Privacy Policy

This Privacy Policy explains how Storaby Ltd (“we”, “us”, “our”) collects, uses, and protects personal information when you visit our website or order a personalised storybook.

1. Who We Are

Storaby Ltd is a UK company registered in England and Wales. Company Registration Number: 17278743.

We create personalised children’s storybooks. Our registered address is available on request.

ICO Registration Number: [TO BE ADDED — applied 6 August 2026]

For all privacy questions, contact us at: hello@storaby.com

2. Information We Collect

Depending on how you use our services, we may collect:

• Account and order details — name, email address, billing and delivery address, and payment confirmation. Payment card details are processed directly by our payment provider (Stripe) and are never seen or stored by us.
• Personalisation data — your child’s name, age or age range, and photos you upload so we can create illustrations for your book.
• Communications — messages you send via our contact form, help chatbot, or email.
• Technical data — IP address, browser type, device information, and pages visited, including via cookies or similar technologies.

3. How We Use Your Information

We use personal information to:

• Create, print, and deliver your personalised storybook — legal basis: performance of a contract
• Process payments and prevent fraud — legal basis: legitimate interests and legal obligation
• Respond to enquiries and provide customer support — legal basis: legitimate interests
• Improve our website, products, and services — legal basis: legitimate interests
• Send order updates and, where you have given permission, marketing messages — legal basis: consent
• Meet legal and regulatory obligations — legal basis: legal obligation

4. Photos and Children’s Data

Photos and details about children are used only to create your personalised storybook. We treat this information with the utmost care.

Uploaded photographs are permanently deleted from our systems immediately after your book has been produced and dispatched. We do not retain child photos beyond this point, except in the case of a genuine legal dispute or chargeback where we may be required to retain records for a limited period.

We confirm that:

• Children’s photographs are never used to train AI models
• Children’s photographs are never shared with any third party beyond what is strictly necessary to print your book
• Our print partner receives only the final PDF of your completed book — not the original uploaded photograph
• No personal data about children is used for any purpose other than creating your order

By placing an order, you confirm that you have authority to provide any photo or personal details used, and that you are the parent or guardian of the child featured.

5. Sharing Your Information

We may share information with trusted service providers who help us operate our business, including:

• Our UK print partner — who receives only the final PDF of your book and your delivery address
• Stripe — our payment processor, who handles all card data under PCI DSS compliance
• Hosting and infrastructure providers
• Email and customer support tools

All service providers are permitted to use your information only to perform services on our behalf. We do not sell your personal information to any third party.

6. International Transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we take steps to ensure appropriate safeguards are in place in accordance with UK GDPR, such as using providers covered by adequacy decisions or standard contractual clauses.

7. Retention

We retain order and account records for as long as necessary for the purposes described in this policy, including tax, accounting, and legal requirements. This is typically 6 years in line with UK law.

Photographs used for personalisation are permanently deleted immediately after your book has been produced and dispatched, as described in section 4 above.

8. Cookies

Our site uses cookies in the following categories:

• Essential cookies — required for the site to function, including session management and security. These cannot be disabled.
• Analytics cookies — help us understand how visitors use our site so we can improve it. These are only placed with your consent.
• Preference cookies — remember your settings and choices. These are only placed with your consent.

You can control non-essential cookies through our cookie banner when you first visit the site, or at any time through your browser settings.

9. Your Rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Restrict how we use your information
• Object to certain types of processing
• Request a copy of your information in a portable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at hello@storaby.com. We will respond within 30 days.

If you are unhappy with how we handle your personal information, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Marketing

We will only send you marketing communications where you have given your explicit consent to receive them. You can withdraw consent and unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by emailing hello@storaby.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this policy will be updated when we make changes. We will notify you of any significant changes by email where appropriate.

12. Contact

For any questions about this Privacy Policy or how we handle your personal data:

• Email: hello@storaby.com
• Company: Storaby Ltd
• Company Registration: 17278743
• Registered in England and Wales