DRAFT for owner and legal review. Items in [square brackets] need confirming before launch.
For explorers 🦊
Hi! To make your book, we only need your first name (or a nickname), how you'd like to look in the story, and your Explorer's Mark (a drawing of yours, or a symbol you pick). A grown up does this for you.
We use them to put you in the story, and that's all. We never use them to send you ads. After your book is ready, we delete them. If you want us to delete them sooner, ask your grown up and we will.
Privacy Notice
Last updated: [date at launch]
Lantern & Leaf Publishing is a business name of ElevateAI Solutions Pty Ltd (ACN 695 773 338), Sydney, Australia ("we", "us"). This notice explains how we handle personal information when you order a personalised edition of The Explorer's Mark. We have designed this service so that we collect as little as possible, especially about children.
What we collect
| Information | Why we need it | How long we keep it |
|---|---|---|
| Your child's first name or nickname | To put it in the story | Deleted 30 days after your book is delivered (60 days for printed books, so we can reprint if something goes wrong). You can ask us to delete it sooner. |
| The look you choose for your child's character (boy or girl, hair type, skin tone, hair colour) | To draw your child into the story | Deleted at the same time as the name |
| Your child's Explorer's Mark: either a symbol you pick, or a photo of a drawing your child made | To put it in the story | Deleted at the same time as the name. A photo you upload but don't order with is deleted within 24 hours. We only keep the cleaned up drawing, not your original photo. |
| Your email address | To send your book, order updates and answer questions | Kept with your order record for [5 years] to meet Australian tax record requirements |
| Your shipping address (printed books only) | To post your book | Deleted from our system with your child's details. Our payment and printing partners keep their own records (see below) |
| How you heard about us (optional), and the name of the website or campaign that brought you to our order page | To learn which ways of finding us work, so we can focus our efforts. It's about you, the grown up, never your child, and we never record the full address of the page you came from | Kept with the order record |
| Your confirmation that you are the child's parent or guardian | So the right person is making choices for the child | Kept with the order record |
We do not ask for a child's surname, age, birthday, school, photo of the child, or voice. If you upload a drawing, please photograph only the drawing (a shape or pattern, not a face); occasionally a team member may look at an uploaded drawing to check it's suitable before printing. We do not see or store your card details; payments are handled by our payment provider.
Who we share it with
Only with the services we need to make and deliver your book, and only what each one needs:
- Payments: [Stripe] processes your payment. It receives your payment details and email, not your child's details.
- Printing (printed books only): [Lulu] prints and posts your book. It receives the finished book file, which includes your child's name, and your shipping address.
- News emails (only if you tick the box): [GoHighLevel] holds our news list and sends our news emails. It receives your email address, which edition you bought and how you heard about us, never anything about your child.
- Email delivery: [Resend] sends our emails. Emails never include your child's name.
- Hosting: our servers and backups are run by [DigitalOcean] (Sydney) and [Cloudflare].
Some of these providers may store or process information outside Australia, including in [the United States]. We choose providers with strong security and privacy commitments. We never sell personal information.
Children
- Only a parent or guardian can place an order. Children do not create accounts or enter information themselves.
- We never use a child's information for marketing, advertising or profiling, and we never contact children.
- We keep a child's details only for as long as we need them to make and deliver the book.
Marketing
We only send news about new books if you tick the box when ordering. It goes to you, the grown up, never to your child. Every email has an unsubscribe link.
Cookies and tracking
The personalisation pages use no advertising or tracking cookies. When you order, we note the name of the website that sent you here and any campaign tags in the link (for example utm_source), without using cookies. [Confirm website analytics before launch.]
Keeping it safe
Your child's name never appears in web addresses, our system logs or email subject lines. Download links expire after 7 days. Access to orders is password protected, and every time a team member views a child's name it is recorded.
Your choices
- Delete your child's details now: use the delete my child's details page with your order number and email.
- See or correct your information: email us at privacy@lanternandleafpublishing.com.au.
- Questions or complaints: email privacy@lanternandleafpublishing.com.au. We aim to reply within [30 days]. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this notice, we'll update the date at the top. If a change affects how we use information you've already given us, we'll email you first.