Privacy Policy
Last updated: April 2026
1. Who we are
FableBean Ltd generates personalised children's picture books. You can contact us at hello@fablebean.co.uk.
2. What data we collect
- Email address — when you create an account or place an order.
- Child's name and preferences — entered on the story creation form. Used solely to generate your book. Not linked to any child's identity in our systems.
- Order details — product type, story title, and purchase date.
- Shipping address — for print orders only, shared with our print fulfilment partner to fulfil delivery.
- IP address — collected for rate limiting and fraud prevention.
- Analytics data — page views and feature usage, collected only with your consent.
- Child photograph (where provided) — if you choose to upload a photo to personalise illustrations, it is transmitted to our image generation provider solely to generate your book images. FableBean does not store the photograph. Explicit consent is collected before any photo is processed. Child photographs constitute special category biometric data under UK GDPR and are processed only on the basis of your explicit consent.
We do not store payment card details. All payments are processed by Stripe.
3. Legal basis for processing
- Contract — processing your order and delivering your book.
- Legitimate interest — security, rate limiting, and fraud prevention.
- Consent — analytics cookies and child photographs (you can withdraw this at any time).
4. Third-party processors
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email address; card details handled directly by Stripe |
| Content generation provider | Story generation | Child's name and preferences — used solely to generate your story |
| Image generation provider | Image generation | Character description; reference photo (where provided) — used solely to generate illustrations, not retained |
| Email delivery provider | Transactional email | Email address |
| Frontend hosting provider | Frontend hosting | IP address (standard web logs) |
| Infrastructure provider | Backend hosting and database | All stored data (UK/EU hosting) |
| Analytics provider | Analytics (EU servers) | Page views and events — only with your consent |
| Print fulfilment partner | Print fulfilment | Name and shipping address — print orders only |
5. Data retention
- Orders and PDFs — retained for 1 year from your purchase date (the download window).
- Account data — retained while your account is active. Deleted on request.
- Analytics data — subject to our analytics provider's own retention settings.
6. Your rights
Under UK GDPR you have the right to access, correct, erase, or port your data, and to object to or restrict processing. To exercise any right, contact us at hello@fablebean.co.uk.
You also have the right to withdraw analytics consent at any time by clearing your browser's localStorage or contacting us.
7. Cookies
- Session cookie (essential) — an httpOnly JWT cookie that keeps you signed in. 30-day expiry. Cannot be disabled without losing account access.
- Analytics cookies — set by our analytics provider only with your consent. You can decline or withdraw consent using the banner shown on your first visit.
8. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email if you have an account with us.
9. Contact
For any privacy-related queries: hello@fablebean.co.uk