1. Who we are
Adopt A Stork is operated by the legal entity identified on our imprint page. We are the data controller responsible for the personal data described in this policy. You can contact us at any time using the details on the imprint page.
2. The data we collect
We collect only what is needed to make and deliver your gift.
When you personalise a gift, we collect:
- The child’s name you enter.
- Your personal message.
- The sender’s name.
- The stork you choose.
If you order a printed card, we also collect:
- The recipient’s name and delivery address.
- Your email address for order updates.
When you pay, your payment details are collected and processed by Stripe, not by us. We do not see or store your full card number. We only receive a confirmation that payment succeeded, together with a transaction reference.
When you visit the site, standard technical information (such as your IP address and browser type) may be processed by our hosting provider in the ordinary course of serving the site securely.
3. How we use it, and our legal bases
| Purpose | Legal basis |
|---|---|
| To create your personalised card and keepsake | Performance of our contract with you |
| To process payment | Performance of contract |
| To print and ship a physical card | Performance of contract |
| To provide order updates and support | Performance of contract |
| To meet legal and accounting obligations | Legal obligation |
| To keep the service secure and prevent fraud | Legitimate interest |
We do not use your data for marketing, and we do not build profiles of you or your child. We do not sell, rent, or trade personal data.
4. Who we share it with
We share personal data only with the providers we rely on to run the service.
- Stripe processes payments. It receives your payment details directly; we do not.
- Our print partner, Prodigi, produces and ships a printed card to the address you provide when you choose print delivery.
- Cloudflare hosts the service and its database.
- Movebank is the source of the tracking data, which is public research data rather than data about you.
We require these providers to process your data only for the purposes we specify and to protect it appropriately. We do not otherwise disclose your data except where the law requires it.
5. Where it is stored and for how long
Your gift details are stored in our database, hosted by Cloudflare. Data may be transferred outside your country, including to the United States, subject to appropriate safeguards (such as Standard Contractual Clauses).
We keep your data only as long as necessary:
- Gift and keepsake details are kept while the gift is active.
- Payment and order records are kept as required for accounting and tax (typically several years).
- If you ask us to delete your data, we will do so unless we are legally required to keep it.
6. Cookies and analytics
The site does not use advertising cookies and does not run third-party analytics. Any cookies used are strictly necessary for the site to function (for example, security). If this ever changes, we will update this policy and, where required, ask for your consent before setting optional cookies.
7. Your rights
Depending on where you live (including if you are in the European Union or United Kingdom under the GDPR), you have rights over your personal data, including the right to:
- access a copy of the data we hold about you;
- correct inaccurate data;
- request deletion of your data;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent, where we rely on it.
To exercise any of these rights, contact us through the details on our imprint page. We will respond within one month. You also have the right to complain to your local data protection authority if you believe we have not handled your data lawfully.
8. Security
We use encryption in transit (HTTPS), access controls, and the security infrastructure of Cloudflare and Stripe to protect your data. No system is perfect, so we cannot guarantee absolute security, but we apply proportionate technical and organisational measures and keep them under review.
9. Children’s data
The service is intended for adults giving a gift to a child. The child’s name is provided by the gift-giver, not collected from the child. We do not knowingly collect data directly from children, and the service is not directed at children. If you believe a child has provided us data directly, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. Changes take effect when posted with a new “Last updated” date. Where a change is material, we will make it prominent on the site.
11. Contact
For any privacy question or request, use the contact details on our imprint page. We are happy to explain anything in this policy in plain language.