This policy explains what we do with your personal information when you order a book from yourcardstory.com or contact us.
1. Who is responsible
Your Card Story, of 26 Antonycha Street, Lviv, Lviv Oblast, 79049, Ukraine, is the controller of your personal data.
For any question about this policy or about your data, email hello@yourcardstory.com.
2. What we collect
When you place an order
- Your name, email address and phone number
- Your billing and delivery address
- What you ordered, including the book type, number of cards, and any title, names or book number you asked us to print
- Your order history and any notes you send us
Your cards
The photographs, scans and PDFs you upload, or the digital images we make from cards you post to us. These contain whatever your cards contain — handwriting, messages, names, dates, photographs.
Payment
We do not see or store your card number. Payment is processed by WayForPay, who handle your card details directly. We receive only confirmation that payment succeeded, and a transaction reference.
Automatically
- Your IP address, recorded when you approve a proof or request changes, as a record of who authorised printing
- Cookies set by WooCommerce to keep your order details in place as you move through the form
- [ANALYTICS — describe any analytics or advertising tools you use, or delete this line]
3. Cards containing other people’s information
This deserves saying plainly, because it is unusual.
The cards you send us were written by other people. They contain those people’s names, handwriting and words, and sometimes photographs of them. That is personal information about them, not just about you.
We use it only to make your book. We do not publish it, share it, sell it, or use it to train anything. It is not used in our marketing unless you give us separate, explicit permission — we will always ask.
By uploading or sending cards, you confirm you have the right to have them reproduced for your personal use.
4. Why we use it, and on what legal basis
| What for | Legal basis |
|---|---|
| Taking payment and fulfilling your order | Performance of our contract with you |
| Designing, proofing and printing your book | Performance of our contract with you |
| Emailing you about your order, proof and delivery | Performance of our contract with you |
| Recording your proof approval, including time and IP address | Our legitimate interest in proving what was authorised before printing |
| Keeping records for tax and accounting | Legal obligation |
| Marketing emails, if you ask for them | Your consent, withdrawable at any time |
5. Who we share it with
We do not sell your data. We share it only with the companies that make the service work:
- WayForPay — payment processing
- [PRINT PARTNER] — printing and binding your book. They receive your finished book files and delivery address.
- [SHIPPING CARRIER] — delivery. They receive your name, address and phone number.
- Hostinger — hosting the website and the files stored on it
- MailGun — sending the emails we send you
We may also disclose information where the law requires it.
6. Where your data is held
We are based in Ukraine, and your data is stored and processed here and by the providers listed above. If you are in the European Economic Area or the United Kingdom, this means your data is transferred outside it.
7. How long we keep it
| What | How long |
|---|---|
| Files uploaded by someone who never completes an order | Deleted automatically after 30 days |
| Your card images, once attached to an order | Kept while we need them to make, reprint or support your book. Deleted when you ask, or when the order is deleted. |
| Your proof and its approval record | Kept alongside the order |
| Order and payment records | [RETENTION PERIOD] years, as required for tax and accounting |
| Marketing consent, if given | Until you withdraw it |
Ask us to delete your files and we will, including the scans of your cards. Some order information has to be kept for the tax period above even after that.
8. Keeping it safe
Your uploaded files are not stored in a public folder and cannot be reached by guessing a web address. They are stored under randomised filenames and are served only to us, or to you through a private link tied to your order.
Proof pages are protected by a private link unique to your order. Anyone without that link cannot see your proof. Please do not forward it.
The site runs over an encrypted connection. No system is perfectly secure, but we take this seriously — these are your family’s words and photographs.
9. Your rights
You can ask us to:
- Give you a copy of the information we hold about you
- Correct anything that is wrong
- Delete your information, including your uploaded card images
- Restrict or object to how we use it
- Send your information to another provider
- Stop sending you marketing, at any time
Email hello@yourcardstory.com and we will respond within 30 days. There is no charge.
If you are unhappy with how we have handled your data you may complain to your national data protection authority, or in Ukraine to the Ukrainian Parliament Commissioner for Human Rights.
10. Cookies
We use cookies that are necessary for the site to work — keeping your book configuration and cart contents as you move between pages, and keeping you signed in if you have an account. These cannot be switched off without breaking the order form.
[Add any analytics or advertising cookies here, or state that you use none.]
11. Children
Our service is not directed at children, and we do not knowingly collect information from anyone under 16.
12. Changes
We will update this page when our practices change, and revise the date at the top. If a change is significant we will email you.
13. Contact
Your Card Story
26 Antonycha Street
Lviv, Lviv Oblast, 79049
Ukraine
hello@yourcardstory.com
+380 73 046 2170