PRIVACY POLICY

Effective Date: 27/07/25

Welcome to Doodlebound! This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website www.doodlebound.co.uk (“Site”), purchase personalised books, or interact with our services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are
Doodlebound
1 Waterhouse Close, Newport, CB11 3NU
Email: hello@doodlebound.co.uk
We are a UK-based business offering personalised books made to order.

2. Information We Collect
We may collect the following personal information:

Contact Information: Full name, email address, billing and delivery address, phone number (if provided).

Account Information: If you choose to create an account, we collect and securely store your login credentials.

Order Details: Products you purchase, delivery details, payment method (via Stripe – we do not store card information).

Personalisation Data: Uploaded images (e.g. children's drawings), text (e.g. child’s name or messages), and any customisation provided by you.

Marketing Preferences: Whether or not you've opted in to receive marketing emails.

Technical Data: IP address, browser type, device identifiers, and how you interact with our site (via cookies and analytics tools).

We do not knowingly collect data from anyone under the age of 13. If we become aware that we have inadvertently received personal data from a child, we will delete it immediately unless we have verifiable parental consent.

3. How We Use Your Information
We use your personal data to:

Process your orders and deliver your personalised products.

Contact you with order confirmations, updates, or queries.

Customise and personalise your book(s) based on your input.

Create and manage your user account (if registered).

Send you marketing emails if you have opted in.

Improve and optimise our website (via cookies and analytics).

Comply with legal obligations such as tax records and fraud prevention.

4. Legal Bases for Processing
We process your data under the following legal grounds:

Contract: To fulfil your purchase and provide our services.

Consent: For marketing communications and image/name personalisation.

Legal Obligation: To comply with financial, tax, and consumer protection laws.

Legitimate Interest: To improve our service, respond to queries, and prevent fraud.

5. Sharing Your Information
We only share your data with trusted third parties necessary to provide our services:

Payment Provider: Stripe, for secure payment processing.

Email Marketing Platform: Mailchimp, to send opted-in marketing communications.

Analytics & Tracking Tools: Google Analytics and Facebook Pixel to improve marketing and performance.

Print-on-Demand Partners: To create and ship your personalised books. They receive only the data necessary for fulfilment (e.g. name, delivery address, personalisation details).

All partners are contractually bound to protect your data and comply with UK GDPR.

6. International Data Transfers
While we do not ship internationally, some of our service providers (e.g. Mailchimp, Facebook, Google) may process your data outside the UK. In such cases, we ensure your data is protected by appropriate safeguards such as Standard Contractual Clauses or UK Data Transfer Agreements.

7. Your Rights
Under UK data protection law, you have the right to:

Access the personal data we hold about you.

Correct any inaccurate or incomplete information.

Erase your data (“right to be forgotten”) when it’s no longer needed or you withdraw consent.

Restrict or object to how we process your data.

Port your data to another service provider.

Withdraw consent at any time (e.g. unsubscribe from marketing).

Complain to the UK Information Commissioner’s Office (ICO): www.ico.org.uk

To exercise any of your rights, email us at [Insert Contact Email].

8. Data Retention
We retain your data only as long as necessary:

Order data is kept for up to 6 years for accounting and tax compliance.

Uploaded content (e.g. images) is retained only as long as necessary to complete and deliver your order, then deleted.

Marketing data is retained until you opt out.

Account data is retained until you delete your account or request deletion.

9. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to:

Keep items in your shopping cart.

Remember preferences.

Analyse site traffic and user behaviour via Google Analytics.

Track marketing performance (Facebook Pixel).

You can manage or disable cookies through your browser settings. On your first visit, we display a cookie banner requesting your consent for non-essential cookies. 

More details can be found in the link at the bottom of this page.

10. Data Security
We take your privacy seriously and use secure technologies to protect your data:

SSL encryption on our website.

Encrypted third-party payment gateway (Stripe).

Access controls and password protections.

Only authorised personnel access customer information.

11. Changes to This Policy
We may update this Privacy Policy from time to time. We’ll post any changes on this page and, if the changes are significant, we may notify you by email (if applicable).

Last updated: 27/07/25

12. Contact Us
If you have any questions about this policy or how your data is used, please get in touch:

Doodlebound
Email: hello@doodlebound.co.uk
1 Waterhouse Close, Newport, CB11 3NU