Draft · Privacy notice

Privacy.

Draft — not in force This describes what the system actually does with data today. It has not been reviewed by a data-protection specialist and is not yet a compliant privacy notice. Nothing on this site is a live service.

Last updated 17 August 2026

Three people’s data passes through this product: the buyer, and each of the two partners. The partners never asked for any of it, which shapes everything below.

What we collect, and why

Data	Whose	Why
Name, email	Buyer	To take the order and send progress updates.
Shipping address	Buyer	To post the book.
Payment details	Buyer	Handled entirely by Stripe. We never see or store card numbers.
Name and contact	Each partner	To ask them the questions.
Their answers	Each partner	They are the book.
Reference photographs	Each partner	So the illustrations look like them.
A short physical description	Each partner	Hair, build, glasses and similar — an art brief, kept deliberately coarse.

What we do not do

We do not create face templates, face embeddings, or any other biometric identifier from photographs.
We do not use anyone’s photographs or answers to train models.
We do not sell data to anyone, ever.
We do not use advertising or cross-site tracking cookies.

The couple’s consent

The buyer gives us the couple’s contact details, and may upload photographs of them, before either partner knows the product exists. We think that is the sharpest issue in this product, so:

The first message each partner receives tells them who commissioned the book and that photographs have been shared.
Photographs are only used to generate a likeness once that partner has actively agreed. Silence is not agreement.
Either partner can decline the photographs but still take part, decline entirely, or ask us to stop contacting them, at any point.
Either partner can ask for their data or its deletion at any point, including part-way through, and we will honour it even if that means the book cannot be finished.

How long we keep things

Data	Kept for
Reference photographs	Deleted once the book is delivered — the print shipped, or the digital edition handed over.
Answers and the finished book files	Kept, so we can reprint a damaged book and resolve disputes.
Original inbound emails	Kept as the record of what was actually said, if the writing is ever questioned.
Order and payment records	As long as tax and accounting rules require.

OpenSpecific retention periods for each row, and a documented lawful basis for each purpose.

Who else processes it

Stripe — payments. They receive your payment details directly.
Resend — sending and receiving the question emails.
An image model vendor — generating illustrations from the art brief and approved reference images.
A print partner — printing and shipping. They receive the book files and the delivery address.

OpenNamed sub-processors with data-processing agreements in place, their locations, and the mechanism covering international transfers.

Analytics

We count which step of the commission form people reach, using a random identifier generated in your browser and kept only for that visit. It is not a cookie, it is not shared with anyone, and it is not connected to your name, your email, or your IP address. It exists to tell us which step people give up on.

Your rights

Buyer or partner, you can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Contact hello at storybetweenus dot com — the domain is registered, but this is a prototype and the mailbox is not receiving yet.

OpenResponse-time commitments, the identity-verification process, and the specific rights wording required under UK/EU GDPR and the US state privacy laws that apply.

Before this can be used

Review by a data-protection specialist covering the US as the primary market.
Document a lawful basis for each purpose, and the retention period for each category.
Put data-processing agreements in place with every sub-processor.
Confirm the international transfer mechanism.
Name a contact for data-protection enquiries.