This Privacy Policy explains how Omorphos Publishing ("we", "us", "our") collects, uses, and protects your personal data when you use our website. We are committed to keeping your data safe and being transparent about what we collect and why.
Information we collect and how we use it
Language level assessment
When you complete the self-assessment quiz, your scores are saved against an anonymous visitor token stored in a browser cookie. Your results are never associated with your name or email address unless you also sign up to our mailing list.
Data collected:
- Language assessment scores — Your self-reported proficiency scores across four language domains (listening, reading, speaking, writing), stored against your visitor token.
- Visitor token — An anonymous identifier stored in a browser cookie. Used to link your assessment results to your signup without storing your identity against your results directly.
Purpose: Language assessment.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)).
How long we keep it: Assessment results are stored for the lifetime of the visitor token cookie (365 days) or until you request erasure.
Your rights: Right to erasure ("right to be forgotten"), Right to access your data.
Email subscriptions
When you sign up to hear about new books and language learning resources, we store your email address and record your consent.
Data collected:
- Email address — Used to contact you and verify your identity.
- Visitor token — An anonymous identifier stored in a browser cookie. Used to link your assessment results to your signup without storing your identity against your results directly.
- IP address (stored as a one-way hash — cannot be reversed) — Recorded at time of submission for security and spam-prevention purposes.
- Consent record — A log of the consent you gave, including the exact wording shown to you, the date and time, and a one-way hash of your IP address.
Purpose: Email marketing.
Legal basis: Consent (GDPR Art. 6(1)(a)).
How long we keep it: Until you unsubscribe or request erasure. Your subscriber row is anonymised rather than deleted so we can maintain a consent audit trail, as required by GDPR Art. 5(2).
Your rights: Right to unsubscribe at any time, Right to erasure ("right to be forgotten"), Right to access your data, Right to export your data.
Free sample requests
When you request a free sample of a book, we store your email address so we can send you the reader link you asked for.
Data collected:
- Email address — Used to contact you and verify your identity.
- IP address (stored as a one-way hash — cannot be reversed) — Recorded at time of submission for security and spam-prevention purposes.
Purpose: Email marketing.
Legal basis: Contractual necessity (GDPR Art. 6(1)(b)).
How long we keep it: Until you request erasure. Anonymised rather than deleted, matching the subscriber row above.
Your rights: Right to erasure ("right to be forgotten"), Right to access your data.
Sample reader links
The reader link we send you for a free sample includes your email address in its internal label, so we can tell which token belongs to which request.
Data collected:
- Email address — Used to contact you and verify your identity.
Purpose: Email marketing.
Legal basis: Contractual necessity (GDPR Art. 6(1)(b)).
How long we keep it: Until the reader link expires or is revoked, or you request erasure.
Your rights: Right to erasure ("right to be forgotten"), Right to access your data.
Reader survey responses
If you answer an in-book survey question (rating, multiple choice, or open text), your response is stored against your reader token.
Purpose: Email marketing.
Legal basis: Consent (GDPR Art. 6(1)(a)).
How long we keep it: Until you request erasure.
Your rights: Right to erasure ("right to be forgotten"), Right to access your data.
Support enquiries
When you submit a support or contact request, we store the details of your enquiry so we can respond to you.
Data collected:
- Name — Used to address you in correspondence.
- Email address — Used to contact you and verify your identity.
- Message subject — The subject line of your support enquiry.
- Message content — The text of your support enquiry.
- Support topic — The category of your support enquiry (e.g. "General", "Educators").
- IP address (stored as a one-way hash — cannot be reversed) — Recorded at time of submission for security and spam-prevention purposes.
- Consent record — A log of the consent you gave, including the exact wording shown to you, the date and time, and a one-way hash of your IP address.
Purpose: Support contact.
Legal basis: Consent (GDPR Art. 6(1)(a)).
How long we keep it: Your name, email address, and message content are anonymised if you request erasure. The thread structure and reply history are retained for our internal audit log.
Your rights: Right to erasure ("right to be forgotten"), Right to access your data.
Site preferences
We remember your last-viewed language and book filter choices (level, topic, etc.) so the catalog opens the way you left it on your next visit.
Purpose: Email marketing.
Legal basis: Consent (GDPR Art. 6(1)(a)).
How long we keep it: 365 days, or until you decline cookies in the cookie banner (which deletes both immediately).
Your rights: Right to object to processing.
Cookie consent choice
We remember whether you accepted or declined our cookie banner, so we don't ask again on every page.
Purpose: Email marketing.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)).
How long we keep it: 365 days.
Your rights: Right to object to processing.
Blog comments
When you leave a comment on a blog post, we store your name, email address, and comment text so your comment can be published and so we can reply to you. If you check "Remember my name and email," we also save your name, email, and a one-way hash of your email (used to look up your Gravatar photo) in this browser's local storage — not a cookie — so you don't have to re-enter them next time.
Data collected:
- Name — Used to address you in correspondence.
- Email address — Used to contact you and verify your identity.
- Message content — The text of your support enquiry.
- IP address (stored as a one-way hash — cannot be reversed) — Recorded at time of submission for security and spam-prevention purposes.
Purpose: Support contact.
Legal basis: Consent (GDPR Art. 6(1)(a)).
How long we keep it: Comments are kept indefinitely as part of the public discussion unless you request erasure. The optional "remembered" name/email/hash in your browser is kept until you clear it (the pill's × button) or clear your browser's site data.
Third parties:
- Gravatar — If a Gravatar photo exists for your email address, it's shown next to your comment. We send a one-way hash of your email to Gravatar, never your email address itself.
Your rights: Right to erasure ("right to be forgotten"), Right to access your data.
Cookies
We use the following cookies on this website:
| Cookie | Purpose | Duration |
|---|---|---|
omorphos_token |
Anonymous visitor identifier — used to save and retrieve your assessment results without identifying you personally. | 365 days |
omorphos_last_language |
Remembers the language you were last browsing, so the catalog opens on it next time. | 365 days |
omorphos_filters |
Remembers your active book filter selections (level, topic, etc.). | 365 days |
omorphos_consent |
Records your cookie-banner choice (accept/decline). | 365 days |
Your rights under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
- Right to access — Request a copy of the data we hold about you.
- Right to rectification — Ask us to correct inaccurate data.
- Right to erasure — Ask us to delete your data. Use our data deletion form or contact us directly.
- Right to portability — Request your data in a machine-readable format.
- Right to object — Object to processing based on legitimate interest.
- Right to withdraw consent — Withdraw consent at any time where processing is based on consent.
If you have any questions about this policy, or wish to exercise any of your rights, please reach out via our contact form.