Your family's privacy

ThreePebbles (threepebblesbooks.com) is run by its founder, a sole trader in England. We are the data controller for the information on this page.

• Your account: your email address, used to sign you in with a magic link.
• Your book details: the names, ages and details you give us for the people in a story.
• Photos, if you choose to upload them: of people, to turn into characters, and of places, to illustrate in your book.
• Your orders: what you bought and when. Card details go straight to Stripe; we never see or store them.
• Messages you send us, and your email if you join our newsletter.

Uploading a photo is optional. If you upload a photo of a child, you confirm you are their parent or guardian and you consent to us using it. That consent is our lawful basis for using the photo.

We use the photo for one thing only: to make the characters, pictures and book you asked for. We do not use it to train any software, we share it only with the service that draws the pictures, and we do not use it to recognise or identify anyone. We aim not to keep photos at all. If we need to hold one while your book is being made, we keep it only for that and delete it within 30 days.

You can withdraw your consent at any time and we will delete any character drawn from it.

• To make and deliver the book you bought (this is needed to carry out our contract with you).
• To use a child's photo (your consent, as above).
• To send the newsletter (your consent; every email has an unsubscribe link).
• To keep records of sales (a legal duty under UK tax law).
• To keep the site safe and working (our legitimate interest in running the service).

We never sell your data. We share it only with the services that help us run ThreePebbles, under contracts that protect it:

• A hosting provider: accounts, sign in and your character pictures.
• Stripe: payments.
• An email provider: sending emails such as your sign in link and receipts.
• Specialist services that help write and illustrate the book. They receive only what is needed to make your pages.

ThreePebbles itself runs in the UK. Some of the services above may handle data outside the UK; when they do, they use the safeguards UK law requires. The services that keep the site running never receive names, photos or story text.

• Photos: we aim not to keep them. A photo held while your book is made is deleted within 30 days; the pictures drawn from it stay with your book.
• Your account and your books: for as long as you have an account, so you can keep reading them.
• Order records: six years, as UK tax law requires.
• Messages: as long as we need them to help you, then deleted.

You can ask to see the information we hold about you, correct it, delete it, or take a copy. You can also object to how we use it or withdraw consent. To ask, contact us. We reply within one month.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the ICO at ico.org.uk.

We use the cookies the site needs to work, such as keeping you signed in and remembering your basket. If you say yes, Microsoft Clarity also uses cookies on our public pages (home, books, about, charity, blog) to show us how visitors move around them, with anything typed hidden. It never runs inside your books, the create flow or your account. We do not use advertising cookies. To change your answer, clear this site's data in your browser and choose again.

If we change this page we will update the date at the top, and tell you by email if the change matters. See also our terms and refunds.