Back to the home page

    Privacy policy

    1. Controller

    LaveSoft MATEUSZ MATERNA IT Services, Botaniczna 6D, 22-400 Zamość, Poland. Contact: info@npole.net · +48 511 006 787. We have not appointed a data protection officer, as we are not required to. Please send privacy requests to info@npole.net.

    2. What we process and why

    • To perform the contract (Art. 6(1)(b) GDPR): handling your order, creating the personalised book or sample, payment and delivery by e-mail. Data: your child's name and age, optional photo, optional voice sample, optional text, e-mail address, order and payment details.
    • To meet legal obligations (Art. 6(1)(c) GDPR): keeping order records for tax and accounting purposes.
    • Legitimate interest (Art. 6(1)(f) GDPR): website security, preventing abuse, handling complaints.
    • Consent (Art. 6(1)(a) GDPR): marketing e-mails and marketing or analytics cookies (Meta Pixel, TikTok Pixel, Google Ads, Microsoft Clarity). You can withdraw your consent at any time.

    3. Service providers

    • Supabase: database, storage and backend hosting (EU region).
    • Stripe Payments Europe, Ltd.: payment processing.
    • Resend / Mailgun: sending transactional e-mails.
    • ElevenLabs: processing the voice sample (voice clone, text-to-speech) to create the product.
    • Meta Platforms Ireland Ltd., TikTok Technology Ltd., Google Ireland Ltd., Microsoft Ireland Operations Ltd.: advertising and analytics, only with your consent.

    4. Transfers outside the EU

    Where data is transferred to third countries (in particular the USA), this is based on standard contractual clauses (Art. 46 GDPR) or, where applicable, the EU-US Data Privacy Framework.

    5. How long we keep data

    • Children's photos are deleted automatically no later than 30 days after delivery.
    • Voice samples are used only to create the product and are deleted or anonymised after delivery.
    • Order data is kept for as long as tax and accounting law requires (up to 6 years).
    • Marketing consents until you withdraw them.

    6. Your rights

    You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and you can withdraw consent at any time with effect for the future. You can also complain to a supervisory authority, for example the Polish data protection authority (UODO) or the authority in your country (in the UK: the ICO).

    7. Cookies

    We use strictly necessary cookies (for example for your language setting) without consent. Marketing and analytics services are used only with your explicit consent through our cookie banner, and you can change your choice at any time with the cookie settings link at the bottom of the page.