Who we are

This Privacy Policy explains how Romeo & Buddy ("we," "us," "our") collects, uses, and protects information when you visit this website. If you have questions about this policy or how we handle your data, contact us at publishing@ramzcreative.com.

Information we collect

Information you give us. If you use our contact form, we collect the name, email address, subject, and message content you submit. We use this only to respond to your inquiry.

Newsletter sign-up. If you subscribe to our newsletter, we collect the email address you provide. We use it only to send you the updates you signed up for. We don't currently use an automated mailing list — you can ask to unsubscribe at any time by contacting us at publishing@ramzcreative.com.

Automatically collected information. Like most websites, our server logs basic technical information for security and troubleshooting purposes — your IP address, browser type, and the pages you visit. We don't use this information to build a profile of you or track you across other websites.

Visit counts. We count visits to this site: how many times each page is viewed, which page or outside site sent you there, any campaign tag in the link you followed, and how far down the page you scrolled (in four steps). These are kept as daily totals in our own database for 730 days and then deleted. To tell one visit from the next, and to count a visitor once a day, the site makes a one-way code from your IP address and browser details, using a secret that is replaced and destroyed every day. That code is held only in the site's short-term cache, until the visit has been quiet for half an hour, and at most until that day's secret is destroyed. It is never written to the database. Counting sets no cookie and stores nothing on your device, so it runs whether or not you've used the cookie banner. To stop a script from flooding the counts, the site also keeps a one-way hash of your IP address with a running count in the same short-term cache; it isn't stored in the database or sent anywhere.

Forms and where they came from. When you send a form, we also count it as a lead, along with which form it was, the page it was sent from, the page you first arrived on, the page you were on just before it, and where your visit came from: the campaign tags in the link you followed, an ad click ID, and the site that referred you. That record holds no name, email address, phone number or IP address, and is kept in our database for 730 days and then deleted. If you've agreed to Analytics in the cookie banner, the site remembers the campaign tags, ad click ID and referring site in your browser until you close the tab, so a form sent on a later page can include them.

Phone taps. If you've agreed to Analytics in the cookie banner and you tap a phone number on this site, we count the tap: that it happened, on which page, and where your visit came from. We don't record the number you tapped or who you are. The count is kept in our database for 730 days and then deleted. If you haven't agreed, taps aren't counted.

Cookies. We use a small number of strictly necessary cookies to run the site. When you choose in the cookie banner, your choice — which categories you accepted or declined, and when — is remembered in your own browser, in local storage and in a cookie this site sets once, when you choose. Your browser sends that cookie back with each request to this site; this site keeps nothing of it and sends it nowhere else. The cookie expires after twelve months, and local storage keeps your choice until you clear it. A page with a form sets a security cookie, a random token that is not tied to who you are, so a post can be told from one made by another site; it lasts until you close your browser. A site notice you dismiss is remembered in your browser's local storage, so it does not come back; it is never sent anywhere. People who sign in get session and sign-in cookies, described under Signing in below. We do not use advertising or analytics cookies unless you explicitly opt in through our cookie banner. No analytics or advertising cookies are active on this site.

Video content. Some pages may include embedded YouTube or Vimeo videos. These are configured in privacy-enhanced mode, meaning no cookies are set by the video provider until you press play. Once you play a video, the provider may set its own cookies according to its own privacy policy — see YouTube's Privacy Policy or Vimeo's Privacy Policy.

Fonts. All fonts used on this site are hosted directly by us, not loaded from Google or any third party — visiting this site does not share your information with a font provider.

Messages that could not be delivered. If a form message is caught by a spam check, or is sent without reaching anyone, we keep it, with the name, email, subject and message the sender typed, in our database for a person to read, send again or dismiss. It is kept for 30 days, and cleared as soon as a person decides.

Spam protection. To stop a script from flooding our forms, or the page that remembers your cookie choice, the site keeps a one-way hash of your IP address with a count, in its short-term cache only: for about 10 minutes for a form, and for about a minute for a cookie choice. It isn't stored in the database or sent anywhere.

Signing in. People who sign in — the site's editors, and visitors to a password-protected page — get the site's session and sign-in cookies, which hold a session identifier and last for about 1 hour of inactivity.

How we use your information

We use the information we collect only to:

Respond to messages you send us through the contact form
Send you the newsletter you subscribed to, if you opted in
Maintain the security and proper functioning of the site
Understand and fix technical issues
Count visits, page views, forms sent and phone taps, and where they came from, to see what is working

We do not sell, rent, or trade your personal information to third parties.

How long we keep your information

We keep contact form submissions for as long as needed to respond to and resolve your inquiry, and after that only as long as we have a legitimate reason to retain it — submissions are automatically deleted after 24 months (730 days) at the latest. A newsletter sign-up is kept in our database for the same 730 days. The counts of visits, forms sent and phone taps are kept for 730 days and then deleted; a form message held for a person to read is kept for 30 days, and cleared as soon as a person decides; and the one-way address hashes used against floods expire in about a minute, or about 10 minutes for a form. You can ask us to delete your information sooner at any time — see "Your rights" below.

Where your information is stored

Images and other site assets are stored with our hosting provider (DigitalOcean, at romeo-buddy.sfo2.cdn.digitaloceanspaces.com). When a page loads one of them, that host receives your IP address and browser details, as in any request for a file, and keeps them under its own policy. Contact form submissions are stored securely in our content management system's database.

Children's privacy

While Romeo & Buddy is a children's book brand, this website itself is intended for use by adults (such as parents, guardians, and booksellers). We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Your rights

Depending on where you live, you may have the right to:

Know what personal information we hold about you
Request a copy of your information
Ask us to correct inaccurate information
Ask us to delete your information
Object to or restrict how we use your information

To exercise any of these rights, email us at publishing@ramzcreative.com. We'll respond within a reasonable timeframe.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent changes.

Contact us

If you have questions about this Privacy Policy, contact us at publishing@ramzcreative.com.