Privacy Policy

1. Who handles your data

Data you leave on maya-story.com is controlled by LUKA BOOKS. For any question about privacy: [email protected].

2. When data is collected at all

You can browse the whole site — the books, the gallery, the blog and everything else — without leaving a single piece of data. There is no registration, no sign-in and no user account.

Data is collected in two cases only: when you fill in the order form, and when you write to us by e-mail yourself.

3. What is collected

From the order form:

• first and last name,
• e-mail address,
• telephone number,
• delivery address, town, postcode and country,
• any note you write yourself,
• the order itself — book title, quantity and amount.

Two further details are recorded automatically:

• the IP address the order was sent from — to protect the form from abuse,
• the language the order was made in — so that your confirmation arrives in your own language.

No card or bank details are collected: payment is on delivery, to the courier.

4. Why it is processed, and on what basis

• Fulfilling and delivering the order, sending the confirmation — processing is necessary to perform the contract concluded by your order.
• Answering a message you sent by e-mail — processing takes place at your request.
• Protecting the form from automated abuse — the legitimate interest of keeping the form usable.
• Sales records — compliance with legal obligations.

Data is not used for profiling, is not added to any newsletter, and is not used for advertising.

5. Who the data is passed to

• The courier service delivering the parcel — name, address, telephone and the amount to collect.
• The hosting provider whose servers run the site and its database.
• The e-mail service through which the order confirmation is sent.
• Cloudflare, to check that the form is not being filled in by a bot (Turnstile); the IP address is passed on for that check.

Data is never sold and never passed to third parties for marketing.

6. How long it is kept

Orders are kept while they are being processed and afterwards for as long as sales-record regulations require. E-mail correspondence is kept for as long as it is needed to answer you and to carry on the exchange. Once the need ends and the statutory period expires, the record is deleted.

7. Cookies

The site uses as few cookies as possible. It has no advertising cookies, and analytics cookies are set only with your consent.

The cookies the site needs in order to work:

• a session cookie — remembers your session while you fill in the form; it is deleted when you close the browser, or after two hours of inactivity,
• a security token — stops the form being submitted from another site in your name,
• a language choice — remembers whether you opened the site in Serbian or in English,
• Cloudflare Turnstile — a technical cookie set when the form is checked.

Fonts and images are loaded from the same server as the site itself, so reading a page pulls nothing from Google's servers. The only call to an outside service is the order-form check described above.

Analytics and your consent

Google Analytics is also enabled on this site. It records visits in aggregate form for statistical purposes and sets its own cookies in the process. The data is processed by Google, with the IP address shortened.

Analytics does not start on its own. The script is loaded only after you choose Accept on the bar at the bottom of the screen; if you choose Only essential, no analytics cookie is set and nothing is sent to Google.

Your answer is remembered in the browser itself for one year — not in a cookie — and the bar does not appear again until then. You can change your choice whenever you like, through the Cookies link in the site footer.

8. Your rights

At any time you have the right to ask for:

• access to the data held about you,
• correction of anything inaccurate, or completion of anything incomplete,
• erasure of the data,
• restriction of processing,
• transfer of the data to another controller,
• objection to processing based on legitimate interest.

Send your request to [email protected] and you will have an answer within 30 days at the latest.

If you believe your rights have been breached, you may complain to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs).

9. Children

The books are written for children, but ordering is for adults. Children's data is not knowingly collected. If we notice that a child's details have been entered without a parent's knowledge, they will be deleted.

10. Security

The site runs over an encrypted connection (HTTPS). Only the author has access to orders in the site's administration, protected by a username and password.

11. Changes to this policy

This policy may change when the way the site works changes. A revised version applies from the moment it is published on this page, and the date of the last change is given at the bottom.

For any question about privacy, see the Contact page; this policy forms part of the Terms of Use.

Last updated: 30 August 2026.