Privacy Policy
The controller is Ewa Bohdaniec, sole trader, trading as Paint by Numbers for Kids, 5 Aberfeldy Terrace, Irvine, KA11 2DQ, Scotland, United Kingdom. Contact: support@paintbynumbersforkids.co.uk.
Data we use and why
We process your email, order and payment references, uploaded image, rights declaration, artwork information, generated files, approval decisions, technical security logs and communications. We use them to perform the contract, provide the personalised digital product, prevent fraud, secure and operate the service, meet legal and accounting duties, and handle claims. We do not require a child's name and the purchaser must be an adult.
Images and AI
Your image is used only to fulfil and administer your order, including AI-assisted simplification and template creation. You must have the right to upload and transform it. Do not upload unnecessary personal or special-category information. We do not use customer images for advertising or sell them.
Recipients and international transfers
Necessary data may be handled by our hosting and email providers, Stripe for payment, OpenAI for authorised image processing, and professional or public authorities where legally required. These providers may use subprocessors outside the UK. We rely on applicable adequacy decisions or contractual safeguards such as the UK Addendum or approved clauses where required.
Retention
Temporary failed or abandoned uploads are normally removed within 24 hours. Private order images and generated production files are normally removed within 30 days after completion, rejection or abandonment, unless a dispute or legal duty requires longer. Operational and decision audit records are normally retained for 90 days. Transaction, tax and accounting records are retained for the period required by UK law, generally at least five years after the relevant 31 January tax return deadline.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent where consent is the lawful basis. Contract, legal and fraud-prevention records may need to be retained. Contact us first; you may also complain to the UK Information Commissioner's Office at ico.org.uk.
We do not make a solely automated decision that has legal or similarly significant effects on you. AI outputs require review and are not automatically published.