Privacy policy

2026-08-31

This policy explains what personal data Alejandro Toledo Martínez collects through independentbooks.site, why, on what legal basis, and what you can do about it.

Who is responsible for your data

Alejandro Toledo Martínez is the data controller. You can write to us at any time at contacto@independentbooks.site.

This is a one-person operation and is not required to appoint a data protection officer. Requests are handled by the controller directly.

What we collect

When you buy a book: your email address and the transaction data (book, format, amount, currency, date). Card details are processed directly by Stripe; they never reach our servers and we do not store them.

When you request a free book: your email address, which you give us so we can deliver the file.

Every time you download a file: the exact date and time, the format, your IP address, and your browser or device identifier. Every download is recorded, not only the first.

When you browse: usage data via Meta Pixel (pages viewed, books consulted, checkouts started).

PDFs carry a personal mark

Each PDF is generated at the moment you download it and carries, in its internal metadata, your email address, your order identifier, the download date and your IP address.

This is not DRM. The file is neither encrypted nor restricted: read it on any device you own and keep it indefinitely. The mark exists only to identify where a copy came from if the work ends up redistributed without permission.

If you would rather not receive a marked file, write to us before buying and we will find another way to deliver it.

Why we use it, and on what legal basis

To deliver the files you bought or requested, and to re-send them if you lose the link — performance of our contract with you (GDPR Art. 6(1)(b)).

To meet the tax and accounting obligations arising from a sale — legal obligation (Art. 6(1)(c)).

To log downloads and mark the files, so that unauthorised redistribution can be detected and pursued — legitimate interest in protecting copyright in the work (Art. 6(1)(f)). You may object; see “Your rights”.

To know how many people download each book and when, so we can decide what to write and what to promote — legitimate interest in running the publishing activity (Art. 6(1)(f)).

To measure site audience with Meta Pixel — see “Cookies and measurement”.

We do not sell, rent or share your email address with third parties.

Cookies and measurement

The site sets no cookies of its own: there is no cart, no session, and no profiling on our side.

It does load Meta Pixel, from Meta Platforms, which may write cookies in your browser and tell Meta that you visited a page or looked at a book. It is the only third-party tool that tracks your browsing here.

You can switch it off at any time with a tracker-blocking extension, with your browser’s anti-tracking protection, or from the ad settings of your Meta account. Blocking it does not affect buying or downloading.

Who else processes it

Stripe — payment processing and tax calculation, under its own privacy policy.

Google (Firebase and Google Cloud) — site hosting, database, file storage and the functions that deliver the files.

Resend — delivery of the download-link emails.

Meta Platforms — audience measurement via Meta Pixel.

Where your data is processed

The controller is established in Mexico. The site infrastructure and the order and download records are hosted on Google servers in the United States.

If you write to us from the European Economic Area, the United Kingdom, or another territory with international-transfer restrictions, your data leaves that region. Transfers to our providers rely on the standard contractual clauses and adequacy frameworks each of them publishes.

If you want a copy of the safeguards covering a specific transfer, ask at contacto@independentbooks.site.

How long we keep it

Purchase records: the period required by Mexican tax law, currently five years from the transaction.

Download log (date, IP, device): 24 months, after which it is deleted.

Download links: they expire after 7 days and allow a maximum of 3 downloads.

Your email address: until you ask us to delete it, unless the tax obligation above requires us to keep it.

Your rights

By writing to contacto@independentbooks.site you can request access to your data, its correction, its deletion, restriction of or objection to its processing, and a copy in a portable format. You can also withdraw at any time a consent you have given us.

In Mexico you may exercise your ARCO rights — access, rectification, cancellation and objection — and revoke your consent through the same channel.

We will respond within the time limits set by the law that applies to your case and, in any event, within a reasonable time.

If you believe we have not handled your request properly, you can complain to the data protection authority of your country of residence; in Mexico, to the authority competent in the matter.

If you write to stop receiving any communication, we will stop sending it.

Changes to this policy

If we change what we collect or why, we will update this page and the date shown above. Material changes will also be announced on the site itself.

Contact

Alejandro Toledo Martínez · México · contacto@independentbooks.site