Privacy policy

Last updated 17 October 2026

Draft: some business details are still to be completed (shown in [square brackets]) and this document is awaiting legal review.

Lovebound Chapters makes personalised life story books for adopted children. Your child’s story is personal, so we take great care with it. This policy explains what we collect, why, who helps us, how long we keep it, and your rights. We write it in plain English; if anything is unclear, please ask.

Who we are

The business responsible for your information (the “controller”) is [Legal name of the business, e.g. Lovebound Chapters Ltd], [Registered business address]. Company number: [Company number, if a limited company]. ICO registration number: [ICO registration number]. You can contact us at [Contact email address].

What we collect

Your account: your email address, used to sign you in with a link (we don’t use passwords).
Your child’s book: what you choose to enter in the book builder: your child’s first name, pronouns, age, the day they came home, names of family members and pets, a dedication, and the photos you upload. You decide what to include. Hidden details in your photos (such as the location they were taken) are removed before the photos leave your device.
Your order: your delivery name, address, phone number and email (collected on the payment page), what you ordered, the amount, dates, and a payment reference. The payment page is run by Stripe: we never see or store your card details.
Records of your consent: that you agreed to our terms, and when.

By adding information about your child you confirm that you are their parent or legal guardian, or otherwise have the right to share it. We treat everything in a book as sensitive.

Why we use it, and our legal basis

To create your book, take payment, print it and deliver it, and to tell you how your order is going. Basis: we need it to carry out our contract with you.
To keep accounting and tax records. Basis: a legal obligation.
To keep the service secure, prevent fraud and sort out problems with orders. Basis: our legitimate interests in running a safe, reliable service.

We don’t sell your information, use it for advertising, or make decisions about you by automated means.

Who we share it with

We use a small number of trusted companies to run the service. They only receive what they need:

Supabase: stores your account, books and photos in private, access-controlled storage.
Stripe: takes your payment. Stripe also decides how to use payment information for fraud prevention and its legal duties; see Stripe’s own privacy policy.
Lulu: prints and posts your book. To do this they receive your delivery name, address, phone number and email, and the print-ready files for your book, which contain your child’s name, story and photos.
Resend: sends our emails (sign-in links, order confirmation and dispatch notices).
Vercel: hosts our website.

We may also share information if the law requires it. Some of these companies handle information outside the UK. When they do, we rely on safeguards the law recognises, such as the UK’s approved contract terms or an adequacy decision.

How long we keep it

Your account, books and photos: until you delete them. You can do this yourself at any time with the “Delete all my data” button on your account page.
Print-ready files: we delete them 30 days after your order is dispatched.
Order records: the amount, dates and payment references are kept for 6 years, because the law requires us to keep accounting records. If you delete your data, we remove your name, address, phone, email and the copy of your book from your orders and keep only that financial record.

We can’t delete your data while an order is still being printed or delivered. Once it has been dispatched you can.

Cookies

We only use cookies that are essential to keep you signed in. We don’t use advertising or tracking cookies, so there is no cookie banner to click.

Your rights

Under UK data protection law you have the right to:

be told what we hold about you and get a copy;
have mistakes corrected (most of it you can edit yourself in the builder);
have your information erased (use the delete button, or ask us);
restrict or object to how we use it, and ask for it in a portable format.

To use these rights, email [Contact email address]. We’ll reply within one month. If you’re not happy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Children

Our service is for adults. We don’t knowingly collect information directly from children. Information about a child in a book is provided by their parent or guardian.

Changes to this policy

If we change this policy in a way that matters, we’ll update the date above and, for big changes, let you know by email.