YOUR STORY BEGINS

Privacy Policy

Last updated: 31 August 2026

1. Who we are

Your Story Begins is operated by Marlon Cannon, a sole trader trading as Your Story Begins. For UK data-protection purposes, Marlon Cannon is the data controller. For business correspondence, data-protection questions or rights requests, email hello@yourstorybegins.shop.

2. Information we collect

Our order form asks for the adult customer's name and email, the intended audience and age group, selected package, written main-character details, story idea and optional occasion. Customers may optionally upload reference photos to guide the illustrated appearance of up to four main characters. Stripe collects the payment through its secure checkout. For printed products, we confirm the delivery address directly with the customer by email after payment.

3. Website analytics and cookie choices

We use first-party, cookie-free analytics to count page views and understand which public pages and purchasing steps are useful. We store the time and date, public page path, referrer hostname, country, device category and anonymous funnel events such as viewing the creation page, selecting a package or reaching secure checkout. Funnel events do not include names, email addresses, story ideas or payment details. To estimate visits, daily visitors and active engagement, the server briefly processes the connection address and coarse device category to create a non-reversible anonymous code using a secret HMAC. The code rotates every day, cannot be used for cross-site or long-term tracking and is retained for no more than 31 days before its counts are aggregated and the code is removed. Engaged time counts only while a public page is visible and activity has occurred within 60 seconds; the browser sends small same-site increments without storing an identifier. The server validates and deduplicates those increments using non-reversible delivery codes retained for no more than two days. We do not store the raw IP address or full user-agent string.

With your consent, we also use Google Analytics 4 to understand how visitors find and use the website. Google Analytics may set cookies such as _ga and _ga_* and process information including pages viewed, approximate location, device/browser details, referral source and interactions such as clicks and scrolling. Advertising storage and ad personalisation are disabled. We do not intentionally send Google names, email addresses, story ideas, uploaded photos or payment details. Google may process analytics information outside the United Kingdom under its applicable data-protection safeguards. Google Analytics does not load until you select “Accept analytics”. Your choice is stored on your device so the website can remember it, and you can change it at any time using “Cookie choices” in the website footer.

4. Children's information

Orders must be submitted by an adult. Where a story concerns a child, the person submitting it must be the parent or guardian or have authority to provide the information. We follow the additional protections required for children's information under the UK GDPR and Data Protection Act 2018. Please share only the minimum details needed to describe the story.

5. Why we use information

We use order information and any optional reference photos because they are necessary to review, create, fulfil and support the customer's requested story and to take steps at the customer's request before entering a contract. We also keep records where necessary for legal obligations and legitimate interests such as fraud prevention, security and handling complaints. Stripe processes payment information on our behalf. Newsletter addresses are used with consent for news and offers, and consent can be withdrawn at any time.

6. Private creative brief, photographs and references

After payment, a customer may use a private, unguessable link to add detailed story instructions and optional reference photos. A reference photo is optional. The customer must own it or have permission to use it. If it shows a child, the submission must be made by their parent, guardian or another authorised adult. Photos are stored privately, matched to the corresponding paid order and used only to guide artwork for that order. They are not used to create an instant public image, displayed in a public gallery or used in advertising without separate, explicit permission.

7. Retention and deletion

Reference photos attached to abandoned or unpaid orders are intended to be deleted on a regular schedule, with a target maximum of 30 days. Records and creative references connected to paid orders may be retained for as long as reasonably needed for fulfilment, customer support, accounting, legal claims or statutory obligations. Customers may contact us to request deletion where applicable.

8. Sharing and international processing

Information is shared only with service providers needed to host and secure the website, store order materials, process payment through Stripe, communicate with the customer, create the purchased format or arrange printing and delivery. Some providers may process information outside the United Kingdom; where required, we rely on appropriate contractual or legal safeguards. We do not sell customer information.

9. Your choices

You may ask to access, correct or delete information, withdraw marketing consent or object to certain uses by contacting hello@yourstorybegins.shop. UK data-protection rights may include access, rectification, erasure, restriction, objection and data portability where applicable. You may also complain to the Information Commissioner's Office at ico.org.uk, although we would appreciate the opportunity to address the concern first.

10. Security

We use restricted-access systems, private object storage, file-type checks and upload limits for reference photos. Payment is handled by Stripe and full card details are not stored by this website. No internet service can guarantee absolute security; customers should not include highly sensitive information in the free-text fields.