Privacy Policy
Last updated: September 30, 2025
1. Introduction
This Privacy Policy explains how Bookids LLC ("Bookids", "we", "us") collects, uses, shares, and protects personal data relating to children and parents when you use our services. We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
Bookids LLC, registered in Wyoming, USA.
If you are located in the EU/EEA, Bookids has appointed an EU representative pursuant to Article 27 GDPR: [Insert details once appointed].
3. Data We Collect
- Child data: first name, appearance traits (e.g., hair color), preferences, optional photo (if provided by parent).
- Parent/guardian data: name, email, billing/shipping address, payment information (processed securely by third parties).
- Technical data: cookies, IP address, device type, browser data.
4. Legal Basis for Processing
- Child data: processed only with parental/legal guardian consent (Art. 6(1)(a), Art. 8 GDPR).
- Parent data: processed as necessary to perform a contract (Art. 6(1)(b) GDPR).
- Technical data: processed based on consent for analytics/marketing or legitimate interest for security.
5. Purposes of Processing
- To create personalized storybooks.
- To process orders, payments, and deliveries.
- To provide customer support.
- To improve our services (if optional consent provided).
6. Data Sharing
We share personal data only with trusted third parties:
- Printers and publishing partners (to produce the book).
- Shipping providers (to deliver physical copies).
- Payment processors (e.g., Stripe, PayPal).
- IT and hosting providers.
These parties act under contractual agreements ensuring GDPR compliance.
7. International Transfers
Bookids may transfer data outside the EU/EEA to the United States. Such transfers rely on Standard Contractual Clauses (SCCs) or other safeguards approved by the European Commission.
8. Retention
- Child data: deleted within 30 days after order completion, unless parent requests storage for reprints.
- Parent account data: retained until account deletion or consent withdrawal.
- Transactional/legal records: retained as required by law.
9. Rights of Parents/Guardians
You have the right to:
- Access personal data.
- Rectify inaccurate data.
- Request erasure of child's data.
- Withdraw consent at any time.
- Request data portability.
- Lodge complaints with a Data Protection Authority.
10. Security
We use encryption, access control, and secure servers to protect data.
11. Contact
For privacy inquiries: privacy@bookids.io