privacy-policy
Effective [[EFFECTIVE_DATE]].
We handle photographs of children. That places a higher duty on us than on an ordinary shop, and this policy is written to be specific rather than reassuring. If anything here is unclear, ask us before you order.
Who we are
[[LEGAL_ENTITY]], registered at [[REGISTERED_ADDRESS]], is responsible for the personal data described in this policy. You can reach us at [[SUPPORT_EMAIL]].
What we collect
- Account details — your name, email address and password (stored only as a cryptographic hash, never in readable form).
- Order details — delivery address, phone number, order history, and any discount or referral codes you use.
- Personalization details about your child — first name, age, gender, any dedication text you write, and optionally one photograph.
- Payment details — handled entirely by [[PAYMENT_PROVIDER]]. Card numbers never reach our servers; we store only the payment reference, the method type, and whether the payment succeeded.
- Technical data — IP address, browser type, pages visited and similar log data, used to keep the site secure and working.
Why we use it
To create your book, take payment, deliver your order, notify you about its progress, answer your questions, meet our accounting and tax obligations, and detect fraud or abuse. We use your child's photograph and details for one purpose only: producing the book you ordered.
Children's data
Children do not create accounts with us and we do not market to children. The account holder is an adult ordering on a child's behalf.
By uploading a photograph you confirm that you are the child's parent or legal guardian, or that you have their permission. We do not use children's photographs for advertising, we do not publish them, and we do not sell them — to anyone, ever.
Photographs are deleted automatically from our servers 90 days after your order is delivered. If you want your child's photograph deleted sooner, email us and we will remove it, provided your book has already been printed.
Who else sees your data
We share the minimum necessary with service providers who help us run the business:
- [[PAYMENT_PROVIDER]] — to process your payment
- Our printing partner in [[PRINT_PARTNER_COUNTRY]] — receives the book files and your delivery address
- Our shipping carriers — receive your name, address and phone number
- Our email and hosting providers — process data on our instructions to send order emails and run the site
These providers may only use your data to perform the service we hired them for. We do not sell your personal data or share it with advertisers. We may disclose data if the law requires it.
Transfers outside your country
Your data may be processed in countries other than your own, including where our printing partner and hosting providers operate. Where that happens we require contractual protections comparable to those described here.
How long we keep things
- Child photographs — deleted 90 days after delivery
- Order and invoice records — retained as long as tax and accounting law requires
- Account data — until you ask us to delete your account
- Technical logs — kept for a short period for security purposes
Your rights
You can ask us to show you the data we hold about you, correct anything wrong, delete your account and its data, or export it. You can withdraw consent for us to use a photograph at any time — though we cannot un-print a book that has already been made. Email [[SUPPORT_EMAIL]] and we will respond within 30 days.
Security
Traffic to the site is encrypted in transit. Passwords are hashed. Access to customer data and uploaded photographs is limited to the people who need it to produce and ship orders. No system is perfect, so if a breach ever affects your data we will tell you and the relevant authority promptly.
Cookies
We use cookies that are necessary for the site to function — keeping you signed in and holding your cart between pages. If we add analytics or advertising cookies, we will ask for your consent first and this policy will be updated before they are used.
Changes to this policy
If we change this policy we will update the effective date above, and we will notify account holders by email of any change that materially affects how we handle your data.
Contact
Questions, requests or complaints: [[SUPPORT_EMAIL]].