Privacy Policy
Your information. Your choices.
Last updated: 1 October 2026
Under 18?
Here's the short version.
We only ask for the information we need. We'll tell you why we're asking. We don't sell your personal information. You can ask us to stop contacting you at any time.
If you’re unsure about sharing information with us, ask a parent, guardian or another adult you trust.
1. Introduction
Nenwa Publishing (“we”, “us” or “our”) operates the Smart & Dangerous website.
This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, request content, join the S&D FAM, contact us, or make an enquiry about our books or services.
We are committed to protecting your privacy and handling personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws.
Our details
-
Data Controller: Nenwa Publishing
-
Established: United Kingdom
-
Email: info@smart-and-dangerous.com
2. Information we collect
We collect information that you choose to give us and some information generated when you use our website.
This may include:
-
Your name and email address
-
Your preferred language
-
Organisation details if you contact us on behalf of a school, library or other organisation
-
Country, approximate book quantity and preferred format for school or library enquiries
-
Information you include in a message, request or enquiry
-
Technical information needed to operate and secure the website, such as browser, device and security information
-
Information about how the website is used where analytics have been enabled with the appropriate permissions
We do not ask you to provide sensitive personal information through the website.
4. Our legal basis
UK data protection law requires us to have a lawful basis for processing personal information. Depending on what you are doing on our website, we may rely on:
Consent
Where you have actively chosen to receive communications or where consent is otherwise required.
Contract or steps before entering into a contract
Where information is needed to respond to an order request, prepare a quotation or fulfil an order.
Legitimate interests
Where processing is reasonably necessary to operate and protect Smart & Dangerous, respond to enquiries, administer our activities or improve our services, provided those interests do not override your rights and interests.
Legal obligation
Where we need to process or retain information to comply with applicable law.
Where we rely on your consent, you can withdraw it at any time.
6. Sharing and Disclosure
We do not sell your personal information.
We may use trusted organisations to help us operate Smart & Dangerous.
These may include providers supporting:
-
Website hosting and functionality
-
Email and communications
-
Order administration and fulfilment
-
IT and security
-
Analytics and website performance
-
Professional and business services
Our website is currently provided using Wix.
As Smart & Dangerous develops, we may introduce additional service providers. Where they process personal information for us, we will take appropriate steps to protect that information and update our privacy information where necessary.
We may also disclose personal information where required by law, to establish or protect our legal rights, or in connection with a legitimate business reorganisation or transfer.
7. International Transfers
Some organisations that provide technology or other services to us may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we will use appropriate safeguards and lawful transfer mechanisms where required by UK data protection law.
You can contact us if you would like further information about the safeguards relevant to your information.
9. Cookies
Our website uses cookies and similar technologies.
Some cookies are strictly necessary for the website to function properly.
We may also use functional, analytics or marketing technologies where appropriate. Where UK law requires consent, these technologies will not be activated for you until the appropriate consent has been obtained.
You can manage your choices through our cookie consent controls.
More information about the technologies we use and the choices available to you can be found in our Cookie Policy.
10. Your Rights Under UK GDPR
Depending on the circumstances, you may have the right to:
-
Ask for a copy of personal information we hold about you
-
Ask us to correct inaccurate or incomplete information
-
Ask us to delete your personal information
-
Ask us to restrict how we use your information
-
Object to certain ways we use your information
-
Receive certain information in a portable format
-
Withdraw your consent where we rely on consent
These rights are not absolute and may apply differently depending on the circumstances.
You have the right to object to direct marketing at any time.
If you ask us to stop using your information for direct marketing, we will do so.
To exercise your rights, contact info@smart-and-dangerous.com.
We may need to confirm your identity before completing a request.
13. Changes to This Policy
We may update this Privacy Policy from time to time as Smart & Dangerous develops, our services change or legal requirements change.
This may include changes resulting from the introduction of new website features, communications tools, analytics or service providers.
The latest version will always be published on this page together with the date it was last updated.
3. How we use your information
We use personal information only where we have an appropriate reason to do so.
S&D FAM
If you choose to join the S&D FAM, we may use your email address to send the updates and content you have asked to receive.
Read Chapter One Free
We use the information you provide to deliver the content you request and administer your request.
Schools & Libraries
We use information provided through our school and library enquiry process to respond to enquiries, discuss requirements, provide quotations, manage orders and provide requested educator information or resources.
Contact Us
We use the information you provide to respond to your message or enquiry.
Website operation and security
We may process technical information where necessary to operate, maintain and protect the website and prevent misuse.
Analytics and improvement
If we introduce analytics or similar technologies, we may use information about how the website is used to understand and improve the visitor experience. Where consent is required, these technologies will only be used after appropriate consent has been given.
We will not automatically add someone who contacts us or makes a school or library enquiry to the S&D FAM mailing list.
5. If you're under 18
Smart & Dangerous is enjoyed by young readers, and we want you to understand what happens to your information. If we ask for your name, email address or other information, we'll tell you why we're asking for it and what we'll do with it.
We will:
-
Only ask for information we reasonably need
-
Explain what we want to do with it
-
Take particular care with information belonging to young people
-
Not sell your personal information
-
Give you a way to stop receiving communications you no longer want
-
Help you exercise your privacy rights
If you are unsure whether you should give us your information, ask a parent, guardian or another adult you trust.
You can also contact us at info@smart-and-dangerous.com.
Children have data protection rights in their own right, and information about those rights should be presented in a way they can understand.
Children under 13
There are additional rules where an online service is offered directly to a child and we rely on consent to process their personal information.
In those circumstances, a child aged 13 or over may generally provide their own consent under UK data protection law. For a child under 13, consent must generally be given or authorised by someone with parental responsibility, and reasonable efforts may be required to verify that consent.
8. Data Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting and operational requirements.
In general:
Marketing Information
Retained while you remain subscribed and for a limited period afterwards where necessary to record your preferences.
Content Requests
Retained for as long as reasonably necessary to fulfil and administer the request.
General Enquiries
Retained for as long as reasonably necessary to respond and maintain appropriate records.
School and Library Enquiries and Orders
May be retained for longer where necessary for contractual, accounting, tax or legal purposes.
Technical and Security Information
Retained according to reasonable operational and security requirements.
We periodically review the information we hold and delete or anonymise information when it is no longer required.
11. Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Our security measures are proportionate to the nature of the information we process and the risks involved.
No website or electronic communication can be guaranteed to be completely secure, but we take reasonable steps to protect the information entrusted to us.
12. Third-Party Links
Our website may contain links to third party websites, including booksellers and other external services.
Those websites are operated independently and have their own privacy practices.
We are not responsible for the privacy practices of third party websites and encourage you to review their privacy information when you leave our website.
14. Contact Us
If you have a question about this Privacy Policy, how we use your information or your privacy rights, contact:
Nenwa Publishing
Email: info@smart-and-dangerous.com
15. Complaints
If you have concerns about how we use your personal information, please contact us first at info@smart-and-dangerous.com.
We will try to resolve your concern.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.