Cart
Free US shipping over $10
Proud to be B-Corp

Group Privacy Notice For World Of Books And Ziffit


V1.2 | Last updated: 19th May 2023

World of Books Inc operates Ziffit US and its related mobile application, and World of Books US (collectively, the “Websites”).

Our head office address is Corporation Trust Centre, 1209 Orange Street, Wilmington, Delaware 19801 USA (company number 7263864).

Ziffit US provides users the opportunity to trade-in old books by purchasing such items and providing a pricing tool, pre-paid shipping, and payment in accordance with our Terms of Use (the “Services”).

Wob.com provides users the opportunity for users to quality used books at competitive prices.

This Privacy Notice explains how we may use any personal information that we collect from you when you use our ‘Websites’). We are committed to protecting your privacy, and we fully respect and appreciate the importance of data security and privacy online.

We collect your personal information through our websites or otherwise as described herein. If you have any questions about how we do this, you can contact us using the details provided at the end of this notice.

If you have a complaint about the usage of your information, please contact us using the details in the 'How to contact us' section.

1. What information do we collect about you?

We collect contact information about you when you register with us or initiate and/or complete a trade or transaction with us. The personal data we collect about you depends on the particular products and services we provide to you. We will collect and use the following personal data about you:

  • your name and contact information, including email address and telephone number
  • location data, if you choose to give this to us
  • your billing information, transaction information and some payment card information
  • your contact history, purchase history and saved items
  • information from accounts you link to us, eg Facebook
  • your responses to surveys, competitions and promotions
  • We also collect analytical information such as the time of your visit, pages visited, and time spent on each page of the webpages; referring site details; network location; products you viewed, browser type, operating system, IP address, and device information (“Analytical Information”).

    We use cookies to identify you as a visitor to our websites; this is explained in more detail below.

    We partner with marketing and analytics companies who may also provide Analytical Information about you or your behavior online. This is also explained in more detail below. If you do not provide this information, you may not be able to create an account or use our services.

    2. How will we use this information?

    We use your Contact Information to provide you our Services. We use your Payment Information to process payments as a feature of our Services. We may use Analytical Information and User Information to improve our websites and other products / services, and to offer our services to you.

    We may also use your Contact Information and User Information to process your order, to manage your account and to email you about other products and services which may be of interest to you, and to assist with customer service enquiries.

    We also use Analytical Information to personalize your repeat visits to our websites.

    Who we share your information with

    We routinely share personal data with:

    • our group companies;
    • third parties we use to help deliver our products and services to you, eg payment service providers, warehouses and delivery companies;
    • other third parties we use to help us run our business, eg marketing agencies or website hosts;
    • third parties approved by you, eg social media sites you choose to link your account to or third party payment providers;
    • our banks;

    We only allow those organisations to handle your personal data if we are satisfied they take appropriate measures to protect your personal data. We also impose contractual obligations on them to ensure they can only use your personal data to provide services to us and to you.

    We or the third parties mentioned above occasionally also share personal data with:

    • our and their external auditors, eg in relation to the audit of our or their accounts, in which case the recipient of the information will be bound by confidentiality obligations;
    • our and their professional advisors (such as lawyers and other advisors), in which case the recipient of the information will be bound by confidentiality obligations;
    • law enforcement agencies, courts, tribunals and regulatory bodies to comply with our legal and regulatory obligations;
    • other parties that have or may acquire control or ownership of our business (and our or their professional advisers) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency—usually, information will be anonymised but this may not always be possible. The recipient of any of your personal data will be bound by confidentiality obligations.

    Our Use of Social Media:

    We work with social and business media platforms including Facebook to bring you targeted advertising about our services and improve your experience on our websites. To do this, we provide them with a list of email addresses and they confirm if they operate accounts with those email addresses. If the platform does not have an account with a matching email address, the contract terms under which they act as our processor for this purpose does not permit them to make any further use of the email address we provided. We believe we have a legitimate interest in customizing our social media communications in this way and that there is minimal impact on your privacy. If you have an account on any platform, you can set your preferences via your platform account to prevent this type of advertising.

    3. Storage and safeguards

    Personal data is transferred or stored either within the United States, the UK, or the European Economic Area (‘EEA’). Our websites is hosted with Google Cloud, who store data in the United States, UK, or EEA under strict safeguards, more information about these practices can be found here. Personal information is collected and used for the reasons set out above, and shall not be stored for longer than necessary for those purposes. Generally, we store your personal information for no longer than the time you have an account with us, plus an additional seven years. Where you do not sign-up for an account or otherwise use our services, we only store your personal information for two years.

    4. Marketing

    We may send you information about products and services of ours or of other companies within ‘World of Books Inc.’ which we believe may be of interest.

    If you have consented to receive marketing communications, you may opt out at a later date.

    If you no longer wish to be contacted for marketing purposes, please contact us or use the opt-out procedure in the respective email.

    5. Cookies and tracking

    Cookies are text files placed on your computer to collect standard internet usage information and track visitor behavior. This information is used to track visitor use of websites and provide reports on usage, such as for analytics purposes.

    We may also utilize tracking technology on the web properties, for analytics, marketing or performance tracking. We use this to improve and enhance our communication with you or the products / services we offer. You can set your browser to not accept cookies or tracking and the websites linked below can give you simple instructions on how to do this. However, in this case some of our web property features may not function as a result.

    If you require further information on the particular cookies that we use, please see our Cookie Notice.

    6. Links to other websites

    Our websites contains links to other websites, this privacy notice only applies to this web property, if you navigate away to other websites, the privacy of such other websites shall govern the collection and use of your information by such other websites.

    7. Changes to our privacy notice

    From time to time, we may update our privacy notice in order to remain compliant with data protection legislation. In the event we make material changes to our privacy notice, we will send you notice of such changes. You can always find the latest and then-current version of this notice on our websites.

    8. Additional Information for Residents of California

    This section of the privacy notice supplements the information otherwise contained in this Privacy Notice and applies solely to all visitors, users, and others who reside in the State of California. We adopt this section to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this section.

    World of Books Inc collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“Personal Information”). In particular, World of Books Inc has collected (or not collected, if indicated below) the following categories of personal information from its consumers in the past twelve (12) months:

    Categories of Personal Information Collected We collect the personal information detailed in Section 1 above. This information includes the following categories of personal information as defined under California law:

    • Identifiers, including a real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers
    • Personal Information described in California Section 1798.80(e)
    • Commercial Information
    • Internet or other electronic activity information
    • Geolocation data
    • Audio, electronic, visual, thermal, olfactory, or similar information
    • Inferences
    • Sensitive personal information, specifically: (a) log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, and (b) precise geolocation information.

    World of Books Group may disclose your Personal Information to a third party for a business purpose. When we disclose personal information for a business purpose, we require that the recipient both keep that Personal Information confidential and not use it for any purpose except performing the contract.

    In the preceding twelve (12) months, World of Books Inc has disclosed the following categories of Personal Information for a business purpose:

    • Identifiers, including a real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers
    • Personal Information described in California Section 1798.80(e)
    • Commercial Information

    We share your Personal Information with third parties set out in the Who we share your information with section above.

    World of Books Inc does not disclose, sell, share, or rent your personal information to third parties in exchange for money or compensation. However, California privacy laws define a “sale” as disclosing or making available personal information to a third party in exchange for monetary or other valuable consideration, and “sharing” broadly includes disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising or with affiliates and business partners.

    We share your personal information with third parties (such as social media platforms) for behavioural advertising or with other third-party partners in accordance with your privacy settings and/or consent.

    • Identifiers, including a real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers
    • Commercial Information
    • Internet or other electronic activity information
    • Geolocation data
    • Inferences

    We do not “sell” or “share” any personal information about individuals who we know are under the age of 16. We do not “sell” or “share” sensitive personal information.

    Your Rights

    • To know what information we collect and request access (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. You may also do this yourself through the My Account dashboard (if you are a registered customer).
    • To request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
    • To request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
    • To opt out of “sales” or “sharing” for cross-context behavioral advertising or targeted advertising. You may request to opt-out of our sale of your personal information and sharing of your personal information for cross context behavioral advertising or targeted advertising.
    • To not be discriminated against. You have the right not to be subject to discriminatory treatment for exercising your rights.

    The above rights are not absolute, and in certain circumstances we may refuse to comply with your request to exercise them. In those cases we will inform you of our refusal and our reasons for it. In some circumstances, we may also charge you for our cost of complying with your rights, but only where permitted to do so by law (and where we have given you notice that we will do so).

    Opting Out of Direct Marketing.

    You can opt-out by following the opt-out or unsubscribe instructions in the message or by contacting us.

    You may request the exercise any of your rights by emailing [email protected]. We may ask you to provide some information to verify your identity before we stop sharing your data.

    If you have a complaint about the usage of your information, please contact us using the details in the 'How to contact us' section.

    9. Who we share your personal data with—in more detail

    More details about who we share your personal data with and why are set out in the table below.

    Recipient Recipient Processing operation (use) by recipient Relevant categories of personal data transferred to recipient Relevant categories of personal data transferred to recipient
    Checkout Ltd —a company incorporated in England with registered number 08037323, whose registered office is at 54 Portland Place, London W1B 1DY, United Kingdom We use Checkout to provide card payment services on our Websites.
    —your name, address and contact information, including email address and telephone number;

    —contact history and purchase history; —your account details (username) — your billing information, transaction information and some payment card information —location data, including IP address, and device information

    We use Checkout to provide card payment services on our Websites. —your name, address and contact information, including email address and telephone number; —contact history and purchase history; —your account details (username) — your billing information, transaction information and some payment card information —location data, including IP address, and device information
    Digital Genius Limited —a company incorporated in England with registered number 09024313, whose registered office is at 2 Underwood Row, London, United Kingdom, N1 7LQ We use Digital Genius to assist with dealing with customer queries. Digital Genius uses APIs to perform the role of a customer service operative by accessing your personal information and providing an appropriate response to your query. —your name, address and contact information, including email address and telephone number; —contact history and purchase history; —your account details (username)
    Hotjar UK Limited —a company incorporated in England with registered number 13462764, whose registered office is at 5 Fleet Place, London, England, EC4M 7RD We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. We will always seek your express consent to use this technology. For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
    Royal Mail Group Limited —a company incorporated in England with registered number 04138203, whose registered office is at 185 Farringdon Road, London, United Kingdom, EC1A 1AA We use Royal Mail to assist us with delivering your order. —your name, address and contact information, including email address and telephone number; —your account details (username)
    Drop and Collect Limited trading as Collect+ —a company incorporated in England with registered number 06593233, whose registered office is at Atlantic Pavilion, Albert Dock, Liverpool, United Kingdom, L3 4AE We use Collect+ to assist us with receiving your orders or trades on the Ziffit Website.

    We act as joint controller with Collect+. You can find a link to their privacy notice here.

    —your name, address and contact information, including email address and telephone number; —your account details (username)
    DPDGroup UK Ltd —a company incorporated in England with registered number 00732993, whose registered office is at Roebuck Lane, Smethwick, West Midlands, B66 1BY We use DPD to assist us with receiving your orders or trades on the Ziffit Website. —your name, address and contact information, including email address and telephone number; —your account details (username)
    Trustpilot A/S —a company incorporated in Denmark with registered number 30 27 65 82, whose registered office is at Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark We use Trustpilot to monitor and respond to customer reviews. —your name, address and contact information, including email address and telephone number; —your account details (username); —your purchase history
    Google Cloud UK Limited —a company incorporated in England with registered number 10009361, whose registered office is at 5 New Street Square, London, United Kingdom, EC4A 3TW We use Google Cloud to host our Websites and store your personal data. Further information about Google Cloud’s services can be found here. —your name, address and contact information, including email address and telephone number; —your account details (username) — location data, if you choose to give this to us your contact history, purchase history and saved items
    Microsoft Limited, trading as Bing —a company incorporated in England with registered number 01624297, whose registered office is at Microsoft Campus, Thames Valley Park, Reading, Berkshire, RG6 1WG We use Microsoft Bing to bring you targeted advertising about our services and improve your experience on our website. To do this, we provide them with IP addresses. —Your IP address, if you choose to allow us to collect this. —Information about how you interact with our sites, if you choose to allow us to collect
    Meta Platforms Ireland Limited, trading as Facebook —a company incorporated in Scotland with registered number SC719039, whose registered office is at 1/3 16 Deanston Drive, Glasgow, Scotland, G41 3AE We use Facebook to bring you targeted advertising about our services and improve your experience on our website. To do this, we provide them with a list of email addresses and / or IP addresses and they confirm if they operate accounts with those email and / or IP addresses. If the platform does not have an account with a matching address, the contract terms under which they act as our processor for this purpose does not permit them to make any further use of the address we provided. —your name, address and contact information, including email address and telephone number; —your account details (username) —location data, if you choose to give this to us
    HubSpot Inc. —a company incorporated in the United States of America, whose registered office is at 25 First Street, 2nd Floor, Cambridge, MA 02141 USA We use Hubspot to process business and charity contact information and personal data from third party suppliers in the US. Business and charity contact personal data is stored by Hubspot in accordance with their Data Processing Agreement which can be found here. —your name, address and contact information, including email address and telephone number; —your account details (username)
    Mailgun Inc —a company incorporated in the United States of America, whose registered office is at 112 East Pecan Street Suite 1135 San Antonio, TX 78205 USA We provide Mailgun Inc with customer information including name and email address to send service emails on our behalf, for example to confirm a purchase or trade. —your name, address and contact information, including email address and telephone number; —your account details (username)
    Where you pay for your order using a debit or credit card, third-party payment processors such as PayPal, GooglePay or ApplePay will process your personal and financial data. For example, if you choose to make payment for your order via PayPal, we will need to provide PayPal with your email address and the terms of their privacy policy will apply. Where you choose to pay using Mastercard, Mastercard will process your data in accordance with their Binding Corporate Rules (BCRs), as updated from time to time. A copy of the Mastercard BCRs is available here. You have certain third-party beneficiary rights to enforce these BCRs and you should read the BCRs carefully and contact Mastercard with any questions. In these cases, you should read and understand each party’s privacy notice as that will apply. Please refer to each party’s respective privacy notice
    Exponea Ltd, trading as Bloomreach, —a company incorporated in England with registered number 10383607, whose registered office is at 79-81 Borough Road, London, England, SE1 1DN We use Bloomreach to assist us with analysing your personal data to provide targeted marketing communications. —your name, address and contact information, including email address and telephone number; —your account details (username)
    InPost UK Limited, Unit C Boundary Park, Boundary Way, Hemel Hempstead, Hertfordshire, HP2 7GE We use InPost UK Limited to assist us with receiving your orders of trades on the Ziffit Website and App. Your contact details including, as applicable, name, address, postcode, phone number, email address, account number, services required, description, weights and dimensions of your parcels, unique order number, selected delivery or collection date and Automated Parcel Machine location.
    AppsFlyer UK LTD, a company incorporated in England, whose registered office is located at 87-91 Newman St., London, W1T 3EY, United Kingdom We use AppsFlyer to help us collect information and insights on customers who use our Ziffit App. — Technical identifiers such as your IP address, Android ID, Google Advertiser ID and Google Analytics ID — Technical information such as they operating system version, WIFI status, system language and browser type. — Engagement information which includes information about how you engage or reach our site, for example your interactions with our online adverts that direct you to our site and information about how you interact with our site once you are there.
    Dovetail Research Pty. Ltd. a proprietary limited company registered in Australia with Australian Business Number (ABN) 84 615 270 025 whose registered office is Level 1, 276 Devonshire Street, Surry Hills, 2010, NSW, Australia. We use Dovetail to store and analyse the data of customers who have taken part in customer research. —your name, address and contact information, including email address, video conferencing username, and telephone number; —Information relating to your purchasing preferences, social and professional background, interests — Data may include special categories of data including race or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health, sex life, and sexual orientation
    Freshworks Inc, a company incorporated in the USA whose registered office is Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403 We use Freshworks Inc to assist us with our customer services operations. —your name, address and contact information, including email address and telephone number; —contact history and purchase history; —your account details (username)
    3CG CHANNELREPLY LLC, a company incorporated in the USA whose registered office is 16192 Coastal Highway Lewes, Delaware 19958. We use Channel Reply to assist us with out customer services operations. —your name and address —contact history and purchase history; —your marketplace account details (username). This includes for example, your amazon or ebay username when you use that account to buy a product from us.
    Zoom Communications Inc. a company incorporated in the USA whose registered office is 5 ALMADEN BOULEVARD, 6TH FLOOR. SAN JOSE CA 95113 We use Zoom to undertake customer research interviews. — Video recordings of research interviews — Zoom account identifiers which may include your email address
    Mention Me Limited, incorporated and registered in England and Wales with company number 08382730 whose registered office is at 20-22 Wenlock Road, London, N1 7GU, UK. We use Mention Me to assist us with our customer referral campaigns. — Your Email address — Your Name — Your customer or Trade ID — IP address — Device type (e.g. iOS/Android)
    TikTok Information Technologies UK Limited, a company registered under the laws of England with registered number 10165711 and registered address WeWork, Aviation House, 125 Kingsway, London, England, WC2B 6NH; and TikTok Technology Limited, a company incorporated under the laws of Ireland with registered number 635755 and having its registered office at 10 Earlsfort Terrace, Dublin, D02 T380, Ireland We use TikTok to bring you targeted advertising about our services and improve your experience on our website. — Your Device ID — Device related information (type, operating system) — Your IP addresses — Information on who has and hadn’t interacted with our adverts — Pixel data – this is data that allows us to measure the effectiveness of advertising campaigns by recording the actions that you take on our websites
    CHEQ AI TECHNOLOGIES (2018) LTD, a company registered in Israel whose registered office is 23, Yehuda Halevi St Tel Aviv, 65136 Israel. We use CHEQ to provide us with security software solutions — IP Addresses
    Sky TV Limited, Grant Way, Isleworth, Middx, TW7 5QD, a company incorporated and registered in England and Wales with company number 02906991 We use Sky TV Limited to provide us with advertising and web attribution services. — IP addresses, unique user IDs, Cookie IDs, and website/app usage and marketing profiles.
    ROKT PTE. LTD. (ROKT) UEN 201230345N 3 PHILLIP STREET, #11-01 ROYAL GROUP BUILDING, SINGAPORE 048693 We use ROKT to present and optimise relevant offers or promotions to End Customers on our sites. — First name — Email address — Transaction details — Zip/Postcode — Location (Country)

    10. Additional Information for Residents of Viginia

    If you are a Virginia resident at the time, we collect your personal data you may be able to assert the rights listed below, related to your personal data.

    • • To know what information we collect and request access (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. You may also do this yourself through the My Account dashboard (if you are a registered customer).
    • To request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
    • To request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
    • To opt out of “sales” or “sharing” for cross-context behavioral advertising or targeted advertising. You may request to opt-out of our sale of your personal information and sharing of your personal information for cross context behavioral advertising or targeted advertising.
    • To not be discriminated against. You have the right not to be subject to discriminatory treatment for exercising your rights.

    Please note that the Virginia Consumer Data Protection Act VCDPA permits us to deny a request: (a) when denial of the request is required or authorized by law; (b) when granting the request would have a negative impact on another's privacy; (c) to protect our rights and properties; (d) where the request is excessive or overly burdensome, or (e) for other lawful reasons. If we deny your request, we will explain the reasons in our response.

    You may request the exercise any of your rights by emailing [email protected]. We may ask you to provide some information to verify your identity before we stop sharing your data.

    If you have a complaint about the usage of your information, please contact us using the details in the 'How to contact us' section.

    11. How to contact us

    Mailing address: Corporation Trust Centre, 1209 Orange Street, Wilmington, Delaware 19801 USA

    Email: [email protected]