Privacy policy
PRESTIGE VOF, trading as Dot & Moon. Reguliersdwarsstraat 1B, 1017 BJ Amsterdam, Netherlands. Registered with the Dutch Chamber of Commerce (KvK) under number 98108530. RSIN 868361653. VAT NL868361653B01. Email .
We are the data controller for the personal data described here.
A plain-English companion covering photographs specifically is at . Where the two differ, this document governs.
What we collect, and why
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Name, email, delivery address, phone | To take and deliver your order | Contract | 7 years (tax law) |
| Payment details | Processed by our payment provider; we never see full card numbers | Contract | See provider |
| The child's first name, age, dedication text | To make the book | Contract | 30 days after dispatch |
| Photograph you upload | To generate the illustration | Contract | 24 hours, whether or not you order |
| Order history | Support, reprints, accounting | Contract / legal obligation | 7 years |
| Site analytics | To improve the shop | Consent | 14 months |
| Marketing emails | Only if you ask for them | Consent | Until you unsubscribe |
Photographs
Photographs of children are the most sensitive thing we handle, so we are specific.
The illustration is generated by AI from the photograph you upload, and a specialist on our team reviews every book before it is printed. The image is processed through OpenAI's API on zero-data-retention terms: they generate the picture and do not keep the photograph afterwards.
We do not sell photographs. We do not share them for advertising. We do not authorise any provider we work with to use them to train or improve their AI models. We will not use a child's likeness in our own marketing without separate, specific permission for that image.
Every photograph is deleted automatically 24 hours after you order. That is the same 24 hours in which you can change a name, a spelling or the dedication — once the window closes your book goes to print and the photograph has done its job. If you only made a preview and did not order, it is deleted 24 hours after you upload it. Reprinting a damaged book needs the finished illustration, not the original photograph, so nothing is lost by deleting it. Deleted files may persist briefly in encrypted backups until those are overwritten, within 30 days.
If you are not the child's parent or guardian, you confirm when you upload that you have their permission. If a parent contacts us about an image of their child, we will delete it and confirm.
Who we share data with
We use processors who act only on our instructions:
- Shopify — shop platform and checkout (Canada / EU)
- Shopify Payments — card, Shop Pay, Apple Pay and Google Pay payments. We never see or store your full card number.
- Print and fulfilment partners — they receive the finished print file and your delivery address
- Klaviyo — email and SMS, if you have asked to hear from us
- Recharge — manages Book Club subscriptions, if you join one
- Trybe — collects and displays reviews, if you leave one
- Analytics — Shopify's own shop analytics and Klaviyo's on-site tracking, only with your consent
- OpenAI — generates the illustration from your photograph. We use their API on zero-data-retention terms, which means the image is processed to make your picture and is not kept by them.
We do not sell personal data. Where a processor is outside the EEA we rely on the European Commission's Standard Contractual Clauses.
Where you live
We are a Dutch company and we apply the GDPR standard to every customer, wherever you are. That is the floor, not the ceiling — you also keep whatever your own law gives you.
Europe and the UK. Access, correction, deletion, restriction, objection, portability and withdrawal of consent. You may complain to the Dutch Autoriteit Persoonsgegevens, your own national authority, or the UK's Information Commissioner's Office.
United States. If your state has a consumer privacy law — California, Virginia, Colorado, Connecticut, Texas, Oregon and others — you may ask what we hold, request a copy, have it corrected or deleted, and opt out of targeted advertising. We do not sell personal information and we do not share it for cross-context behavioural advertising. Photographs are never sold under any circumstances. Exercising a right will never cost you anything or get you a worse service, and we do not ask you to opt in first: your rights apply automatically.
Everywhere else. Canada, Australia, New Zealand, Brazil, Japan, Singapore and beyond all give you rights of access, correction and deletion under their own laws. Write to us and we will treat your request exactly as we would a European one, and point you to your national regulator if you want to complain.
To exercise any right, email . We reply within 30 days, and for photograph deletion the same working day.
Your rights
Whoever you are and wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, ask us to delete it, object to how we use it, or withdraw consent. The section above sets out the specific rights that apply where you live.
Sending data across borders
We ship worldwide, so your data travels. Your order details go to the production partner making your book and to the carrier delivering it, which may be in your own country or another one.
When personal data leaves the EEA we rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one exists, with encryption in transit. For UK customers we use the UK Addendum to those clauses. Ask us and we will tell you which safeguards applied to your order.
Children
Our shop is sold to adults. We do not knowingly collect data directly from children. We process a child's first name, age and likeness only on the instruction of the adult buying the book.
Cookies
Essential cookies keep the shop and basket working. Analytics and marketing cookies run only if you accept them. You can change your choice at any time in the banner on the site, or by emailing us and we will reset it for you.
Keeping it safe
Photographs and order data are held on access-controlled systems and encrypted in transit and at rest. Only the people who need it to make or support your order can reach it. We will not pretend this is perfect — no system is — but if we ever have a breach that puts your data at risk, we will tell you and the Autoriteit Persoonsgegevens within 72 hours, as the law requires.
If the business changes hands
If Dot & Moon is ever sold, merged or restructured, customer data may transfer to the new owner. If that happens we will email you first, and the commitments in this policy — particularly the ones about photographs — travel with the data. A buyer cannot acquire your child's photograph and decide to use it differently.
Changes
We will post changes here and, if they are significant, email anyone affected.
Last updated: 15 October 2026