Privacy policy

Colour Memories (ABN 27 459 862 807) ("we", "us") respects your privacy. This policy explains how we handle personal information under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and — for customers in the UK and European Economic Area — the UK GDPR and EU GDPR. We are the data controller for the personal information described here.

What we collect

• Photos you upload, captions, dedication text and book settings — to create your book.
• Contact and order details: name, email, shipping address and phone number (the courier needs it).
• Payment information is collected and processed by Stripe. We never see or store your full card number.
• Technical data: a hashed (non-reversible) IP address for abuse prevention, cookies needed to keep your draft and sign-in, and your currency and language preference.

Photos of children

Family photos often include children. Only upload photos you have the right to use. We use them solely to produce your book: they are not published, shared, sold or used to train AI models. We never use your photos or drawings in our marketing without your separate, explicit written consent.

How we use your information

• To convert your photos into line drawings, build your print files and deliver your order (contract performance).
• To send order confirmations, download links and shipping updates (contract performance).
• To answer enquiries and provide support (legitimate interests).
• To meet tax and accounting obligations, e.g. keeping invoices for 5 years under Australian tax law (legal obligation).
• Marketing emails only if you opt in; you can unsubscribe at any time (consent).

Who we share it with

We use trusted service providers who process data on our behalf, under contracts that protect it:

• Stripe — payments, tax calculation and invoices.
• Lulu Press and its print partners — printing and shipping physical books (receives your print files, name, address and phone).
• OpenAI and/or Replicate — AI conversion of photos into line art. Under their API terms, submitted images are not used to train their models.
• Vercel (hosting), Cloudflare (file storage), our Postgres database provider, and Resend (email delivery).

Some providers store or process data outside Australia (including the United States and the EU). We take reasonable steps so they handle it consistently with the Australian Privacy Principles and, for UK/EEA customers, rely on Standard Contractual Clauses or equivalent safeguards.

How long we keep it

• Draft books that are never ordered are deleted automatically 60 days after they were last edited.
• For ordered books we keep the print files so you can re-order copies. Ask us at any time and we'll delete them.
• Order and invoice records are kept for 5 years for tax purposes.

Your rights

You can ask to access, correct or delete your personal information, or (UK/EEA) to restrict or object to processing and to data portability. Delete a draft any time from the builder, or email our contact page. We respond within 30 days.

If you're unhappy with how we've handled your information, please contact us first. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au), the UK ICO, or your local EU supervisory authority.

Cookies

We use only essential cookies: one to keep your draft book in your browser, one for sign-in, and one to remember your currency. If we add analytics or advertising cookies, we'll update this policy and ask for consent where required.

Security

Data is encrypted in transit (HTTPS) and at rest. Files are accessed only via short-lived signed links.

Contact

Colour Memories, Victoria, Australia. Email: our contact page