Privacy Policy

This Privacy Policy describes how The Little Penguin Press (“we”, “us”, “our”) collects, uses, and shares personal information when you visit our website, place an order, or read your book. By using our services you agree to this Policy.

1. Information we collect

Information you provide. When you place an order or contact us, we collect:

• Your name and contact details, and the login credentials we set up for your library account;
• The order details, story information, and any photograph or materials you choose to provide about the person the book is about;
• Your messages to us.

Payment information. Payments are processed by PayPal. We receive confirmation of your payment but do not collect or store your full card details.

Information collected automatically. When you use the site we collect a login session cookie and basic technical data such as your IP address, browser type, and access times, used to operate and secure the service. See our Cookie Policy.

2. How we use your information

• To create, produce, and deliver the book you ordered;
• To give you access to your library and respond to your enquiries;
• To take payment and provide any printed add-on;
• To operate, secure, and improve our service and comply with our legal obligations.

We do not sell your personal information, and we do not use your information for advertising. We share information only with the service providers listed below, who help us operate our service and produce your book.

3. Our legal bases

Where applicable law requires a legal basis to process personal information, we rely on: performance of our contract with you (to fulfil your order and give you access); your consent (for any materials you provide); our legitimate interests in operating and securing the service; and compliance with legal obligations.

4. How we share your information

We share personal information only with service providers who process it on our behalf, under contract, to run our service:

• JotForm — our order form and file upload;
• Supabase — accounts, sign-in, and order records;
• Cloudflare R2 — storage of your book’s media;
• Vercel — website hosting;
• Generative artificial intelligence — to help produce your book;
• PayPal — payment processing.

We may also disclose information where required by law or to establish or defend legal claims. We do not share your information with third parties for their own marketing.

5. International data transfers

Some of our providers are located outside your country. Where we transfer personal information internationally, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.

6. How long we keep your information

We keep your account and finished book for as long as your account is active so you can re-read it. We delete any materials you provide within 24 months of delivery, or sooner on request, unless we must keep limited records to comply with law.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these, email thelittlepenguinpress@gmail.com. You may also have the right to complain to your local data protection authority. We will not treat you differently for exercising your rights.

8. Security

We use reasonable measures to protect your information, including access controls and encryption in transit, and we serve your book’s media only through private links that expire. No method of transmission or storage is completely secure, but we work to protect your information.

9. Changes to this Policy

We may update this Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above.

10. Contact us

If you have any questions or requests about this Policy or your personal information, contact us at thelittlepenguinpress@gmail.com.