Privacy Policy

1. Data We Collect

1.1 Information You Provide Directly

• •Name and contact details (name, email address, postal address, phone number).
• •Personalisation Details: names, ages, physical descriptions, and other details about the child or characters featured in your Book.
• •Photos: photographs and images you upload for use in AI-generated illustrations.
• •Payment information: processed securely by our payment provider — we do not store your full card details.
• •Correspondence: messages, emails, or enquiries you send us.

1.2 Information Collected Automatically

• •Technical data: IP address, browser type, device type, operating system.
• •Usage data: pages visited, time spent on site, links clicked.
• •Cookies: see our Cookie Policy for details.

2. Special Category Data — Children's Photos

Our lawful basis for processing Photos is your explicit consent, given when you upload the Photo and place your order. You may withdraw consent at any time before production begins by contacting us, in which case we will delete the Photo and — if production has not yet started — cancel your order.

We do not use Photos for any purpose other than producing your Book. Photos are not shared with third parties except where strictly necessary for the production process (e.g. AI illustration tool providers, including Replicate, Inc., who provide our AI image generation infrastructure), under strict data processing agreements.

Photos are processed by our AI illustration provider (Replicate, Inc., USA) solely to generate stylised cartoon illustrations. The AI-generated illustrations are artistic renderings in a children's book style — they do not contain or reproduce the original biometric or photographic data from the uploaded Photo. The output illustrations are therefore distinct from the source Photo.

Generated illustrations are hosted on Replicate's content delivery network (CDN) and stored within our platform to display your Book. These illustration files do not contain the original Photo data. We are unable to guarantee deletion of these illustration files from Replicate's CDN within a specific timeframe, as this is governed by Replicate's own data retention policies. However, the original uploaded Photos are automatically deleted from our systems within 30 days of your order being fulfilled.

If you have concerns about the retention of generated illustrations, please contact us at hello@fabyoula.com and we will endeavour to assist.

3. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

• •Processing and fulfilling your order — lawful basis: performance of a contract.
• •Processing payment — lawful basis: performance of a contract.
• •Sending order confirmations, delivery updates, and customer service communications — lawful basis: performance of a contract.
• •Generating AI illustrations from uploaded Photos — lawful basis: explicit consent.
• •Complying with legal obligations (e.g. tax, fraud prevention) — lawful basis: legal obligation.
• •Improving our website and services — lawful basis: legitimate interests (provided this does not override your rights).
• •Sending you marketing communications (only if you have opted in) — lawful basis: consent.

4. Who We Share Your Data With

We do not sell your personal data. We may share your data with the following categories of third party, only to the extent necessary:

• •Payment processors: to securely handle transactions.
• •AI illustration tool providers: to process uploaded Photos and generate artwork. These providers are bound by data processing agreements and may not use your data for their own purposes.
• •Print and fulfilment partners: to print and deliver Physical Books.
• •Delivery and postal services: to deliver your Physical Book.
• •Email service providers: to send you transactional and marketing emails.
• •Website hosting and analytics providers: to operate and improve our website.
• •Legal and regulatory authorities: where required by law.

All third parties we work with are required to process your data securely and in accordance with UK GDPR.

5. International Data Transfers

Some of our third-party service providers (including AI illustration tools) may be based outside the UK. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK-approved Standard Contractual Clauses or transfers to countries with an adequacy decision from the UK Government, in accordance with UK GDPR Chapter V.

6. How Long We Keep Your Data

• •Order and transaction records: 7 years (to comply with HMRC tax obligations).
• •Customer correspondence: 3 years from the date of last contact.
• •Uploaded Photos: deleted within 30 days of order fulfilment.
• •Marketing preferences: until you unsubscribe or withdraw consent.
• •Website usage data: as set out in our Cookie Policy.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• •Right of access: to request a copy of the personal data we hold about you.
• •Right to rectification: to request correction of inaccurate or incomplete data.
• •Right to erasure ("right to be forgotten"): to request deletion of your data in certain circumstances.
• •Right to restrict processing: to ask us to pause processing of your data in certain circumstances.
• •Right to data portability: to receive your data in a structured, machine-readable format.
• •Right to object: to object to processing based on legitimate interests.
• •Rights in relation to automated decision-making: we do not make solely automated decisions that significantly affect you.
• •Right to withdraw consent: where processing is based on consent (including for Photos), you can withdraw at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights — including requesting a copy of the personal data we hold about you — please contact us at: hello@fabyoula.com. We will respond within one month. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure HTTPS transmission, encrypted storage, access controls, and regular security reviews. However, no internet transmission is completely secure and we cannot guarantee absolute security.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and notify affected individuals without undue delay, as required by UK GDPR.

9. Children's Privacy

Our services are directed at adults placing orders on behalf of children, not at children directly. We do not knowingly collect personal data directly from children under 13. The Photos and Personalisation Details relating to children are provided by the adult customer, who is responsible for ensuring they have the right to provide such data.

If you are a parent or guardian and believe your child's data has been collected without proper authority, please contact us immediately at hello@fabyoula.com.

10. Cookies

Our website uses cookies to improve your experience and for analytics purposes. By using our website, you consent to our use of cookies in accordance with our Cookie Policy, available at www.fabyoula.com. You can manage cookie preferences through your browser settings.

11. Marketing Communications

We will only send you marketing communications (e.g. promotions, new products) if you have given us your explicit consent to do so. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at hello@fabyoula.com. Unsubscribing from marketing will not affect transactional communications related to your orders.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available at www.fabyoula.com. Significant changes will be communicated to you by email where reasonably practicable.

13. Contact and Complaints

If you have any questions, concerns, or complaints about how we handle your data, please contact us in the first instance at: hello@fabyoula.com or England.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): www.ico.org.uk | 0303 123 1113 | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.