Last updated 4 September 2026
Privacy Notice
This notice explains how IMAGINERY uses personal information when an adult creates an account, submits a child’s drawing or story details, places an order, or contacts us.
Who is responsible for your information
IMAGINERY is operated by WONDRLY LIMITED, a company registered in England and Wales under company number 17284508. Our registered office is Beechwood, Bridle Way, Croydon, England, CR0 5AH. We are the data controller for the processing described here. Contact us at imagineryuk@gmail.com.
Who the service is for
IMAGINERY is intended for adult parents, guardians and gift purchasers. Children should not create accounts or submit information directly. The adult submitting a child’s name, interests, drawing or photograph must have authority to do so.
Information we collect
We process account and sign-in details; names and contact information; a child’s first name, age band, interests and other story choices; submitted drawings and generated artwork or stories; order, delivery and payment-status information; support messages; and limited device, security and service logs. Stripe handles card details, and we do not receive or store complete payment-card numbers.
Why we use it
We use information to provide accounts, generate personalised products, take payment, deliver orders, answer support requests and prevent misuse. Our legal bases are performing our contract with you, complying with legal obligations, and our legitimate interests in operating and securing the service. We rely on consent where the law requires it, such as for optional marketing communications. You may withdraw consent at any time without affecting earlier lawful processing.
Services that help us operate IMAGINERY
We use carefully selected service providers to process information on our behalf: Render for hosting, Supabase for authentication, database and storage, Stripe for payments, OpenAI for assisted content generation, Resend for transactional email, and Google when you choose Google sign-in. We share only what is needed for each service. We may also disclose information when required by law or in connection with a lawful business reorganisation.
International transfers
Some providers may process information outside the United Kingdom. Where this happens, we require an appropriate legal safeguard, such as an adequacy regulation or approved contractual protections. Contact us if you would like information about the safeguard used for a particular transfer.
How long we keep information
We keep account content while your account is active and for as long as reasonably needed to provide or recover your products. Order and accounting records are retained for the period required by law. Support and security records are kept only as long as needed to resolve issues, protect the service and establish legal claims. A minimal suppression record may be retained to respect an unsubscribe, complaint or delivery block. We delete or anonymise information when it is no longer needed, unless the law requires longer storage.
Your rights
Depending on the circumstances, you may ask to access, correct, erase or restrict your information, object to processing, or receive portable information. You may complain to the UK Information Commissioner’s Office at ico.org.uk, although we would appreciate the opportunity to address your concern first. We do not use personal information to make solely automated decisions that have legal or similarly significant effects; AI is used to help create the content you request.
Security and changes
We use access controls, encryption in transit and service-provider safeguards designed to protect information. No online system is completely risk-free. We may update this notice when the service or law changes and will publish the new date on this page.