Privacy policy

Last updated: 27 September 2026

This page says what we collect, why, and what you can ask us to do with it. It is short because we collect very little.

Who is responsible

Murilo Berti Vicente, Rambla Guipuscoa 67, 08020 Barcelona, trading as Koine Co, in Spain. You can reach us at thekoineco@gmail.com.

What we collect, and why

Waiting list. Your email address, your first name if you give it, the date you signed up, a referral code we generate for you, the code of whoever referred you if you arrived through a link, which of our books you asked to hear about, and which campaign brought you (the utm_ values in the address you clicked). We use it to tell you when we launch, to send the emails you signed up for, and to know which channel works. Legal basis: your consent, which you can withdraw at any time.

Orders. Ordering requires your name, shipping address, email, payment details and the design you made for your cover, so we can print your book and ship it to you. Payment card details are handled by Shopify's payment processor and never reach us. Legal basis: performing the contract with you.

Early access. Buying a book gives you early access to our next one. To send you that link, we add your email address to a separate list with our email provider. Legal basis: performing what we promised you with your order. Every one of those emails has an unsubscribe link.

Our own social accounts. Our publishing system stores access credentials for social media accounts that we own, so we can schedule our own posts. This is our data, not yours. It is listed here only for completeness.

Cookies

On koineco.com we load the Meta (Facebook) pixel, and Meta sets cookies of its own when it does. The pixel tells Meta that a browser opened the page, and that a signup happened if you join the waiting list. It is never sent your email address or your name. It is there so we can measure whether our advertising works, and nothing on the site depends on it: block it and the waiting list behaves exactly the same.

If you visit koineco.com from the European Economic Area, the United Kingdom or Switzerland, the pixel is not loaded until you accept it, and declining means it is never loaded. Everywhere else it loads when the page opens.

Once the store is open, Shopify sets the cookies it needs to run a shop: to keep your cart, to keep you signed in through checkout, and to prevent fraud. We run no analytics of our own on top of that.

What we do not do

We do not sell your data. Apart from the Meta pixel described above, we do not share it for anyone else's advertising. We do not build profiles about you ourselves, and no decision about you is made automatically.

Who processes it for us

We use a small number of services to run the business. They only process your data to provide their service to us.

Service	What it does	Where
Cloudflare	hosts this site and stores the waiting list	EU / global edge
Brevo	sends the waiting-list emails	France
Shopify	runs the store and takes payment	Canada / United States
Lulu Direct	prints your book and ships it	United States
Supabase	holds our own publishing queue	European Union
Meta	receives the pixel events described above	United States

International transfers

Your book is printed and shipped in the United States, and the store runs on Shopify, so order information reaches the United States. Those transfers rely on the European Commission's Standard Contractual Clauses or on an adequacy decision, depending on the provider.

How long we keep it

Waiting-list entries: until you unsubscribe or ask us to delete them. Order records: as long as tax and accounting law requires us to. You can ask us to delete anything we are not legally obliged to keep.

Your rights

You can ask us to show you what we hold about you, correct it, delete it, hand it to you in a portable form, or stop using it. Write to thekoineco@gmail.com and we will answer within one month. Every marketing email has an unsubscribe link that works immediately.

If you think we have handled your data badly, you can complain to the Spanish data protection authority (Agencia Española de Protección de Datos, www.aepd.es), or to the authority where you live.

Children

This is not a service for children, and we do not knowingly collect data about anyone under 14. If your child has signed up, write to us and we will delete it.