Privacy

Last updated: 4 September 2026

This notice explains how personal data is handled when you visit tomkenis.com, send an enquiry, request signed books or subscribe to notifications of new Stories.

Who is responsible for your data?

MakeShiftPublishing is the controller responsible for personal data processed through this website.

Contact: info@makeshiftpublishing.com
Location: Brussels, Belgium

Visiting the website

This is a static website. It does not use advertising trackers, behavioural profiling or analytics. It does not use social-media embeds. Links to external services open their own websites, which apply their own privacy and cookie practices.

The website host may process standard technical logs, such as an IP address, the requested page, date and time, browser or device information and referring page. These logs are used to operate, secure and diagnose the website. The legal basis is MakeShiftPublishing’s legitimate interest in providing a secure and reliable website. The host keeps logs according to its standard technical retention schedule and only for as long as needed for those purposes or to meet a legal obligation.

Contact enquiries

When you use the contact form, the site collects your enquiry type, name, email address and message. This information is used only to receive, route and answer your enquiry and to keep an appropriate record of the correspondence. It is not added to the Stories mailing list or used for marketing.

The legal basis is taking steps at your request before entering into a possible agreement, where relevant, and otherwise MakeShiftPublishing’s legitimate interest in responding to genuine enquiries.

Enquiry records are normally deleted within 24 months after the last substantive contact. They may be kept longer when needed for an ongoing relationship, to establish or defend legal claims, or to meet a legal obligation.

Signed-book requests

When you request signed books, the site collects the books selected, your name, email address, postal address, country and any optional dedication. This information is used to check stock, calculate and confirm postage, answer your request, prepare an invoice, fulfil the order and provide customer service. The website does not take payment or collect bank or card details.

The legal basis is taking steps at your request and performing the resulting agreement. Information needed for invoicing and accounting is also processed to meet legal obligations.

Requests that do not lead to an order are normally deleted within 12 months after the last contact. Operational correspondence is normally retained for up to 24 months after dispatch. Invoice, transaction and accounting records are retained for 10 years after the relevant taxable period, or longer if another legal obligation requires it.

New-Story notifications

When you ask to be notified of new Stories, the site collects your email address and information needed to record and demonstrate your subscription request. A confirmation email is sent, and the subscription starts only after you click its confirmation link.

The legal basis is your consent. Your address remains on the active subscriber list until you unsubscribe or ask for its removal. Every notification includes an unsubscribe route. After you unsubscribe, limited information may be retained where necessary to record the withdrawal, demonstrate compliance and ensure that no further notifications are sent.

You can withdraw your consent at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.

Service providers and recipients

The forms, contact lists, confirmation messages and form notifications are handled through Brevo, which acts as a service provider to MakeShiftPublishing. Brevo states that its database hosting is located in the European Union. You can read Brevo’s privacy policy for more information.

Personal data may also be handled by authorised people working for MakeShiftPublishing and by its website host, email provider, accountant, delivery provider or other service providers, but only where needed for the purposes described above. Information may be disclosed where required by law or necessary to establish or defend legal claims.

Personal data is not sold. There is no solely automated decision-making or profiling through this website.

Where a provider processes personal data outside the European Economic Area, MakeShiftPublishing requires an appropriate legal transfer mechanism and safeguards.

Your rights

Subject to the conditions in data-protection law, you may ask to access, correct or erase your personal data, restrict its use, object to processing based on legitimate interests, or receive data you supplied in a portable format. Where processing is based on consent, you may withdraw that consent at any time.

To exercise a right or ask a privacy question, email info@makeshiftpublishing.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority.

Changes to this notice

This notice may be updated if the website or its data processing changes. The date at the top shows the latest revision.