Legal

Privacy Policy

Last updated: 6 June 2026

This Privacy Policy explains how ID and Brothers (“Librum”, “Librum House”, “we”, “us”), operating librum.house — including the Design Club and the Margins forum — collects, uses, shares and protects personal data, and the rights you have. We are the data controller. Contact our privacy team at legal@librum.house.

This policy is written to meet the EU/UK GDPR, the EU ePrivacy rules, the California CCPA/CPRA and similar laws worldwide. We handle data for: Clients (who commission services), Design Club members (designers and illustrators who create a profile), Forum users (Margins), newsletter subscribers, and visitors to the Site.

1. What we collect

From Clients — name, email, phone (if given), project details, the manuscripts and files you send, and our correspondence.

From Design Club members — name, a public handle, email and phone (kept private), country/city, the portfolio images you upload, and the profile details you choose to publish. Your name, handle, country, portfolio and profile text are public; your email and phone are not shown publicly and are used only to run your account and pass on enquiries you receive.

From Forum users (Margins) — account data (email, nickname, optional country); sign-in data (if you use Google, basic profile info such as your name and email — never your password); and your posts, comments and votes, which are public.

From newsletter subscribers — your email address and subscription status.

From everyone, automatically — technical and usage data (IP address, device and browser, pages viewed, referring pages, approximate location from IP, server logs) and information collected through cookies and similar technologies, including analytics and advertising identifiers (see §3 and our Cookie Policy). We do not intentionally collect special-category data and do not knowingly collect data from children under 16.

2. How we use data, and our legal basis (GDPR Art. 6)

Purpose	Legal basis
Replying to an enquiry and preparing a quote	Steps prior to a contract, at your request
Producing your book under an agreed project	Performance of a contract
Creating and running your Design Club / forum account	Performance of a contract
Publishing your Design Club profile and passing on enquiries	Performance of a contract / legitimate interest
Moderating profiles and the forum, and preventing abuse and fraud	Legitimate interest
Service and transactional messages (email confirmation, project/account updates)	Contract / legitimate interest
Tax, accounting and legal records	Legal obligation
Analytics — measuring how the Site is used (Google Analytics 4)	Consent
Advertising — running and measuring our ads, including with Meta (Facebook/Instagram)	Consent
Newsletter and marketing emails (Margins Monthly, offers)	Consent

Where we rely on consent (analytics, advertising, marketing), you can withdraw it at any time — through our cookie banner, the unsubscribe link in any email, or by contacting us — without affecting processing already carried out. We do not carry out automated decision-making that produces legal effects, and we do not sell your personal data for money.

3. Analytics & advertising

With your consent, we use the following on librum.house:

Google Analytics 4 (Google Ireland Ltd): to understand aggregate traffic and improve the Site. GA4 sets cookies and processes your IP address and usage events; IP addresses are truncated/“anonymised” by Google. Opt out via our cookie banner or the Google Analytics opt-out.
Meta Pixel & advertising tools (Meta Platforms Ireland Ltd): to measure and target our advertising on Facebook and Instagram, build audiences, and see which ads lead to enquiries. With consent, Meta may receive event and identifier data and match it to your Meta account. Manage this in your Meta ad preferences.

We use a consent banner (and Google Consent Mode) so these tools load only after you accept; if you decline, the Site still works fully. Some advertising activity may be treated as “sharing/selling” under California law — see §10 to opt out.

4. Marketing & newsletter

We send the Margins Monthly newsletter and occasional offers only to people who opt in. Every marketing email has an unsubscribe link and you can opt out at any time. Service and transactional messages (confirming your email, project or account updates) are not marketing and are sent as part of providing the Service.

5. Your manuscript (Clients)

Your manuscript and files remain your property. We use them only to quote and to do the work you commission, treat every file as confidential, never reuse them for any other purpose, and can sign an NDA on request.

6. Your Design Club profile (Members)

Your profile (name, handle, country, portfolio and profile text) is public and indexable by search engines. Your email and phone stay private: enquiries reach you through a contact form, and your address is revealed only if you choose to reply. You can edit or delete your profile and uploaded images at any time from your dashboard; deleting your account removes them.

7. Your forum activity (Forum users)

Your nickname and posts are public; your email is not. Please don’t post personal information you wouldn’t want public. When you delete your account, we anonymise past posts (author shown as “[deleted]”) and delete your account and sign-in record.

8. Who we share data with (processors & partners)

We share data only as needed, with providers acting on our behalf under appropriate agreements:

Analytics: Google (Google Analytics 4) — with consent.
Advertising: Meta Platforms (Facebook/Instagram) — with consent.
Email & newsletter: Resend and our newsletter provider.
Database & sign-in (Margins forum): Supabase; Google (OAuth) if you use social login.
Payments: PayPal and our card payment processor (Visa/Mastercard) — they handle your card/bank data, which we do not store.
Hosting & infrastructure: our server and CDN providers.

We may also disclose data where required by law, to protect our rights or users, or in connection with a business transfer (in which case the successor honours this policy).

9. International transfers

We are based in Serbia, and some providers (e.g. Google, Meta, Resend) may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

10. Your rights

GDPR / UK GDPR: you may access your data; correct or erase it; restrict or object to processing (including profiling for direct marketing); receive a portable copy; and withdraw consent at any time. Email legal@librum.house. You may also complain to your local data protection authority.

California (CCPA/CPRA): you may request the categories and specific pieces of personal information we collected, request deletion or correction, and opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising. We do not sell data for money, but our use of advertising cookies may count as “sharing”; to opt out, decline advertising cookies in our banner or email legal@librum.house. We honour Global Privacy Control (GPC) signals where required and will not discriminate against you for exercising your rights.

Members and forum users can also self-serve: edit your profile and details, change your password, and delete your account from your dashboard/settings.

11. How long we keep it

Enquiries that don’t become projects: up to 24 months, then deleted.
Project files and records: for the project plus any period required by tax and accounting law.
Design Club & forum accounts: while active; deleted (and posts anonymised) on request.
Analytics & advertising data: for the retention period set in those tools (typically up to 14 months for GA4).
Newsletter: until you unsubscribe.
Backups: removed in the normal course of our backup cycle.

12. How we protect it

We use appropriate technical and organisational measures — access controls, hashed passwords, secure storage and encrypted transfer. No transmission over the internet is ever perfectly secure, but we work to industry-standard safeguards. Keep your account credentials safe.

13. Children

The Services are not intended for children under 16. We do not knowingly collect their data. If you believe a child has provided us data, contact legal@librum.house and we will remove it.

14. Changes

We may update this policy; the “last updated” date shows the current version, and material changes will be noted on the Site or by email where appropriate.

15. Contact

ID and Brothers — Kajmakčalanska 4, Zvezdara, 11000 Belgrade, Serbia · legal@librum.house · +381 61 6464620