Privacy Policy
Last updated: June 2026
Tinytale makes personalised storybooks for children. To do that, you trust us with some of the most personal information there is — your child's name and photo. This page explains exactly what we collect, why, and what happens to it. The short version: we collect only what the book needs, we never sell or share it for marketing, and your child's photo is permanently deleted within 30 days.
Who we are
Tinytale is the data controller for the information described in this policy. You can reach us any time at hello@tinytale.co.uk.
What we collect, and why
- Your child's first name, age and the story details you choose — used solely to write and illustrate their book.
- One photo of your child — used solely to create their illustrated character. See Photo safety for full detail.
- Your name and email address — used to send order confirmations and progress updates. We don't add you to marketing lists without your consent.
- Delivery address and payment details — collected directly and securely by our payment provider, Stripe. We never see or store your card details.
The photo you upload
- It is transferred over an encrypted connection and stored securely.
- It is used once — to create your child's illustrated character.
- It is permanently deleted from our systems within 30 days of your order completing.
- It is never sold, never shared with advertisers, and never used to train AI models.
- You can request immediate deletion at any time by emailing hello@tinytale.co.uk.
Who we share data with
Only the processors needed to make and deliver your book, under contract and only for that purpose:
- Stripe — payment processing and delivery address collection.
- Our print partner — receives the finished book file and your delivery address to print and post your order.
- Our email provider — sends your order updates.
We never sell personal data. We never share your child's photo or name with anyone outside of making your book.
How long we keep things
- Photos: deleted within 30 days of order completion.
- Order details (names, story choices, dedication): kept while your order is active and for a reasonable period afterwards for reprints, replacements and legal record-keeping.
- Email and billing records: kept as required by UK tax law.
Your rights
Under UK GDPR you can ask us to access, correct, delete or export the personal data we hold about you and your child, or object to how we use it. Email hello@tinytale.co.uk and we'll respond within one month (usually much faster). If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.
Children's data
Tinytale is a service for parents and guardians — we only ever collect a child's details from the adult placing the order, and only the minimum needed to make their book.
Cookies & analytics
The site uses your browser's local storage to remember your book-in-progress (your child's name and your discount code) on your own device. We don't use advertising cookies or cross-site trackers.