Privacy Policy

Last updated: August 17, 2025

We, PictureToStory (trading name of PictureToStory Ltd), located in the United Kingdom, (hereinafter "we", "us" or "our"), highly value your privacy and handle your personal data with care. This privacy policy is intended to inform you about what data we collect when you use our website https://picturetostory.com/ (hereinafter: "the Website"), place an order, or otherwise contact us. We explain how we use this data, how it is stored, with whom it may be shared, and what rights you have regarding your data. By using our Website, you agree to the terms of this privacy policy.

1. Personal Data Collected

1.1 Data you provide directly to us

• Contact and Account Details: Your name, email address, password (encrypted) when you create an account.
• Order Details: Address details (billing and shipping address) for the shipment of physical books.
• Personalisation Data for the book: The name(s) for the book, chosen story steps, and any other textual input you provide for personalising the product.
• Uploaded images: Photos you upload to personalise the illustrations in the children's books. These are used by our AI systems to generate the characters.
• Communication Data: Data you provide when you contact us via email or other communication channels.
• Payment Details: These are not stored directly by us but processed by our external payment provider Mollie B.V. We only receive a confirmation of payment.

1.2 Data collected automatically

When you visit our Website, we may automatically collect certain data via cookies and similar tracking technologies:

• Technical data: IP address, browser type and operating system, device information.
• Usage data: Pages visited, click behaviour, the duration of your visit, and interactions on the Website.

2. Purposes of Data Processing

We process your personal data exclusively for the following purposes:

• Creating and managing your account.
• Processing, producing, and handling your orders.
• Generating personalised children's books using AI technology, based on the personalisation data and uploaded images you provide.
• Communicating with you about your order, answering your questions, or providing customer service.
• Sending service-oriented emails (e.g., order confirmations).
• Improving our products, services, and the functionality of our Website.
• Complying with legal obligations, such as tax retention obligations.
• Preventing fraud and misuse of our services.

3. Legal Bases for Processing

We process your personal data based on the following legal grounds (UK GDPR):

• Performance of the contract: For processing your order, delivering the products, and managing your account.
• Consent: For the use of the photos you upload and specific personalisation data for creating the children's books. You have the right to withdraw this consent at any time.
• Legal obligation: For complying with our administrative and fiscal obligations.
• Legitimate interest: For improving our services, website analysis, and fraud prevention.

4. Data Retention

We apply the following retention periods:

• Account data: As long as your account is active, or until you request deletion.
• Order data: Minimum 7 years, in accordance with UK tax obligations.
• Uploaded photos: Maximum 3 months after book creation, then automatically deleted.
• Communication data: Up to 2 years after handling.

5. Data Security

We take appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, and unauthorised modification. This includes encryption (SSL/TLS) for data transmission, secure servers, access control, and regular security updates.

6. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request an overview of the personal data we process about you.
• Right to rectification: Have incorrect or incomplete data corrected.
• Right to erasure: Have your personal data deleted (subject to legal obligations).
• Right to restriction: Temporarily restrict the processing of your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.

7. Cookies

We use cookies and similar technologies to analyse website use and improve functionality. You can manage your cookie preferences through your browser settings.

8. Changes to Privacy Policy

We reserve the right to change this privacy policy. Changes will be published on our Website with the date of the last revision.

9. Contact Details

If you have questions about this privacy policy or wish to exercise your rights, you can contact us via email: hello@picturetostory.com