle your request, and no longer than [3 years].

Cookies

This website sets no cookies and uses no analytics or advertising trackers. Stripe's payment page sets its own cookies, needed for secure payment and fraud prevention; see Stripe's privacy policy.

Your rights

Wherever you live, you can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Email admin@b2g-consulting.com. Some data, such as invoices, must be kept for the legal period even if you ask us to delete it.

We do not sell your personal data and do not share it for targeted advertising. We do not treat you differently for exercising your rights.

You can complain to the data protection authority in your country, for example your national authority in the EU, the Information Commissioner's Office in the UK, the Federal Data Protection and Information Commissioner in Switzerland, or your state attorney general in the United States. Our own authority is Singapore's Personal Data Protection Commission (pdpc.gov.sg).