Privacy Policy

1. Who we are

Lumi Stories is operated by Mike (trading as Lumi Stories), based in the United Kingdom. Contact: hello@lumistories.co.uk

2. What we collect

To create your personalised story, we collect:

• Child's first name and age group (not date of birth)
• Story preferences (favourite animal, theme, moral lesson)
• Parent's email address (for story delivery)
• Payment information (processed securely by Stripe — we never see card details)

We do not collect: full name, address, phone number, photo, or any sensitive personal data.

3. How we use it

• To generate your personalised story PDF
• To email the story to the parent
• To process payment via Stripe

We do not use children's data for marketing, profiling, or any purpose beyond story creation.

4. Data retention

Order metadata (including the child's name) is automatically deleted within 7 days of story delivery. Parent email addresses are retained for 30 days for support purposes only.

5. Children's data (UK GDPR & Children's Code)

We are fully compliant with the UK GDPR and the Age Appropriate Design Code (Children's Code). We collect the minimum data necessary and treat all children's data with the highest level of protection. Parental consent is obtained at point of purchase. We do not profile children or use their data for any commercial purpose.

6. Your rights

You have the right to access, correct, or delete your data at any time. Email hello@lumistories.co.uk and we will respond within 72 hours.

7. Third parties

• Stripe — payment processing (PCI DSS compliant)
• Anthropic Claude — AI story generation (data not used for training)
• Resend — email delivery

All third parties are contractually bound to protect your data and may not use it for their own purposes.