Contents
  1. Who we are
  2. Information we collect
  3. How we use your information
  4. Your photographs
  5. How we share your information
  6. Data storage & security
  7. How long we keep your data
  8. Your rights
  9. Cookies
  10. Children's privacy
  11. Changes to this policy
  12. Contact us
01

Who we are

First Light Heirloom Books ("First Light," "we," "us," or "our") is a custom book studio that creates hand-bound heirloom storybooks from your child's first year of photographs. We operate the website at firstlightstorybooks.com and the photo submission portal at firstlightstorybooks.com/order.

For the purposes of applicable privacy law, First Light Heirloom Books is the data controller responsible for your personal information.

If you have any questions about this policy or how we handle your data, you can reach us at hello@firstlightstorybooks.com.

02

Information we collect

We collect only what we need to create your book and communicate with you about your order. This includes:

Information you provide directly:

Information collected automatically:

We do not collect payment card information directly. All payments are processed through secure third-party payment providers and we never see or store your card details.

03

How we use your information

We use the information you provide solely to fulfill your order and provide you with a great experience. Specifically, we use it to:

We do not use your information or your photographs for marketing, advertising, AI training, or any purpose beyond fulfilling your order and communicating with you about it.

We will never sell, rent, or trade your personal information or photographs to any third party, for any purpose, at any time.

04

Your photographs

We understand that the photographs you share with us are deeply personal — images of your child at their most vulnerable and precious. We treat them accordingly.

A note on AI processing: To create your book's illustrations, your photographs may be processed using the OpenAI API — a secure, enterprise-grade interface that is entirely separate from the consumer ChatGPT application. Under OpenAI's API terms, data submitted through the API is not used to train OpenAI's models by default. Your images are processed solely to fulfill your order and are not retained by OpenAI beyond their standard 30-day abuse-monitoring window, after which they are deleted. We do not opt in to any data-sharing arrangement with OpenAI.

By submitting photographs through our portal, you confirm that you are the owner of the images or have the right to use them, and you grant First Light a limited, non-exclusive license to use them solely for the purpose of creating your book.

05

How we share your information

We share your information only where necessary to fulfill your order. The third parties we work with include:

All third parties we work with are required to handle your data securely and use it only for the specific purpose we share it for. We do not sell, rent, or share your information for advertising or marketing purposes.

We may also disclose your information if required to do so by law, or to protect the rights, property, or safety of First Light, our customers, or others.

06

Data storage & security

Your data is stored on secure, encrypted cloud infrastructure. We use industry-standard security measures including HTTPS encryption for all data in transit, secure access controls, and regular security reviews.

Your photographs and order data are stored within secure cloud storage with restricted access — only team members directly involved in your order can access your files.

While we take every reasonable precaution to protect your data, no system is completely immune to risk. In the unlikely event of a data breach that affects your personal information, we will notify you promptly in accordance with applicable law.

07

How long we keep your data

If you would like your data deleted sooner, you can request this at any time by emailing hello@firstlightstorybooks.com. We will action deletion requests within 30 days, except where retention is required by law.

08

Your rights

Depending on where you live, you may have the following rights regarding your personal information:

To exercise any of these rights, email us at hello@firstlightstorybooks.com. We will respond within 30 days. We may need to verify your identity before actioning your request.

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA). If you are in the European Union or United Kingdom, you have rights under GDPR. We honor these rights regardless of where you are located.

09

Cookies

Our website uses a small number of cookies to ensure it works correctly and to understand how visitors use it.

We do not use advertising, tracking, or third-party marketing cookies. We do not share cookie data with any advertising platforms.

You can control cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use our website or place an order.

10

Children's privacy

Our services are intended for adults placing orders on behalf of their family. We do not knowingly collect personal information directly from children under the age of 13.

We do collect information about children — specifically, a child's name, date of birth, and photographs — as part of creating your commissioned book. This information is provided by the parent or guardian placing the order, and is used solely for the purpose of creating that book. It is handled with the highest level of care and confidentiality, and is never used for any other purpose.

If you believe we have inadvertently collected personal information directly from a child, please contact us at hello@firstlightstorybooks.com and we will delete it promptly.

11

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page.

If we make significant changes that affect how we use your personal information, we will notify you by email using the address associated with your order.

We encourage you to review this page periodically to stay informed about how we protect your information.

12

Contact us

If you have any questions, concerns, or requests relating to this privacy policy or how we handle your personal information, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.