privacy-policy
This policy explains what tota-tota collects, why, and what you can ask us to do about it. It applies to this website and to every order placed through it. Last updated: September 2026.
We are the controller of this data. You can reach us any time at [email protected] or on WhatsApp 01035714434.
1. What we collect
Account details
Your name, email address, password (stored encrypted, never in readable form), and phone number.
Order details
What you ordered, the delivery address and phone number, the order history, and our correspondence with you about it.
Personalization details about the child
The child's first name, age, gender, and the photo you upload, plus any dedication text you write. This is the most sensitive data we hold and we treat it that way.
Payment details
Payments are processed by our payment provider (Paymob). We never receive or store your full card number or CVV. We store only what the provider returns to us: a transaction reference, the amount, the status, and the last digits or card brand shown on your receipt.
Technical data
IP address, browser and device type, pages visited, and error logs — used to keep the site working and secure.
2. Why we use it
- To create your book — the child's details and photo are used to generate the story and illustrations.
- To fulfil your order — take payment, print, ship, and let you track it.
- To talk to you — order confirmations, the preview link, status updates, and answers to your questions.
- To keep records — invoices and accounting, as required by law.
- To keep the service safe — detecting fraud, abuse, and technical faults.
- To send offers — only if you opted in. Every marketing email has an unsubscribe link, and unsubscribing never affects your orders.
3. Your child's photo — specifically
- It is used only to produce the illustrations in your book.
- It is never sold, never shared with advertisers, and never published on our site or social media without your separate, explicit permission.
- It is stored on access-restricted storage, reachable only by the systems and the few staff who need it to produce and support your order.
- It is automatically deleted 90 days after delivery of your order. After that we keep the finished book file and the order record, not the original photo.
- You can ask us to delete it sooner, once your book is produced — email us and we will confirm when it is done.
4. Who we share data with
We do not sell your data. We share the minimum necessary with service providers who work for us under contract:
| Who | What they receive |
|---|---|
| Payment provider (Paymob) | Payment and billing details, to take the payment and process refunds. |
| Courier company | Recipient name, address, and phone number, to deliver the parcel. |
| Print house | The finished book file for printing. |
| Hosting, storage and AI image providers | The data needed to run the site and generate your illustrations. |
| Email provider | Your email address and the message content, to deliver our emails. |
| Authorities | Only where we are legally required to disclose. |
5. Where the data is processed
Some of our providers process data on servers outside Egypt. Where that happens we use providers that apply recognized security and data-protection standards, and we share only what the service requires.
6. Cookies
We use cookies that are necessary for the site to work — your session, your cart, security. With your consent we also use analytics cookies to understand which pages are used, so we can improve them. You choose when the cookie banner appears and can change your mind at any time. Refusing optional cookies does not stop you ordering.
7. How long we keep things
- Child photos: deleted 90 days after delivery.
- Order and invoice records: kept as long as Egyptian tax and commercial law requires.
- Your account: kept until you ask us to delete it.
- Support messages: kept while they are useful for handling your case and any follow-up.
- Technical logs: kept for a short period, then deleted.
8. How we protect it
Traffic to the site is encrypted (HTTPS). Passwords are hashed. Access to customer data and photos is restricted to the people and systems that need it. Download links for your book are time-limited and tied to your account. No system is perfectly secure, but if a breach ever affects your data we will tell you.
9. Your rights
You can ask us to:
- Show you the personal data we hold about you.
- Correct anything that is wrong.
- Delete your data and your account (we keep only what the law requires us to keep, such as invoices).
- Stop sending you marketing, at any time.
- Withdraw consent you gave earlier, including consent for optional cookies.
Email [email protected] from the address on the account. We respond within 30 days, and normally much faster. These rights are recognized under Egypt's Personal Data Protection Law No. 151 of 2020.
10. Children
This service is sold to adults. Accounts and orders are for people aged 18 or over, and children's data reaches us only through a parent or guardian who chose to provide it. We do not knowingly let a child create an account. If you believe a child's data was submitted without the right to do so, email us and we will delete it.
11. Other websites
Our pages may link to other sites (for example a courier's tracking page). We are not responsible for their privacy practices — read their policies before giving them your data.
12. Changes to this policy
If we change this policy we update this page and the date above. Significant changes are announced by email or on the site.
13. Contact
Questions or a privacy request:
Email: [email protected]
Phone & WhatsApp: 01035714434
Hours: every day, 10:00 AM – 10:00 PM (Cairo time).