Privacy Policy — Create my Story

Last updated: March 2025

1. Who we are

Create my Story
Registered business: EURL
Registered in France — RCS Grasse 513 765 669
Registered office: 465 chemin du Riou, 06740 Châteauneuf-de-Grasse, France
We decide how and why your personal data is used. This means we are the
data controller under the UK GDPR and the Data Protection Act 2018.
Contact: hello@createmystory.co.uk

2. What personal data we collect

2.1 Data you provide

  • Name and surname
  • Email address
  • Telephone number
  • Postal address
  • Order, billing and payment information

2.2 Data collected automatically

  • IP address
  • Browser and device information
  • Cookies and tracking data
  • Pages visited, time spent and actions on the site

2.3 Data from purchases

  • Products ordered
  • Delivery information
  • Transaction history

We do not intentionally collect special category data (sensitive data) such as health, religion or political opinions.
If this ever changes, we will ask for explicit consent where required by law.

3. How we use your data

We use your personal data to:

  • Process and deliver your orders
  • Manage your customer account
  • Respond to enquiries and provide customer support
  • Send service messages (for example order confirmations or account notifications)
  • Send marketing communications, if you have given your consent
  • Improve website performance, security and user experience
  • Analyse how the website is used, if you accept analytics cookies

We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Our legal bases for processing

Under the UK GDPR, we must have a legal basis for each use of your data. We use:

  • Contract — to process orders, payments and deliveries
  • Legal obligation — to meet accounting, tax and warranty requirements
  • Consent — to send marketing emails and to use non-essential cookies
  • Legitimate interests — to improve our services, prevent fraud and keep our site secure

We balance our legitimate interests against your rights and freedoms and do not use this basis where your interests override ours.

5. Who we share your data with

We only share your data with third parties who help us deliver our services:

  • Website hosting provider (for example, IONOS)
  • Payment service providers
  • Email and newsletter platforms
  • Logistics and delivery partners
  • Technical providers for analytics, security and maintenance

These organisations act as data processors and may only process your data on our instructions.
We do not sell your personal data or allow third parties to use it for their own marketing.

International transfers

Some of our providers may be located outside the UK or the European Economic Area.
When we transfer data internationally, we use safeguards recognised by the UK Information Commissioner’s Office,
such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep your data

We keep your data only for as long as we need it:

  • Order and billing records: 10 years (to meet legal accounting obligations)
  • Customer account data: as long as your account is active
  • Marketing data: until you withdraw your consent or after 3 years of inactivity
  • Cookies: for a maximum of 13 months

When data is no longer needed, we delete it securely or anonymise it.

7. Your rights

Under the UK GDPR you have the right to:

  • Request access to your personal data
  • Ask us to correct inaccurate or incomplete data
  • Ask us to delete your data in some circumstances
  • Ask us to restrict how we use your data
  • Object to certain types of processing, including direct marketing
  • Request a copy of your data in a portable format

To exercise any of these rights, contact us at:
hello@createmystory.co.uk
We may ask you to confirm your identity before we act on your request.

You also have the right to make a complaint to the UK Information Commissioner’s Office (ICO):

https://ico.org.uk/make-a-complaint/

8. Cookies and tracking technologies

Our website uses cookies and similar technologies to improve your experience, analyse traffic and, where you agree,
show relevant content or offers.

8.1 Types of cookies we use

  • Essential cookies — needed for security, login, basket and basic site functions.
    These do not require your consent.
  • Analytics cookies — help us understand how visitors use the site
    (for example, pages visited and time spent). We only use them if you consent.
  • Marketing and social media cookies — used to show personalised content or to share
    content on social networks. These cookies also require your consent.

8.2 Cookie choices

When you first visit the site, a cookie banner lets you accept, refuse or manage non-essential cookies.
You can change your choices at any time by using the “Cookie settings” link on the site.

You can also control cookies in your browser settings. Blocking essential cookies may stop some parts of the site from working properly.

9. Children’s data

Our products are aimed at families and children, but the website is designed to be used by adults.
We do not intentionally collect personal data directly from children.

If you believe that a child has provided us with personal data, please contact us at
hello@createmystory.co.ukso we can remove it where appropriate.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law or how we use personal data.
When we make significant changes, we will update the date at the top of this page and may notify you by email or on the website.