Privacy Policy

ADORABOOK Privacy Policy For customers in the United Kingdom Last updated: March 2026 1. Introduction Adorabook is operated by Adorabook LLC, a company registered in the United States ("we", "us", "our"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website at www.myadorabook.com (the "Site") and purchase our personalised, AI-illustrated children's books ("Products"). We process your personal data in accordance with UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. For the purposes of UK data protection law, the data controller is Adorabook LLC. Our contact email is hi@myadorabook.com. This Privacy Policy should be read alongside our Terms and Conditions, which govern your use of the Site and purchase of Products.

2. What Data We Collect 2.1 Information you provide to us When you place an order or interact with the Site, we may collect the following personal data directly from you: Name and email address (provided during the order process). Child's name, age, and gender (used to personalise the book). Child's photograph (used by our AI systems to generate illustrated depictions of the child). Author name and dedication text (included in the printed book). Payment information (processed by our third-party payment provider, Stripe — we do not store your full payment card details). Communications you send to us (e.g., customer support emails). 2.2 Information we collect automatically When you visit the Site, we may automatically collect: Device and browser information (e.g., device type, operating system, browser type and version). IP address and approximate location (country/region level). Pages visited, time spent on pages, and navigation paths. Referral source (how you arrived at the Site). Cookie and tracking data (see Section 9 below). 2.3 Special category data Photographs of children may constitute biometric data or otherwise reveal racial or ethnic origin. We process such data solely for the purpose of generating the personalised book illustrations. The legal basis for this processing is your explicit consent, which you provide when you upload the photograph and place your order (Article 9(2)(a) UK GDPR).

3. How and Why We Use Your Data We use your personal data for the following purposes, relying on the legal bases indicated: To fulfil your order — including generating the personalised book using AI, printing, and delivering it to you. Legal basis: performance of a contract (Article 6(1)(b) UK GDPR). To process your payment. Legal basis: performance of a contract. To communicate with you about your order (e.g., order confirmation, delivery updates, customer support). Legal basis: performance of a contract. To send you marketing communications (e.g., promotional emails, discount codes, holiday offers). Legal basis: consent (Article 6(1)(a) UK GDPR). You can withdraw your consent at any time by clicking "unsubscribe" in any marketing email or by contacting us. To improve the Site and our Products (e.g., analysing usage patterns, troubleshooting issues). Legal basis: legitimate interests (Article 6(1)(f) UK GDPR) — our legitimate interest in improving our services. To detect and prevent fraud or other illegal activity. Legal basis: legitimate interests — our legitimate interest in protecting our business and customers. To comply with legal obligations (e.g., tax, accounting, regulatory requirements). Legal basis: legal obligation (Article 6(1)(c) UK GDPR).

4. Children's Data Our Products are designed for children, but the Site is intended for use by adults (aged 18 and over) who are purchasing on behalf of a child. We do not knowingly collect personal data directly from children. The personal data we collect about children (name, age, gender, and photograph) is provided by the ordering adult, who must be the child's parent or legal guardian, or have obtained the parent's or guardian's express consent. This data is used solely for the purpose of creating the personalised book. We retain children's personal data only for as long as necessary to fulfil the order and provide customer support (see Section 10). We do not use children's photographs for marketing purposes or to train AI models without separate express consent. 5. AI Processing of Photographs We use artificial intelligence ("AI") technology, including third-party AI providers, to process the child's photograph and generate illustrated depictions of the child as the main character in the book. You should be aware that: The photograph is transmitted to our AI processing partners for the purpose of generating the illustrations. The AI-generated illustrations are artistic interpretations and may not be an exact likeness. We do not permit our AI providers to use your uploaded photographs to train or improve their general-purpose AI models. We use commercially reasonable efforts to ensure that our AI providers maintain appropriate data security measures. By uploading a photograph and placing your order, you provide explicit consent to this processing (Article 9(2)(a) UK GDPR).

9. Cookies and Similar Technologies Cookies are small data files placed on your device when you visit the Site. We use cookies and similar technologies for the following purposes: 9.1 Strictly necessary cookies These are essential for the Site to function (e.g., session management, shopping cart). You cannot opt out of these cookies. 9.2 Analytics cookies We use Amplitude to collect information about how you interact with the Site. This helps us understand usage patterns and improve the Site. Amplitude processes data in accordance with its Trust & Security Terms: https://amplitude.com/trust 9.3 Marketing and advertising cookies We use Meta (Facebook), TikTok, and Google pixel tags and cookies to deliver relevant advertising to you and to measure the effectiveness of our advertising campaigns. 9.4 Managing cookies When you first visit the Site, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. You can change your cookie preferences at any time by clicking "Cookie Preferences" in the Site footer. Most web browsers also allow you to control cookies through their settings. If you disable certain cookies, some features of the Site may not function properly. You may also opt out of advertising tracking technologies by visiting: www.networkadvertising.org/choices or www.aboutads.info/choices

6. Who We Share Your Data With We do not sell your personal data. We may share your personal data with the following categories of recipients: AI processing providers — to generate the illustrated book content from the uploaded photograph. Payment processors (Stripe) — to process your payment securely. Printing and fulfilment partners — to print and deliver your book. For UK orders, we use a local print-on-demand partner. Analytics providers (Amplitude) — to help us understand Site usage and improve our services. Advertising platforms (Meta, TikTok, Google) — to deliver and measure advertising (subject to your cookie preferences). Email marketing providers (Klaviyo) — to send you marketing communications (where you have consented). Customer support tools (Freshdesk) — to manage customer support enquiries. Cloud hosting and infrastructure providers — to host and operate the Site and our services. Professional advisers — including lawyers, auditors, and insurers, where necessary. Law enforcement or regulatory bodies — where we are required to do so by law or to protect our rights. We require all third-party service providers to process your data only on our instructions and to maintain appropriate security measures.

7. International Data Transfers Adorabook LLC is based in the United States. When you use our Site and place an order, your personal data (including the child's photograph) will be transferred to and processed in the United States and potentially other countries where our service providers operate. Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place as required by UK data protection law. These may include: Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO) or the European Commission, as applicable under the UK GDPR. Transfers to countries that have received an adequacy decision from the UK Secretary of State. We have implemented the UK International Data Transfer Addendum (IDTA) where applicable to ensure that your data is protected to the standard required by UK law. If you would like more information about the safeguards we use, please contact us at hi@myadorabook.com.

10. Data Retention We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected: Order and transaction data: retained for up to 6 years after the date of your order, as required for tax, accounting, and legal purposes. Child's photograph: retained for up to 12 months after your order is fulfilled, to allow for customer support, reprints, or replacements. After this period, the photograph is deleted from our active systems. Marketing data: retained until you withdraw your consent or unsubscribe, after which we will suppress your contact details to ensure we do not contact you again. Analytics data: retained in anonymised or aggregated form and is not subject to a specific retention period. We may retain certain data for longer periods where required by law or to establish, exercise, or defend legal claims. 11. Data Security We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include: Encryption of data in transit (TLS/SSL). Secure storage of data with access controls. Regular review of our security practices. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. 12. Marketing Communications Where you have consented to receive marketing communications, we may send you emails about new products, special offers, and other information we think you may find interesting. You can opt out of marketing communications at any time by: Clicking the "unsubscribe" link in any marketing email. Contacting us at hi@myadorabook.com. Opting out of marketing will not affect communications related to your order (e.g., order confirmations, delivery updates). 13. Changes to This Policy We may update this Privacy Policy from time to time. We will post any changes on the Site with an updated "Last updated" date. We encourage you to review this page periodically. If we make material changes that affect how we process your personal data, we will notify you by email (where we have your email address) or by a prominent notice on the Site before the changes take effect. 14. Contact Us If you have any questions about this Privacy Policy or how we process your personal data, please contact us: Email: hi@myadorabook.com Entity: Adorabook LLC You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: Website: https://ico.org.uk Telephone: 0303 123 1113 © 2026 Adorabook LLC. All rights reserved.

8. Your Rights Under UK GDPR Under UK data protection law, you have the following rights in relation to your personal data: Right of access — You have the right to request a copy of the personal data we hold about you. Right to rectification — You have the right to request that we correct any inaccurate or incomplete personal data. Right to erasure ("right to be forgotten") — You have the right to request that we delete your personal data, subject to certain legal exceptions. Right to restrict processing — You have the right to request that we restrict the processing of your personal data in certain circumstances. Right to data portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller. Right to object — You have the right to object to our processing of your personal data where we are relying on legitimate interests as our legal basis. Right to withdraw consent — Where we rely on your consent to process your personal data (e.g., for marketing communications or processing the child's photograph), you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Rights related to automated decision-making — You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal or similarly significant effects. We do not currently make decisions of this nature. To exercise any of these rights, please contact us at hi@myadorabook.com. We will respond to your request within one month of receiving it. In some cases, we may need to verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): Website: https://ico.org.uk Telephone: 0303 123 1113