Privacy & the Photo Promise

Last updated: 31 July 2026

The short, human version first:

Your photo is used for one thing only: painting your child’s book. It is never used to train an AI model, never sold, never shared for marketing and never kept in a library of children’s faces.

It is deleted within 30 days of your book being finished — and within 90 days if you never go ahead, so an abandoned order does not leave your child’s face on our computers either.

No account is needed. We ask for your child’s first name, whether the story says she or he, an age band, one photo and your email address. That is the whole list.

Who we are

Little Tailor Books is a trading name of Complete Asset Solutions Ltd, a company registered in England & Wales (company number 15541955), registered office 90 Cuckoo Avenue, London W7 1BN. We are not VAT registered, so no VAT is charged. Contact: [email protected]. We are the data controller for the information described here.

What we collect, and why

Your child’s first name, pronoun and age band — so the story reads as theirs.
The photo (or photos) you upload — the artist’s reference for painting your child.
Your email address — to send the free preview, the finished book and your receipt.
Anything you choose to tell us in the notes or dedication box.
Order and payment records — what you bought, when, and the payment reference. We never see or store your card details; the card is handled entirely by Stripe.

Our lawful basis for all of that is performance of a contract — it is what a personalised book physically requires. Keeping the order and payment record afterwards is a legal obligation (UK company and tax records, six years).

The photo — every copy, and how long it lives

Being specific matters more than sounding reassuring, so here is every place a photo goes:

The order store behind this website. Deleted from the order record as soon as your finished book is sent.
An order alert to our own studio mailbox, so a person knows a book needs painting. Your photo is attached to it. We delete that message by hand when your order is complete — it is the one copy our automatic clear-out cannot reach, so if you want it confirmed, ask and we will confirm it.
The studio computer that paints the book, which also makes working crops of the photo. The photo and every image made from it are deleted within 30 days of your book being finished — or within 90 days if the order is abandoned and never completed. Every deletion is written to a log, and you are welcome to ask us for the record of yours.

What we keep after that: your finished book, its illustrations, and a short written description of your child’s character (hair, eyes, the beads in their hair) — so that if you want a reprint, a fix or another book in a year’s time, we can do it without asking you for a photo again. If you would rather we deleted that too, say the word and we will.

We do not use face recognition. The photo is a reference an illustration is painted from; it is never used to identify anybody, and it is never matched against any other image.

Who else touches your data

Only the suppliers it takes to run a small book studio, each under contract and only for our order:

Cloudflare — hosting and the order store.
Brevo — sending our emails.
Stripe — taking payment (they, not we, handle your card).
Google — the AI image service that paints the illustrations, used under business terms that do not permit your photo to be used to train their models.
Our printer and the postal carrier — for hardcover orders only, and they get the delivery address and the finished book, never the original photo.

Some of those suppliers process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or the UK International Data Transfer Addendum.

Children

The books are for children, but the customer is always an adult. By ordering you confirm you are over 18 and that you are the parent or guardian of the child in the photo, or have their parent’s permission. We will not knowingly accept a photo from anyone else.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it — one email to [email protected] is enough and we will answer within a month. You can also object to processing or ask for your data in a portable form. If you think we have got it wrong you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

Cookies

This site sets no advertising and no analytics cookies. The only thing stored in your browser is what the order form needs to remember while you fill it in. If we ever add advertising or analytics, we will ask your consent first.

Changes

If this policy changes we will update the date at the top. Material changes affecting an order already placed will be emailed to you.

See also our Terms & Conditions and Returns & Cancellations.