Hana Yoshida ← Back to the ebook

What we hold, and what we do not

Privacy policy

We sell one PDF. That needs an email address and a payment — and almost nothing else. This page says exactly what is kept, by whom, and for how long.

Cook Better, Waste LessLast updated 31 August 2026

In plain words

  • There is nothing to ship, so we never ask for your home address.
  • We never see your card number. Whop takes the payment; the digits never reach us.
  • No ads, no tracking pixels, no marketing email. You get one email from us: your download link.
  • The visitor counter cannot identify you. Your IP address is never stored — only a one-way hash whose key is destroyed and replaced every day.

01Who is responsible

Dohar Co. Ltd (EIK 208639703, VAT ID BG208639703), registered in Bulgaria, is the data controller for the information described on this page. Write to hanayoshida.support@gmail.com about anything here.

02What we collect

Only what a digital purchase actually requires. There is no account to create, no newsletter, no profile and no cart.

Everything held about a buyer
WhatWhy we have itWhere it comes from
Email addressTo send your download link, and to find your order if you write to usYou, at checkout
NameAttached to the payment record and the receiptWhop, if you gave one
Country and regionTo work out the sales tax that applies to your orderWhop, from your payment
Order detailsAmount, currency, date, product and a payment reference — our record that you bought itWhop
Support emailsTo answer you, and to know what we already told youYou
Not collected: your card number, your postal address, your phone number, your date of birth, or anything about you from anywhere other than your own order.

03Who processes it for us

Four companies touch your data, each for one job. We do not sell or rent your information to anyone, and none of these are advertising partners.

Processors
CompanyWhat it doesWhat it sees
WhopRuns the checkout and takes the paymentYour email, name, card details and billing country
CloudflareHosts the site and stores the order recordYour request data, and the order fields listed above
ResendSends your download emailYour email address and the message
Google FontsServes the two typefaces this site usesYour IP address, when your browser fetches a font file

04What we do not do

  • We do not run advertising, retargeting or conversion pixels. There is no Meta pixel, no Google Ads tag and no TikTok tag on this site.
  • We do not use Google Analytics or any similar product.
  • We do not send marketing or promotional email. Buying the book does not put you on a list, because there is no list.
  • We do not sell, rent or share your data with data brokers.
  • We do not profile you or make automated decisions about you.

05The visitor counter

The checkout page shows how many people visited the site today. It is a real number, and it is built so that it cannot identify anyone.

Here is exactly what happens. Each day the server generates a random key. When your browser reports a visit, the server combines that day's key with your IP address and browser name, runs the result through a one-way hash, and stores only the hash. Your IP address is never written down.

Because the key is random and changes every day, the same visitor produces a completely different hash tomorrow. The hashes cannot be reversed, cannot be linked across days, and cannot be matched to an order.

Alongside the count we keep the country your visit came from, and while your tab is open a temporary note of the town or region and which page of this site you are on, so we can see where readers are and whether anyone is on the site right now. That temporary note is overwritten every minute and deleted within half an hour of you leaving. It is not attached to your order, your email or anything else about you.

What we can tell from it: "about 40 different people came today, mostly from the United States, and two are reading right now." What we cannot tell: who any of them are, or whether any of them came back.

06Storage on your device

This site sets no advertising or tracking cookies. It does use a small amount of browser storage, which stays on your device and is never sent to us:

  • a note of the day you last visited, so the counter above does not count you twice;
  • the end time of the launch countdown, so it does not restart every time you reload;
  • a note that you have already seen the pop-up, so it does not reappear.

Clearing your browser data removes all of it. Nothing breaks if you do.

07How long we keep it

DataKept forReason
Order records10 yearsBulgarian tax and accounting law requires it
Your download link10 yearsSo you can re-download the book you paid for
Support emails2 yearsTo handle follow-up questions and disputes
Visit hashesRolling — the daily key is replaced every dayThey stop being linkable to anything almost immediately

08Where your data goes

Our processors are based in the United States and operate globally, so your data is transferred outside the European Economic Area.

Those transfers rely on the European Commission's Standard Contractual Clauses, and where applicable on the EU–US Data Privacy Framework. Cloudflare stores our order records in its distributed database, which may hold copies in more than one region.

09Your rights

If the GDPR or the UK GDPR applies to you, you can ask us to:

  • show you what we hold about you;
  • correct anything wrong;
  • delete it — though we must keep order records for the tax period above;
  • export it in a portable format;
  • restrict or object to how we use it.

Email hanayoshida.support@gmail.com from the address you bought with. We reply within 30 days and we do not charge for it.

Our lawful bases are: performance of a contract for your order and delivery, legal obligation for the tax records, and legitimate interests for the anonymous visitor count and for keeping the site secure.

If you think we have handled your data badly, you can complain to your national data protection authority. In Bulgaria that is the Commission for Personal Data Protection; in the UK, the Information Commissioner's Office. We would rather you told us first, but it is your right either way.

10Children

This shop is meant for adults and we do not knowingly collect data from anyone under 16. If you believe a child has bought from us, write to us and we will delete the record and refund the purchase.

11Changes to this policy

If what we do with your data changes, this page changes with it and the date at the top is updated. We do not make changes retroactive to data we have already collected under an older version.

Who to write to

Seller
Dohar Co. Ltd
Company no.
EIK 208639703
VAT ID
BG208639703
Registered
Bulgaria
Email
hanayoshida.support@gmail.com

We answer within two business days. If you need our full registered address for a formal or legal request, ask by email and we will send it.