Privacy policy.

02What we collect.

What you give us

We only ask for what we need to do the thing you came for:

• your name and email address, when you sign up for a free guide, a waitlist or our emails
• the billing details Stripe asks for at checkout, such as your name, email, phone number and country, when you buy something
• your name and postal address, collected by Stripe at checkout, when you order something we post. It goes on the envelope, so the postal service sees it too
• anything you send us so that we can make a product for you, such as a photo or a child's drawing
• your name, your email address, your message and, if you choose to add one, a phone number, when you write to us through the contact form

What arrives on its own

The site is served by Cloudflare. Like any host, it processes technical details such as your IP address, browser and device type so that pages load and the site stays secure.

Analytics is different: it stays off until you say yes. If you choose Accept on the cookie notice, PostHog records which pages are visited and roughly which part of the world visitors are in. If you choose Decline, it never loads.

What we never see

Your full card number. Card details go directly to Stripe. We receive confirmation of the payment and limited details such as the card type and its last four digits.

03How we use it.

• to send the guide, pages or updates you signed up for
• to take payment, deliver what you bought and send your receipt
• to make the product you ordered, when it is made from something you sent us
• to reply when you write to us
• to tell you about new things we have made, if you are on our email list
• to see, in aggregate and only with your consent, which pages are useful

We use your information for these purposes and no others. It is never sold, and it is never handed to anyone else for their own marketing.

[Legal basis for each use, if the governing law requires one to be stated.]

04Who else handles it.

Five outside services sit behind this site. Each one receives only the information its task requires:

• Stripe takes payments and keeps the card details
• Resend delivers our emails, so it holds your name and email address, it carries a contact-form message to our inbox, and it carries your order and postal details to our orders inbox
• Telegram delivers a private alert to us when an order or a contact-form message comes in, and the alert carries the details you entered
• PostHog provides analytics, and only if you accepted it
• Cloudflare hosts the site, stores our order records, including your name and postal address, and protects the site from abuse

[Any AI or print services used to make personalised products, to be listed here before launch.]

These companies may store and process data in countries other than yours. [Where data is stored, and the safeguards that apply to international transfers.]

We may also disclose information when the law requires it. If the studio is ever sold or reorganised, your information would pass to the new owner under this same policy.

05Emails, and leaving.

When you give us your email address we use it to send what you asked for and, from then on, our occasional emails. Each one has an unsubscribe link at the bottom, and it works straight away.

Unsubscribing stops the newsletter. It does not stop messages you need, such as a receipt or the delivery of something you bought.

[Confirm the sign-up consent wording against the governing law.]

06Cookies and analytics.

The site works without analytics. We keep one small item in your browser's storage to remember whether you accepted or declined, so that we do not ask on every visit.

If you accept, PostHog sets its own cookies to tell one visit from another. To change your mind, use Cookie settings at the foot of any page.

When you pay, Stripe's checkout page may set cookies of its own to prevent fraud. Those are covered by Stripe's privacy policy.

07Pictures you send us.

Some of what we make starts with a picture from you, and pictures of children deserve particular care. Please send only pictures you have the right to share.

[How uploaded photos and drawings are processed, where they are stored, which services see them and when they are deleted, to be completed before launch.]

08How long we keep it.

We keep your sign-up details until you unsubscribe or ask us to remove them. We keep messages sent through the contact form until you ask us to remove them. We keep order records for as long as tax and accounting rules require: [retention period].

[Retention period for uploaded pictures and for support emails.]

09Your choices.

You can ask what we hold about you, ask us to correct it, or ask us to delete it. Write to us through the contact form and we will deal with it.

Depending on where you live, the law may give you further rights, such as objecting to a particular use of your data or complaining to a regulator. [The specific rights and the relevant regulator, per the governing law.]

If you have placed an order, the order record itself has to stay for the period described above, even when everything else is removed.

10About children.

What we make is for families, but this website is for the adults in them. Orders and sign-ups are meant to come from a parent or guardian, and we do not knowingly collect personal information directly from children [under the age set by the governing law].

If you believe a child has given us their details, let us know and we will remove them.

11How it is protected.

Payments and stored data sit with the providers named above, which specialise in keeping them secure, and access to our own accounts is limited and protected. No online service can promise perfect security, and we will not pretend otherwise.

12Changes to this policy.

We will revise this page as the studio changes, and update the date under the title each time. Changes that affect how we use information you have already given us will also be announced by email.

13Questions, or a request?

Write to us through the contact form.