Privacy Policy

The controller for the processing described here is Cambrian KlG, In der Luberzen 25, 8902 Urdorf, Switzerland (“Zukibooks”, “we”). For all matters concerning personal data: info@zukibooks.com.

Processing is governed by the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

This policy covers the zukibooks.com website, including the book-creation flow.

No customer account is created. Orders are identified by the e-mail address provided during the order process.

Order and contact data: e-mail address, delivery and, where applicable, billing address, the chosen delivery option, any promotion code, and — via the contact form — name, e-mail address and message.

Book data: the child’s first name, age and gender, and the options chosen for the book.

The uploaded photograph and the images generated from it (section 4).

Technical data: the data necessarily processed when the website is accessed. Payment card data is collected directly by our payment service provider and does not reach our systems.

The uploaded photograph is processed solely to produce the ordered book. It is transmitted to our image-generation provider together with the child’s first name, age and gender, and is deleted from our storage once the character has been generated; temporary copies used during the creation flow expire automatically.

The illustrations generated from the photograph form the content of the book and are retained in accordance with section 8.

We process order, contact and book data to conclude and perform the contract, including production, delivery and transactional messages such as the order confirmation (Art. 6(1)(b) GDPR).

The photograph is processed on the basis of the consent given during the creation flow (Art. 6(1)(a) GDPR); consent may be withdrawn at any time with effect for the future. Website analytics likewise runs only with consent (section 10).

Records of orders and payments are retained to meet statutory accounting and tax obligations (Art. 6(1)(c) GDPR). Measures to secure the service and prevent abuse are based on our legitimate interests (Art. 6(1)(f) GDPR).

We do not sell personal data and do not create user profiles.

We use processors for website hosting, database and file storage, image generation, payment processing, transactional e-mail and supporting infrastructure. Each receives only the data required for its task; card data is collected directly by our payment service provider. Where a printed book is ordered, the print and delivery partner receives the delivery name and address.

Data processing agreements in accordance with Art. 28 GDPR are in place with our processors. Data is transmitted in encrypted form and stored in access-controlled systems.

Some of our service providers process personal data in the United States. These transfers are safeguarded by data processing agreements incorporating the EU Standard Contractual Clauses, supplemented as required under Swiss data protection law; individual providers are additionally certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

Data entered during the creation flow is retained for seven days from the start of the session. Books begun but not ordered are deleted no later than six months after the last activity.

Customer and order records, including the generated book, are retained for ten years after the last order in line with statutory retention obligations, and thereafter deleted or anonymised.

The photograph is deleted as described in section 4.

All data concerning the child reaches us through the adult placing the order; we collect nothing from the child directly. By uploading the photograph and accepting our Terms of Service, the customer confirms that they are the child’s parent or legal guardian or that they have the parent’s or legal guardian’s permission to upload it.

A parent or legal guardian may request the deletion of the child’s data at any time at info@zukibooks.com; statutory retention obligations remain unaffected.

The website uses cookies that are technically required: a session cookie for the book-creation flow, valid for seven days, and a cookie storing the selected language. The consent choice itself is recorded in the browser’s local storage.

With your consent, the marketing pages use Google Analytics to measure use of the website; its cookies are set by Google. Without consent, the analytics script is not loaded. No analytics runs inside the book-creation flow, and no advertising cookies are set.

Consent may be given, refused or withdrawn at any time via “Cookie settings” in the page footer. Cookies may also be deleted in the browser’s settings at any time.

No decisions producing legal or similarly significant effects for you are taken on an automated basis.

You have the right to access the personal data we hold about you and to rectification, erasure, restriction of processing and data portability, and you may object to processing based on our legitimate interests. Consent may be withdrawn at any time with effect for the future.

Requests should be addressed to info@zukibooks.com, where possible from the e-mail address used for the order; we may request further information where necessary to verify identity, and we respond within one month. Data subject to statutory retention obligations is erased once those obligations expire.

You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, with your competent supervisory authority.

We may amend this policy; the version published on this page applies.

Cambrian KlG, In der Luberzen 25, 8902 Urdorf, Switzerland — info@zukibooks.com.