Privacy Policy
Effective July 25, 2026
This policy explains what personal information Hoang Le (“we”, “us”) collects through https://hoanglebookstore.com, why we collect it, who we share it with, and the choices you have. We have tried to write it in plain English rather than legal boilerplate.
1. Who is responsible for your data
Hoang Le is the data controller for information collected through this site.
A postal address will be published here. In the meantime, written notices may be sent to hoangle@pandatheapp.com.
Privacy questions and requests: hoangle@pandatheapp.com.
2. What we collect, and why
| What | When | Why |
|---|---|---|
| Email address, first name (optional) | You join the reader list | To send the newsletter you asked for |
| A one-way hash of your IP address | You join the reader list | Proof that consent was given, and to rate-limit abuse. The hash cannot be reversed to recover your IP. |
| Name, email, rating, review text | You submit a book review | To publish the review after moderation. Your name is shown; your email is never published. |
| Name, email, message | You use the contact form | To reply to you |
| Name, work email, company, phone, team size, message | You request app pricing | To respond to your sales enquiry |
| Your cookie preferences | You answer the cookie banner | To honour your choice on future visits |
We do not buy personal data, we do not build advertising profiles, and we do not run third-party ad networks on this site.
3. Legal bases (UK/EU visitors)
- Consent — the newsletter, and any optional cookies. You may withdraw consent at any time.
- Legitimate interests — replying to your messages, moderating reviews, and keeping the site secure and functional.
- Legal obligation — keeping records of consent.
4. Who we share it with
We share personal data only with service providers who process it on our behalf, under contract, for the purposes above:
- Google Firebase (Google LLC) — hosting, database, and sign-in. Data is stored in the United States.
- Resend — delivery of newsletter and notification email.
- Stripe — if and when you purchase directly from us. Stripe handles card details; we never see or store your card number.
- YouTube (Google LLC) — only if you allow embedded media and press play on an episode.
Links to Amazon and other retailers take you to those companies’ own sites, governed by their privacy policies, not this one. We do not pass them your personal data.
We will disclose information if required by law, and we will tell you unless legally prevented from doing so. If the business is ever sold, your data may transfer with it; you will be notified and may opt out.
5. International transfers
Our providers store data in the United States. Where data is transferred from the UK or EEA, that transfer relies on the providers’ Standard Contractual Clauses.
6. How long we keep it
- Newsletter — until you unsubscribe, then a suppression record so we don’t email you again by mistake.
- Reviews — published reviews stay until you ask us to remove them.
- Contact and sales messages — up to 24 months.
- Cookie preferences — 12 months, then we ask again.
7. Your rights
Wherever you live, you may ask us to access, correct, delete, or export your data, and to stop using it. UK/EU residents additionally have the right to restrict or object to processing and to complain to a supervisory authority. California residents may request the specific information collected, request deletion, and are entitled not to be discriminated against for exercising those rights.
We do not sell or share personal information as those terms are defined by the CCPA/CPRA.
To exercise any right, email hoangle@pandatheapp.com. We reply within 30 days and never charge for a first request.
8. Children
Some of our books are written for young children, but this website is intended for adults, and is not directed at children. We do not knowingly collect personal information from anyone under 16. Please do not submit an email address, review, or message if you are younger than that — ask a parent or guardian to do it for you.
If you believe a child has given us personal information, email hoangle@pandatheapp.com and we will delete it promptly.
9. Security
The site is served over HTTPS. Database access is restricted by server-side security rules; the subscriber list cannot be read from the browser at all. Administrative access requires Google sign-in from an approved account. No system is perfectly secure, and we do not claim otherwise — if a breach affects your data, we will notify you and the relevant authority as required by law.
10. Changes
If we make a material change we will update the effective date above and, where the change affects how we use data you already gave us, tell subscribers by email.