Your privacy at Happily Drawn

Happily Drawn is the trading name of [Company name: added on 2 Nov], registered in [England and Wales: confirmed on 2 Nov] (company number [Company number: added on 2 Nov]). Registered office: [Registered office: added on 2 Nov]. We are registered with the UK Information Commissioner’s Office (registration [ICO registration number: added once the fee is paid]).

We are the “controller” of your personal data: we decide how it’s used. Questions, requests or complaints: hello@happilydrawn.com (please put “Privacy” in the subject), phone [Phone number: added by 4 Nov], or write to us at the address above. [Founder's full name: added by 4 Nov] is our privacy contact and, for Canada, our privacy officer.

About you, when you order or try a preview

• Your name, email address and delivery address, and a phone number if you give one for the courier.
• What you order, what you pay, and your order history. Stripe handles your card details; we never see your full card number.
• What you tell us: cover titles, dedications and card messages.
• Messages you send us, and any photos you attach.
• The choices you make with us: the boxes you tick, cookie choices, and email preferences.

About the people in your photos

• Photos of the people (and pets) you want drawn. Often these are children or grandchildren, and sometimes people who have died.
• Names.

When you visit our website

• Your rough location (country, and US state or Canadian province) from your internet address. We use it to show prices and delivery dates, and because we can’t yet make photo gifts for Illinois or Quebec.
• Technical details our host and security tools need: internet address, browser and device, error reports.
• Our visitor statistics don’t use cookies. Only if you click “Accept all” do we use Meta’s tools to measure our adverts (section 8).

If you join a waiting list: your email address, your country, and when and how you agreed.

We don’t collect surnames, birthdays, schools or any other detail we don’t need. We remove location data from photos before they’re uploaded.

• Colouring book: Google’s image AI (Gemini) turns each photo into a line drawing.
• A person checks every order before it’s made or sent: [Founder's first name: added by 4 Nov] looks at every page.
• You approve it first. Nothing is printed or made until you approve your proof, apart from books that are approved automatically 24 hours after we send the proof, as explained at checkout.
• No face recognition. We never create face templates or “faceprints”, and we never use AI to identify anyone.
• No automated decisions with legal or similarly significant effects are made about you.
• AI training. We never use your photos or stories to train AI, and neither do our partners, with one exception. Google keeps what we send for up to 55 days to check for misuse of its AI. Authorised Google staff may review it, and Google may use it only to improve the systems it uses to spot misuse. Google doesn’t use it to train its AI models otherwise. We’ve switched off every other Google storage option.

UK data protection law requires us to have a legal reason for each use.

Many of our gifts are for and about children. We treat their photos with special care:

• You confirm that you’re 18 or over and that you’re the person pictured, their parent or guardian, or have their permission. In the US you confirm you have written permission (a text or email is fine), and that no one pictured lives in Illinois.
• We use the photos only for your order, keep them for as short a time as possible (section 7), and never put a child’s photo or likeness in an advert, on our website or on social media without the parent’s or guardian’s written consent.
• We don’t sell to children, and our website isn’t for children.

If you’re in a photo, or you’re the parent of a child in one, we usually can’t tell you directly: we don’t have your details. Please contact us at hello@happilydrawn.com if you’d like to know whether we hold your photo, or want us to stop and delete it. We’ll do it the same working day. When you order, please let the people pictured know.

We share only what each company needs to do its job for us. Each one has signed up, through its standard terms, to protect it and use it only on our instructions.

We also share data with couriers (through the printers), our professional advisers if we need them, and authorities where the law requires it. If the business is ever sold, the buyer would take on these promises.

We never sell your personal information. We don’t share it for targeted advertising, except through Meta’s tools if you click “Accept all”.

You can delete your photos at any time with the “Delete my photos now” link in your order emails, or by emailing us. Once they’re deleted we can’t remake from them.

We use only the cookies the site needs to work: remembering your country, your draft and your cookie choice, plus security checks. Our visitor statistics don’t use cookies. If you click “Accept all”, we also use Meta’s pixel and Conversions API to see which adverts lead to orders. “Reject all” is just as easy, and you can change your mind at any time in “Cookie settings” at the bottom of every page. Details: [the cookie notice at /legal/cookies, published with the cookie banner].

Some of our partners are outside the UK, mainly in the USA.

• USA: we rely on the UK–US “data bridge” where the company is certified to it, or on the UK’s approved contract clauses.
• Gelato (Norway): Norway is in the European Economic Area, which the UK recognises as protecting data properly.

You can ask us for a copy of the safeguards we use.

You have the right to:

• see the personal data we hold about you (and get a copy);
• correct it if it’s wrong;
• delete it (“Delete my photos now”, or email us);
• object to our using it, including as someone pictured in a photo;
• restrict how we use it while a question is sorted out;
• take it with you in a common format;
• withdraw consent at any time, where we rely on it (emails and cookies);
• complain.

Email hello@happilydrawn.com. We’ll reply within one month, usually much sooner, and it’s free. We may need to check who you are first.

Complaints.

1. Please tell us first. We’ll acknowledge your complaint within 30 days and do our best to put it right.
2. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), or to your own country’s regulator (sections 11–14).

• What we collect: identifiers (name, email, address, internet address); commercial information (orders); photos you upload; approximate location; internet activity on our site. It comes from you and your device, and is used as described in sections 2–4.
• Biometric information. We do not collect biometric identifiers or biometric information. We don’t create face scans, face geometry, templates or “faceprints”, and we don’t use photos to identify anyone. Photos are used only to draw the people in them for your order, and are deleted at most 30 days after delivery (7 days if you don’t order). We can’t make photo gifts of people who live in Illinois, and we ask you to confirm that no one pictured does.
• Selling and sharing. We don’t sell personal information. If you click “Accept all”, Meta’s tools measure our ads, which some state laws call “sharing” for targeted advertising. To opt out, click “Reject all” or use “Your privacy choices” at the bottom of every page. We treat a Global Privacy Control signal as an opt-out.
• Children. Our site isn’t for children under 13 (or under 18), and we don’t knowingly collect information from them. Adults send us photos of children to make gifts. If we learn a child has given us information, we’ll delete it.
• Your state’s rights. Depending on your state, you may have the right to know, access, correct, delete and opt out, and to appeal a refusal by replying to our answer. We won’t treat you differently for using them. Email hello@happilydrawn.com with “Privacy” in the subject.

We follow Canada’s federal privacy law (PIPEDA). By uploading photos you confirm that you have the authority to share them. Our privacy officer is [Founder's full name: added by 4 Nov] (hello@happilydrawn.com). Your data is processed outside Canada (section 9), where the law of that country may let its authorities access it. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). We can’t yet deliver to Quebec.

We handle personal information in line with the Australian Privacy Principles. Your information is disclosed to the overseas recipients in section 6, mainly in the UK, the USA and Norway. You can ask to see or correct your information by emailing us. If you’re not happy with our reply, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

We follow New Zealand’s Privacy Act 2020. When you send us photos or details of other people, please tell them, because we can’t. You can ask to see or correct your information by emailing us. You can complain to the Office of the Privacy Commissioner (privacy.org.nz). Your information is stored and processed outside New Zealand, as described in sections 6 and 9.

• Photos are kept in private storage.
• Links to them expire after 15 minutes.
• Only [Founder's first name: added by 4 Nov] can sign in to our order system.
• Every account we use is protected with two-step sign-in.
• If something ever goes wrong, we’ll tell you and the regulator as the law requires.

If we change this notice, we’ll update the date at the top. For important changes, such as a new partner that receives photos, we’ll tell you by email before it applies to your order.