Privacy policy

Privacy Policy

Last updated: 30 July 2026

The short version

  • You upload a photo of your child so we can illustrate them as the hero of their book. That photo is used only to create your preview and your book — nothing else.
  • If you don't buy, the photo and preview are automatically deleted 30 days after you create them.
  • We never sell your data, we never use your child's photos to train AI models, and we never use your child's likeness in our marketing without your explicit written permission.
  • You can ask us to delete everything at any time at info@luminarychapters.com.

The full details follow.

1. Who we are

Luminary Chapters is operated by “BM Tech Company” Limited, a company registered in Bulgaria (company no. (EIK) 208797240), with its registered address at 6 Nikolay Haytov St., Entrance B, Office 3, Iztok Residential Complex, Izgrev District, 1113 Sofia, Bulgaria (“Luminary Chapters”, “we”, “us”). We are the data controller for the personal data described in this policy.

Questions or requests: info@luminarychapters.com.

2. What we collect

Information you give us

  • Personalization data: your child's first name, the photo(s) you upload, and optionally your child's age.
  • Order data: your name, email address, shipping address, phone number, and order details.
  • Payment data: processed by our payment providers (see section 6). We never see or store your full card number.
  • Correspondence: anything you send us by email or chat.

Information collected automatically

  • Usage data: IP address, browser and device type, pages visited, and how you interact with the site, collected via cookies and similar technologies (see our Cookie Policy).
  • Preview session data: a random session identifier that links your uploaded photo to your preview. Your browser also keeps a local list of your saved previews on your own device.

3. Your child's photo — how it is handled

This is the most sensitive thing you trust us with, so here is exactly what happens:

  1. The photo you upload is transmitted over an encrypted connection (HTTPS) to our servers.
  2. It is processed on our own systems to generate the illustrations for your preview and, if you order, your book. We built and run this technology ourselves — your photo is never sent to a third-party AI service.
  3. If you do not purchase: the photo, the generated preview, and the session are automatically deleted 30 days after creation.
  4. If you purchase: we keep the photo and generated artwork only as long as needed to print your book and to honor our make-it-right guarantee, and no longer than 30 days after delivery (or, if you have an open make-it-right claim, until that claim is resolved), after which they are deleted. Your order record (without the photo) is kept as described in section 8.

We do not:

  • use uploaded photos or the resulting artwork to train AI models;
  • use facial recognition to identify anyone, or create or retain biometric identifiers or biometric templates from photos;
  • sell, rent, or share photos with anyone — illustration generation and printing happen on our own systems (section 6);
  • use your child's photo or likeness in advertising or on our website without your separate, explicit written consent.

4. Children's privacy

Our store is intended for adults. We do not knowingly allow anyone under 18 to create an account, upload photos, or place orders. All information about a child (name, age, photo) must be provided by the child's parent or legal guardian, or by an adult who has the parent's or guardian's express permission — you confirm this when you upload a photo. We collect information about children only from adults for the purpose of creating the personalized book, and we handle it as described in section 3. If you believe a child's information was provided to us without proper consent, contact us at info@luminarychapters.com and we will delete it promptly.

5. Why we process your data and on what legal basis

  • Creating your preview and book (personalization data, session data) — performance of a contract, and consent that you give when uploading a child's photo.
  • Fulfilling and delivering your order (order and payment data) — performance of a contract.
  • Customer support and the make-it-right guarantee — performance of a contract and our legitimate interest in resolving problems.
  • Legal obligations (accounting, tax, consumer law records) — compliance with legal obligations.
  • Improving our website (aggregated usage data) — our legitimate interest in running a good store.
  • Marketing emails — only with your consent; every email includes an unsubscribe link. We do not run marketing based on children's data.

6. Who we share data with

Only what each provider needs to do its job, under contracts that restrict any other use:

  • Shopify — hosts our store and processes orders (Shopify International Ltd. / Shopify Inc.).
  • Payment providers — Shopify Payments and the other payment methods offered at checkout process your payment.
  • Carriers — receive your name, address, and contact details to deliver your order.
  • Analytics and advertising providers — Google (Analytics 4, Tag Manager), Meta, and TikTok receive usage and event data so we can measure the site and our ads — never photos and never your child's details.

We may also disclose data if required by law, or in connection with a business sale or restructuring (in which case this policy continues to apply to your data). We never sell personal data.

7. International transfers

We are based in the European Union. Illustration generation happens on our own systems, but some of our providers (for example Shopify, Google, Meta, and TikTok) process data outside the European Economic Area, including in the United States. Where that happens, we rely on safeguards recognized under the GDPR — the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

8. How long we keep data

  • Uploaded photos and previews (no purchase): deleted automatically 30 days after the session is created.
  • Uploaded photos and artwork (after purchase): deleted no later than 30 days after delivery (kept longer only while a make-it-right claim is open).
  • Order and invoice records: kept for the period required by Bulgarian accounting and tax law (generally up to 10 years), without the photo.
  • Support correspondence: up to 2 years after the matter is closed.
  • Marketing consents: until you unsubscribe.

9. Your rights (GDPR)

You have the right to access, correct, delete, or receive a copy of your personal data; to restrict or object to our processing; and to withdraw consent at any time (this doesn't affect processing that already happened). To exercise any right, email info@luminarychapters.com — we respond within one month and never charge for a first request. You also have the right to lodge a complaint with a supervisory authority. Ours is the Bulgarian Commission for Personal Data Protection (cpdp.bg), but you may complain to the authority where you live.

10. US residents

We honor the rights above for all customers, wherever you live — including customers in the United States. Depending on your state (for example under the California Consumer Privacy Act), you may have specific rights to know, delete, and correct personal information and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information for anything beyond providing the service you asked for. To exercise any right, use the contact in section 9 — we do not discriminate against anyone for doing so.

11. Security

All traffic to our site and our personalization service is encrypted in transit. Access to uploaded photos is restricted to the systems and people who need it to create your book. No system is perfectly secure, but if a breach ever affects your data we will notify you and the relevant authority as required by law.

12. Changes to this policy

If we change this policy in a meaningful way, we will post the new version here with a new date, and — for significant changes affecting photos or children's data — tell you by email or a site notice before the change takes effect.

13. Contact

“BM Tech Company” Limited
6 Nikolay Haytov St., Entrance B, Office 3, Iztok Residential Complex, Izgrev District, 1113 Sofia, Bulgaria
Email: info@luminarychapters.com