Privacy Policy

Welcome to the Make It Mine Privacy Policy. We wrote this so you can quickly understand what we collect, why we collect it, and how you're in control.

This policy, together with our Terms and Conditions, applies when you visit our website www.makeitmine.ai (the "Website") or use our services to create personalised children's books (the "Services"). Terms and Conditions.

This Privacy Policy is designed to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and the Swiss Federal Act on Data Protection (nFADP; LPD/DSG).

If you have questions, contact us at privacy@makeitmine.ai.

1. Who we are

We create personalised children's books with true‑to‑photo likeness illustrations based on images you upload and the information you provide.

2. What data we collect

3. How we use your data (purposes and legal bases)

Swiss nFADP/LPD: Where we rely on consent, it is informed, specific, and revocable; where we rely on legitimate interests, we balance our interests against your rights.

4. Children's data and authority

Our Services are intended for adults ordering on behalf of a child. By uploading a child's image or providing their details, you confirm you are the parent or legal guardian, or you have their explicit authorization. We act promptly on parental/guardian requests related to a child's data.

5. Sharing your data (categories of recipients)

We do not sell your personal data. We share only what is necessary with:

• AI image‑generation service provider (processor): converts your uploaded image to an illustration strictly under our instructions. Contractually prohibited from using your content for model training or marketing.
• Print and fulfillment partner in England (processor): receives only the compiled print‑ready PDF and necessary delivery details to manufacture and ship your book. Does not receive the original uploaded image.
• Payment processor: [Stripe] (typically an independent controller for payments).
• Hosting, storage, and infrastructure providers: [e.g., provider and region(s)].
• Operational tools (processors): [email service], [customer support tool], [analytics provider], [error/performance monitoring], [CDN], [backup vendor].
• Shipping/logistics: ["Print‑on‑demand partner coordinates carriers; carriers may receive delivery data (name, address, phone if required) and tracking details."]
• Professional advisers and authorities where required by law.

6. International transfers

We serve customers globally. Make It Mine processes and stores information on servers located in multiple countries. Information collected in Switzerland and the European Economic Area (EEA) may be transferred to, stored in, and processed by third parties located outside Switzerland and the EEA, where privacy laws may offer a different level of protection. Our personnel and certain suppliers may also access your information from outside these regions to fulfil your order, produce and ship your book, provide customer support, maintain our systems, and perform diagnostics.

We only carry out such transfers in accordance with applicable data protection laws. Depending on the destination and provider, we rely on one or more of the following safeguards:

• Adequacy decisions: transfers to countries that the European Commission, the UK Government and/or the Swiss Federal Council recognise as providing an adequate level of protection (for example, the United Kingdom).
• Data Privacy Framework: for transfers to the United States, where the recipient is certified under the EU‑U.S. Data Privacy Framework, the UK Extension to the EU‑U.S. DPF, and/or the Swiss‑U.S. DPF.
• Standard Contractual Clauses: the European Commission's Standard Contractual Clauses (SCCs), together with the UK Addendum or International Data Transfer Agreement (IDTA) and/or the Swiss Addendum, plus supplementary technical and organisational measures where required.
• Specific derogations: in limited cases, we may rely on GDPR/UK GDPR/Swiss law derogations (e.g., to perform a contract at your request, to establish/exercise/defend legal claims, or with your explicit consent).

If an adequacy decision we rely on is withdrawn or circumstances change, we will implement appropriate alternative safeguards.

By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

7. Retention

• Original uploaded images: deleted 3 weeks after you receive your book (to handle defects or complaints).
• Derived assets (e.g., generated illustrations and print‑ready PDFs): retained for 6 months to support easy reorders, then deleted.
• Account, order, and invoice records: retained for [10 years] to comply with Swiss accounting/tax obligations and for legal claims.
• Logs and security records: retained for [e.g., 12 months] unless needed longer for investigations.

You can request earlier deletion at any time by emailing privacy@makeitmine.ai or via your account/profile settings, subject to legal limitations.

8. Your choices and rights

Depending on where you live (EU/EEA, UK, Switzerland), you may have the right to:

• Access your data and receive a copy;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict processing;
• Object to processing based on legitimate interests (including related profiling);
• Data portability (where technically feasible);
• Withdraw consent at any time (does not affect processing already performed);
• Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects (we do not conduct such processing).

When we share your personal data with processors (service providers acting on our instructions), we require them by contract to assist us in responding to your rights requests (e.g., access, deletion, restriction). When you exercise a right with us, we will forward and enforce your request with relevant processors holding your data on our behalf and ensure they act accordingly.

9. Complaints and governing law

You may lodge a complaint with:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC).
• United Kingdom: Information Commissioner's Office (ICO).
• EU/EEA: Your local supervisory authority of habitual residence or place of work.

Without limiting these rights, this Privacy Policy and related disputes are governed by Swiss law, and the competent courts are Geneva, Switzerland], unless mandatory consumer protection rules provide otherwise.

10. Cookies and similar technologies

We use cookies and similar technologies to:

• Make the site work (strictly necessary)
• Monitor application performance and errors (legitimate interests)
• Optional personalisation or marketing (only if implemented with consent)

Do Not Track: We do not currently respond to DNT signals

11. Communications

Service emails: order confirmations, delivery updates, policy changes, and essential service messages. You cannot opt out of these communications related to transactions or legal notices.

Marketing emails: You can unsubscribe at any time via the link in the email or by contacting privacy@makeitmine.ai.

12. Security

Sending information over the internet is never completely risk‑free. We take steps to safeguard your personal data, but we cannot guarantee the security of information transmitted to our Website; any transmission is at your own risk. Once we receive your data, we apply strict procedures and security controls to help prevent unauthorised access.

Within Make It Mine, access to personal data is limited to staff who have a legitimate business need to see it and are bound by confidentiality obligations. We maintain physical, electronic, and procedural safeguards consistent with applicable laws and industry standards, and at rest, role‑based/least‑privilege access, environment segregation, logging and monitoring, secure development practices, vulnerability management, and due diligence plus contractual safeguards for our processors and service providers.

If you create an account, you are responsible for keeping your login credentials secure. Please use a strong, unique password and do not share it with anyone.

While no system can be 100% secure, we work continuously to protect your information and will notify you of significant security incidents in accordance with applicable law.

13. No training/marketing use of your images

We do not use your uploads or generated illustrations for model training or marketing. We instruct our processors not to use your content for their own training or marketing and configure available settings to disable such use.

14. Legal bases summary

• Contract: order processing, production, shipping, customer support.
• Consent: processing images of identifiable persons; analytics cookies (where applicable).
• Legitimate interests: service operation and security, fraud prevention, temporary retention for reorders (balanced against your rights), defending legal claims.
• Legal obligations: accounting, tax, and compliance.

16. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" and/or "Effective date." Changes take effect when posted unless stated otherwise.

You are responsible for reviewing this Privacy Policy periodically to stay informed about our current practices. Your continued use of the Website and Services after any changes are posted constitutes your acceptance of the updated Privacy Policy.

Where required by law, we will provide additional notice of material changes that significantly affect your rights (for example, via in‑product notice or email).

17. Contact

Questions or requests about this policy or your data: