Privacy Policy

This Privacy Policy describes how information about you is gathered, applied, and shared when you use our website and related services (the “Services”), including when you purchase a personalised song, complete our questionnaire, or contact us.

By using the Services, you acknowledge this Privacy Policy. If you do not agree, please do not use the Services.

1) Who we are (data controller)

For UK and EU data protection laws (including the UK GDPR and EU GDPR), the data controller is:

Leonard Duval, trading as StoryToSong
Email: support@storytosong.studio

2) Information we collect

A) Information you provide

When you place an order, fill in our questionnaire, or contact us, we may collect:

• Contact details (e.g., your name and email address)
• Order details (e.g., options selected, language/genre choices)
• Song information you submit (your story, names, memories, and other content you type into the form)
• Support communications (messages you send to us)

B) Payment information

Payments are processed by Stripe. We do not store your full card details. Stripe may collect and process payment and billing information according to its own privacy practices.

C) Automatically collected information (basic)

When you use the site, we may collect limited technical data such as:

• IP address (or an approximation of location derived from it)
• device/browser type
• pages viewed and timestamps

This helps us operate the site, diagnose issues, and keep the Services secure.

3) Cookies and analytics

We may use cookies and similar technologies to keep the site working and remember basic preferences.

Google Analytics: We do not currently use Google Analytics. If we add analytics tools in the future, we will update this Privacy Policy and, where required, request consent via a cookie banner or similar mechanism.

You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.

4) How we use your information

We use personal data to:

• Provide the Services (create your personalised song based on the information you submit)
• Process orders and send transactional emails (order confirmations, updates, delivery emails)
• Provide customer support
• Maintain security and prevent fraud
• Improve and maintain the Services (debugging and performance)
• Comply with legal obligations (e.g., tax/accounting)

5) Legal bases for processing (UK/EU)

Where UK/EU laws apply, we rely on:

• Contract: to fulfil your order and provide the Services
• Legitimate interests: to operate, secure, and improve the Services and provide support
• Legal obligation: for accounting/tax and other required record keeping
• Consent: where required (e.g., certain cookies or marketing emails)

6) How we share information

We do not sell your personal data. We may share information with:

• Stripe (payment processing)
• Resend (sending transactional emails)
• Hosting/infrastructure providers (e.g., Vercel and related services needed to run the site)
• Professional advisers (accountants/legal advisers, where necessary)
• Authorities (if required by law or to protect rights/safety/security)

Service providers are permitted to process personal data only to provide services to us and must protect it.

7) International data transfers

Some providers may process data outside the UK/EU. Where this happens, we use appropriate safeguards required by applicable law (such as contractual protections).

8) Data retention

We keep personal data only as long as necessary for:

• delivering the Services and maintaining order history
• support and dispute resolution
• legal and accounting requirements

You can request deletion. We may retain certain information if needed for legal compliance, fraud prevention, or to establish/exercise/defend legal claims.

9) Security

We use reasonable measures designed to protect personal data. However, no online service can be guaranteed completely secure.

10) Your rights (UK/EU)

You may have rights to:

• access, correct, delete your data
• restrict or object to processing
• data portability
• withdraw consent (where processing is based on consent)

To exercise rights, contact support@storytosong.studio.

Complaints: UK users can complain to the UK Information Commissioner’s Office (ICO). EU users can complain to their local data protection authority.

11) Marketing choices

If we send marketing emails in the future, you can opt out at any time using the unsubscribe link or by contacting support@storytosong.studio. Transactional emails about your order are not marketing.

12) Children

The Services are not intended for children under 16 (or the applicable age in your jurisdiction).

13) Links to other sites

We may link to third-party sites. This Privacy Policy does not apply to them.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will update the effective date and may provide additional notice where appropriate.

15) Contact

Email: support@storytosong.studio