Customisable Books Privacy

How We Use Your Data

We only collect and use personal data that is strictly necessary to create and deliver your custom book. We do not use customer data or uploaded photos for any other purpose.

What Data We Collect

When you place an order, we may collect:

  • Your name and contact details

  • Delivery and billing address

  • Order details

  • Photos you upload for inclusion in your book

We do not collect unnecessary data. Our service is intended for adults. We do not knowingly collect personal data directly from children.

How Uploaded Photos Are Used

Photos you upload are used only to create your personalised book.

Specifically:

  • Photos are uploaded via our Shopify-hosted website and securely stored on Shopify’s infrastructure, where they are associated with your order

  • Photos are sent securely to OpenAI via their API to generate custom illustrations based on your order, in accordance with OpenAI’s API data processing terms

  • Photos and generated images are stored temporarily in Amazon Web Services (AWS S3) so they can be processed and sent for printing

  • Files are shared with our professional printing partner only for the purpose of printing your book

Your photos are never:

  • Used for marketing

  • Used to train AI models

  • Shared with third parties for advertising or analytics

  • Sold or reused in any form

Payments and Website Hosting

Our website and checkout are hosted by Shopify, who securely process payments and manage orders on our behalf.

We do not store or have access to your full payment card details at any time.

Legal Basis for Processing

Under UK GDPR, we process your data based on:

  • Contractual necessity – to create, print, and deliver your personalised book

We do not process personal data for optional, unrelated, or secondary purposes.

Data Retention

  • Uploaded photos and generated images are kept only for as long as needed to produce, print, and deliver your order

  • After this period, files are securely deleted

  • Order records are retained only as required for legal and accounting purposes

Your Rights

Under UK GDPR, you have the right to:

  • Request access to your personal data

  • Request correction or deletion of your data

  • Object to or restrict processing

  • Request data portability

To exercise any of these rights, contact us at: benji@benjibarkley.com

Data Security

We take data security seriously and use:

  • Encrypted connections

  • Secure cloud storage

  • Trusted, GDPR-compliant service providers

Access to customer data is limited strictly to what is required to fulfil orders.

Summary

Your photos and personal data are used once, for one purpose only, and never reused.

If you have any further questions, please contact us and we will be happy to help.