Privacy Policy

Last updated: October 7, 2026

Canary Books ("we," "us") is an independent bookstore in Fayetteville, West Virginia. This policy explains what information our website (canarybooksnrg.com), our in-store self-checkout kiosk, and our social media tools collect, how we use it, and who we share it with. Questions: chris@canarybookswv.com.

What we collect

When you check out (in store or self-checkout)

The items in your cart, totals, tax, any round-up donation, and payment status.
Card payments are processed by Square. We never see or store your full card number. We keep Square's order and payment reference numbers.
If you enter a phone number or email to use store credit, we store a scrambled (hashed) version with the checkout record, not the plain text.
The self-checkout kiosk has a camera. It may take a photo at checkout or when help is requested, to prevent theft and resolve problems. These photos are deleted automatically after a set number of days.

Customer and store credit records

If you have a store credit account (for example, from a trade-in): your name, phone number, and/or email, your credit balance, and a history of credits added and used.
To spend credit at the kiosk, we text a one-time code to your phone. We store only a scrambled version of the code, and it expires after 10 minutes.

Holds, pickups and special orders

Your name, email, phone number, the book you asked for, and any note you include. We also record the internet (IP) address the request came from, to prevent spam.

Monthly book subscription

Interest/waitlist form: your name, email, phone, city, state, ZIP, pickup preference, notes, and whether you agreed to marketing messages.
Members: name, email, phone, plan, start date, pickup status, and Square subscription/payment references. Billing is handled by Square.

Newsletter

Your email address and where you signed up. Every email includes an unsubscribe link, and we keep a list of unsubscribed addresses so we don't email them again.

Gift cards

Gift card amount, status, and the last 4 digits of the card number. Gift cards are issued and managed by Square.

QR code visits

When someone scans one of our QR codes (for example, the Imagination Library sign), we record the time, the page that referred them, and their browser type.

Our Facebook and Instagram integration

We use a Meta (Facebook/Instagram) developer app only to publish posts to our own Canary Books Facebook Page and Instagram account (for example, new arrivals and monthly donation updates).

The app uses access keys for our own business accounts. These are stored securely on our server and are renewed automatically.
We store the posts we create: caption, hashtags, images, scheduled time, and the post ID/result Meta returns.
We do not use this integration to collect, read, or store information about other Facebook or Instagram users, such as your profile, followers, messages, likes, or comments.
We do not use "Log in with Facebook," and we do not run Meta tracking pixels on our website.

How we use information

To complete sales, issue and apply store credit, and process gift cards.
To hold books, tell you when an order or pickup is ready, and run the monthly subscription.
To send our newsletter if you signed up.
To prevent theft, fraud, and spam.
For our own bookkeeping, taxes, and inventory.

We do not sell your personal information, and we do not use it for advertising.

Who we share it with

We share information only with the services that help us run the shop:

Square: payments, orders, subscriptions, gift cards, and customer records.
ClickSend: sending text messages (verification codes and pickup notices).
Resend: sending emails.
Lovable / Lovable Cloud: hosts our website and database.
Meta: only the posts we publish to our own Page and Instagram account.

We may also share information if the law requires it.

How long we keep it

Kiosk camera photos are deleted automatically after a set period.
Store credit codes expire after 10 minutes.
Other records, like sales, customer, and subscription records, are kept as long as we need them to run the shop and for tax and bookkeeping. We have not set a fixed deletion schedule for these. You can ask us to delete your information at any time (see below).

Your choices

Unsubscribe from emails using the link in any email.
Ask for a copy, a correction, or deletion of your information by emailing chris@canarybookswv.com. We may need to keep some sales records for tax law.
For Facebook/Instagram-related data, see our Data Deletion page.

Children

Our website and services are not directed to children under 13, and we do not knowingly collect their personal information.

Changes

If we change this policy, we'll update the date at the top of this page.

Contact

Canary Books, Fayetteville, WV. Email: chris@canarybookswv.com