Privacy Policy
Effective Date: September 2026
Who we are
This Site, kimeanderson.com, is owned and operated by Kim Anderson Pty Limited (ABN 19 074 659 635) ("we", "us", "our"). We are based in New South Wales, Australia. We sell paperback copies of the novel The Prize directly through our online book shop, publish a blog, and offer an email newsletter.
We respect your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and what you can do about it. It forms part of our Website Terms & Conditions and should be read with our Cookies Policy.
Contact us about privacy at contact@kimeanderson.com, or through the contact form on our Site.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This policy does not cover information you provide on other websites. If you comment on our posts on Instagram, Facebook or another platform, that information is governed by the privacy policy of the platform concerned.
What we collect
When you buy a book:
your name, delivery address, email address and, if you provide one, your telephone number
your order details and order history
confirmation from our payment provider that payment succeeded, together with the payment method type and the last four digits of your card
for overseas orders, the information required on a customs declaration
We do not see or store your full card number, expiry date or security code. Payment is processed by Stripe, who handle those details under Stripe's privacy policy and its PCI DSS obligations.
If you pay using Apple Pay, your card number is not shared with us or with Stripe. Apple provides a device-specific token in its place, and your fingerprint, face or passcode data never leaves your device. Apple's handling of this is described in its privacy policy.
When you subscribe to our newsletter: your name and email address, and whether you opened an email or clicked a link in it.
When you contact us: your name, email address and whatever you choose to tell us in your message.
When you simply visit: your IP address, browser type and version, operating system, approximate location derived from your IP address, the pages you viewed, how long you stayed, and the site or search that referred you. This is collected automatically by Squarespace and by Google Analytics. We do not attempt to identify individual visitors from this data.
When you submit a review or comment: the content you submit and the name you choose to publish it under.
We do not collect sensitive information, and we do not knowingly collect personal information from children.
Why we collect it
We use your personal information to:
process, package and send your order, and to issue a tax invoice
answer your questions and provide customer support
process a return, replacement or refund
keep the accounting and tax records we are required by law to keep
detect and prevent fraud
send you our newsletter, if you have asked for it
understand how the Site is used so we can improve it
publish reviews or comments you have submitted for publication
We do not use your information for automated decision-making or profiling. We do not sell or rent your personal information to anyone, and we do not use online advertising or advertising cookies.
Who we share it with
We disclose personal information only as follows:
| Who | What they receive | Why |
|---|---|---|
| Australia Post | Your name, delivery address, phone number and, for overseas orders, customs information | To deliver your order |
| Stripe | Your name, email and the payment details you enter | To process payment |
| Squarespace | Order and account data, site usage data | To operate the site and shop |
| Google Analytics | Site usage data and IP address | Website analytics |
| Squarespace Email Campaigns | Your name and email address | To send the newsletter you subscribed to |
| Our accountant and bookkeeper | Order and invoice records | Tax, GST and financial reporting |
| Our professional advisers | Only what is necessary | To obtain legal or accounting advice |
| Law enforcement or government authorities | Only what is required | Where the law requires it |
We may also disclose your information where you have consented, or where disclosure is otherwise permitted or required under the Privacy Act.
Delivery is the disclosure people most often overlook: to send you a book, we must give your name and address to Australia Post.
Cookies and analytics
Our Site uses cookies and similar technologies. Our Cookies Policy explains which ones, what they do, and how to refuse or delete them.
We use Google Analytics to understand how visitors find and use the Site. You can opt out of Google Analytics across all websites using the Google Analytics opt-out browser add-on, or read how Google handles this data in Google's privacy policy.
Our newsletters may contain a small tracking image that tells us whether an email was opened and which links were clicked. We use this only to judge whether our emails are of interest. Every email includes an unsubscribe link.
Marketing
We will only send you marketing emails if you have asked to receive them. We comply with the Spam Act 2003 (Cth).
You can unsubscribe at any time using the link at the foot of any email, or by writing to contact@kimeanderson.com. We will action it promptly. Unsubscribing from the newsletter does not stop emails about an order you have placed.
Choosing not to provide information
You do not have to give us any personal information. You can browse the Site without doing so. But we cannot send you a book without a name and delivery address, and we cannot send you a newsletter without an email address.
Where your information is held
Our records are held in Australia and with reputable service providers who may store data overseas, including in the United States. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
How long we keep it
Order and tax records: seven years from the end of the financial year in which the transaction occurred, as required for Australian tax purposes.
Newsletter subscriptions: until you unsubscribe, after which we retain a record of your unsubscribe request so we do not contact you again in error.
Enquiries and correspondence: generally two years, unless a longer period is needed to deal with a complaint or a legal matter.
Website analytics: in line with the retention settings of our analytics provider.
When we no longer need personal information, we destroy it or de-identify it.
Keeping it secure
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include:
using reputable providers with appropriate security measures for storage, payment and email
using payment providers who are PCI DSS compliant, and not storing card details ourselves
limiting access to personal information to those who need it
password protection and multi-factor authentication on the accounts we use
deleting or de-identifying information we no longer need
No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If something goes wrong
If a data breach occurs that is likely to result in serious harm, we will contain it, assess it promptly, and notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
Your rights
Access. You can ask us for a copy of the personal information we hold about you. Write to contact@kimeanderson.com. We will respond within 30 days and there is no charge. We will tell you if we cannot give you access and why — for example, where doing so would unreasonably affect someone else's privacy.
Correction. If information we hold about you is inaccurate, out of date or incomplete, tell us and we will correct it.
Deletion. You can ask us to delete the personal information we hold about you, and we will do so unless we are required to keep it — most commonly because it forms part of a tax record we must retain for seven years.
Unsubscribing. See Marketing above.
Complaints
If you are concerned about how we have handled your personal information, please write to contact@kimeanderson.com. We will acknowledge your complaint within 2 business days and respond substantively within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, which can be reached on 1300 363 992.
Readers outside Australia
We accept international orders by email arrangement. If you are in the United Kingdom or the European Economic Area, you may have additional rights under the UK GDPR or EU GDPR, including rights of access, rectification, erasure, restriction, objection and data portability, and the right to complain to your local supervisory authority.
Where those laws apply to us, we rely on the following bases for handling your information: performance of our contract with you (to fulfil your order), your consent (for marketing), our legal obligations (tax records), and our legitimate interests (site security and improvement). To exercise any of these rights, write to contact@kimeanderson.com.
Age
Our Site is not intended for children. If you are under 18, please ask a parent or guardian to place any order on your behalf. If we become aware that we hold personal information about a child collected without the involvement of a parent or guardian, we will delete it.
Changes to this policy
We may update this policy to reflect changes in our practices or the law. The current version is always identified by the Effective Date at the top of this page. We keep dated copies of earlier versions and will provide one on request.
Governing law
This policy and your use of the Site are governed by the laws of New South Wales, Australia.
Kim Anderson Pty Limited | ABN 19 074 659 635 | New South Wales, Australia | contact@kimeanderson.com
Version 1.0, September 2026. Previous version: 6 February 2023.