Internal FAQs you can answer upfront
Where is the file hosted? On a hardened, HTTPS endpoint with expiring links. Who has access? Recipients with the link; revocation available. What data is collected? Only the minimum necessary to deliver the book, usually email and name.
How are requests handled? Document the deletion path and the contact for privacy requests. Provide a short DPIA if needed. Keep a change log for revisions.