Privacy policy

Last updated: September 29, 2026

Little Keepsly operates this store and website, including all related information, content, features, tools, products, and services in order to provide our customers with personalized products and a curated shopping experience (the “Services”).

Little Keepsly is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, store, and disclose personal information when you visit or use our website, place an order, purchase a personalized product, upload personalization information or photographs, communicate with us, or otherwise interact with our Services.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. Who We Are

For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”), the controller responsible for the processing of your personal information is:

Little Keepsly
Legal name: Roman Kovalchuk
Email: littlekeepsly@gmail.com
Business Address: Finkenweg 19, 58640 Iserlohn-Kalthof, Germany

2. Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or another person, or that can reasonably be linked to an identifiable person.

Depending on how you interact with our Services, we may collect or process the following categories of personal information:

Contact information, including your name, email address, telephone number, billing address, and shipping address.

Payment and transaction information, including payment method, payment confirmation, transaction details, products purchased, order history, refunds, and other information relating to your transactions. Payment card information may be processed directly by Shopify or our payment providers rather than by Little Keepsly.

Account information, where applicable, including account details, preferences, and settings.

Personalization information, including information you provide to create a personalized product, such as a child’s name, selected character, dedication, personal message, wishes, gift giver information, and other personalization details.

Customer-provided photographs, where a product offers photo personalization. These may include photographs of children or other individuals voluntarily uploaded by the customer for the purpose of creating the personalized product.

Communications with us, including information contained in customer service inquiries, emails, requests, complaints, reviews, or other communications.

Device and technical information, including information about your device, browser, operating system, network connection, IP address, device or online identifiers, and similar technical information.

Website and usage information, including pages viewed, products viewed, interactions with our website, referring pages, approximate location derived from technical information, session information, and information about how and when you interact with our Services.

Advertising and analytics information, including interactions with advertisements, campaign information, referral information, conversions, and other information generated through analytics and advertising technologies.

3. Sources of Personal Information

We may collect personal information:

  • directly from you when you place an order, personalize a product, upload a photograph, contact us, create an account, or otherwise provide information to us;
  • automatically through our website and your device, including through cookies, pixels, tags, and similar technologies;
  • from Shopify and service providers supporting our store;
  • from payment, production, fulfillment, and shipping providers;
  • from analytics and advertising services, including Google, Meta, and TikTok where applicable;
  • from review, communication, and marketing service providers; and
  • from other third parties where permitted by applicable law.

4. How We Use Personal Information

Providing and Fulfilling Orders

We use personal information to process orders and payments, create personalized products, arrange production and fulfillment, provide shipping, communicate information about your order, handle customer service inquiries, and otherwise perform our contract with you.

Creating Personalized Products

Personalization information is used to create the personalized product you ordered.

This may include a child’s name, selected character, dedication, wishes, personal messages, gift giver information, or other information you voluntarily provide.

We use this information only as reasonably necessary to prepare, produce, fulfill, and support your personalized order.

Customer-Provided Photographs

Certain Little Keepsly products may allow you to upload a photograph for use in a personalized book.

The photograph is used for the purpose of creating and fulfilling the personalized product you requested.

Where image enhancement, adaptation, or other technical processing is necessary or requested in connection with your personalized product, the photograph may be processed using third-party technical service providers, including AI-assisted image-processing services.

Such processing is performed solely for the purpose of preparing the image for the personalized product.

We do not use customer-uploaded photographs for advertising, unrelated marketing, or the creation of unrelated products.

Customer-uploaded photographs used for personalization are deleted after the order has been fulfilled.

Because photographs are deleted after fulfillment, we may not be able to reproduce the same personalized image for a later order or reprint unless you provide the photograph again.

Customer Support

We use personal information to respond to questions, investigate problems, process appropriate refunds or replacements, and provide customer service.

Analytics and Website Improvement

We may process information about how visitors interact with our website to understand website usage, measure performance, identify technical problems, improve our products and Services, and improve the customer experience.

Advertising and Marketing

Subject to applicable consent requirements, we may process information to measure advertising performance, understand whether advertisements result in visits or purchases, create or measure advertising audiences, conduct remarketing, and provide more relevant advertising.

Security and Fraud Prevention

We may process information to protect our store, customers, and Services; detect and investigate suspected fraud, abuse, illegal activity, or security incidents; and maintain the security of our systems.

Legal Obligations

We may process and retain information where necessary to comply with applicable legal, accounting, tax, regulatory, or other obligations or to establish, exercise, or defend legal claims.

5. Legal Bases for Processing

Where the GDPR or similar laws apply, we process personal information on one or more appropriate legal bases depending on the circumstances.

These may include:

Performance of a contract — where processing is necessary to process your order, create your personalized product, arrange payment, production, fulfillment, and delivery, or provide requested customer service.

Legal obligations — where processing is necessary to comply with tax, accounting, consumer protection, regulatory, or other legal requirements.

Legitimate interests — where processing is necessary for legitimate business purposes such as securing our Services, preventing fraud, improving our store, managing our business, or defending legal claims, provided those interests are not overridden by your rights and interests.

Consent — where we rely on your consent for particular processing, including certain analytics, advertising, marketing communications, cookies, pixels, and similar technologies.

Where processing is based on consent, you may withdraw your consent at any time as permitted by applicable law.

6. Children's Personal Information

Our website, checkout, and purchasing Services are intended for adults and are not intended to be used directly by children.

However, Little Keepsly creates personalized children’s books. As a result, an adult customer may voluntarily provide limited personal information relating to a child for the purpose of creating a personalized product.

This information may include:

  • the child’s name;
  • selected character;
  • dedication or personal messages relating to the child;
  • other personalization details; and
  • where offered, a photograph of the child.

By submitting personal information or a photograph relating to a child, you confirm that you are the child’s parent or legal guardian, or that you otherwise have the necessary authority or permission to provide that information for the purpose of creating the personalized product.

We process children’s information only as reasonably necessary to create, produce, fulfill, and support the personalized order.

We do not use a child’s uploaded photograph for advertising or unrelated marketing purposes.

Where necessary or requested for creation of the personalized product, photographs may be processed using third-party technical service providers, including AI-assisted image-processing services.

Customer-uploaded photographs are deleted after the order has been fulfilled.

If you believe that personal information relating to a child has been provided to us without appropriate authority or permission, please contact:

littlekeepsly@gmail.com

We will review the request and take appropriate action, including deletion where required.

7. Analytics and Advertising Technologies

We use or may use the following technologies to understand website activity, measure the effectiveness of our advertising, and market our products.

Google Analytics 4 (GA4)

We use Google Analytics 4 (“GA4”), a web analytics service provided by Google.

Google Analytics helps us understand how visitors use our website, including information about website visits, pages viewed, interactions, devices, referral sources, and conversions.

Depending on your consent choices and our configuration, Google Analytics may use cookies or similar technologies and process technical and usage information.

Where required by applicable law, Google Analytics processing that requires consent is activated or adjusted according to your consent choices.

Google Consent Mode

We use Google Consent Mode to communicate visitors’ consent choices to Google services.

Google Consent Mode allows Google tags to adjust their behaviour based on whether consent has been granted or denied for relevant purposes such as analytics and advertising.

Depending on the implementation and your consent choices, Google services may process consent signals and, in certain configurations, limited cookieless measurement information even where consent for particular cookies has not been granted.

Google documents that Consent Mode can control categories including analytics_storage, ad_storage, ad_user_data, and ad_personalization.

Meta Pixel

We use or may use the Meta Pixel, provided by Meta Platforms, to measure the effectiveness of advertising, understand interactions with our website, measure conversions, and support advertising and remarketing activities.

Depending on our configuration and your consent choices, the Meta Pixel may process information about your browser or device, pages visited, interactions with our website, purchases or other conversion events, and advertising-related information.

Where required by applicable law, the Meta Pixel will be used for non-essential tracking or advertising purposes only in accordance with your applicable consent choices.

TikTok Pixel

We use or may use the TikTok Pixel, provided by TikTok, to measure advertising performance, understand website interactions and conversions, and support advertising and remarketing activities.

Depending on our configuration and your consent choices, the TikTok Pixel may process information relating to your device or browser, website interactions, pages visited, purchases or conversion events, and advertising-related information.

Where required by applicable law, the TikTok Pixel will be used for non-essential tracking or advertising purposes only in accordance with your applicable consent choices.

8. Cookies and Consent Choices

Our website uses cookies and similar technologies necessary for the operation, security, and functionality of the website.

With your consent where required, we may also use analytics and advertising technologies, including:

  • Google Analytics 4;
  • Google advertising technologies;
  • Meta Pixel;
  • TikTok Pixel; and
  • similar measurement or advertising technologies.

You can manage available privacy and cookie choices through the consent controls provided on our website.

Where applicable, your consent choices may control whether analytics or advertising storage is permitted and whether information may be used for advertising measurement or personalization.

Google specifically requires consent signals for certain measurement and advertising uses involving EEA users and provides Consent Mode for communicating those choices.

You may withdraw or change your consent choices where the website's consent controls provide this functionality.

9. How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business and provide the Services.

These recipients may include:

  • Shopify, which provides our ecommerce platform;
  • payment processors and payment service providers;
  • professional production and fulfillment partners;
  • shipping and delivery providers;
  • hosting, cloud storage, IT, and technical service providers;
  • image-processing providers, including AI-assisted processing services where used for personalized photographs;
  • Google, for analytics, measurement, advertising, and related services;
  • Meta, where Meta Pixel or Meta advertising services are used;
  • TikTok, where TikTok Pixel or TikTok advertising services are used;
  • review and customer communication providers;
  • marketing service providers;
  • professional advisers and authorities where required by law.

We seek to provide service providers only with information reasonably necessary for the relevant service.

We may also disclose information where required to comply with law, legal process, court orders, regulatory requirements, or to protect our rights or the rights and safety of others.

10. Production and Fulfillment Partners

We work with professional production and fulfillment partners to manufacture and deliver our products.

To fulfill an order, we may provide these partners with information necessary for production and delivery, such as order details, shipping information, and the personalized product file.

We seek to limit information shared with production and fulfillment partners to what is reasonably necessary to complete the order.

11. Relationship with Shopify

Our store is powered by Shopify.

Shopify collects and processes personal information relating to your access to and use of our store in order to provide ecommerce services and related functionality.

Information submitted through our Services may therefore be transmitted to and processed by Shopify and its service providers, including in countries other than the country in which you reside.

Shopify may also process certain information independently for purposes described in its own privacy documentation.

You can learn more through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

12. Third-Party Websites and Services

Our Services may contain links to websites or online services operated by third parties.

If you follow a link to a third-party website or service, its own privacy policy and terms will apply.

We are not responsible for the privacy or security practices of third-party websites that we do not control.

13. Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

However, no method of transmission over the internet or electronic storage system can guarantee absolute security.

You should avoid sending sensitive or confidential information through unsecured communication channels.

14. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing the Services, maintaining appropriate business and transaction records, complying with legal, tax, accounting, and regulatory obligations, resolving disputes, and establishing or defending legal claims.

Different categories of information may therefore have different retention periods.

Customer-uploaded photographs used to create personalized products are deleted after the relevant order has been fulfilled.

Other order information, including transaction, invoice, accounting, shipping, and legally required business records, may be retained for longer periods where required by applicable law.

15. Your Privacy Rights

Depending on where you live and applicable law, you may have some or all of the following rights regarding your personal information:

  • the right to request access to personal information we hold about you;
  • the right to request correction of inaccurate information;
  • the right to request deletion of personal information;
  • the right to request restriction of certain processing;
  • the right to object to certain processing;
  • the right to data portability in applicable circumstances;
  • the right to withdraw consent where processing is based on consent; and
  • the right to lodge a complaint with an appropriate data protection authority.

These rights are subject to applicable legal requirements, limitations, and exceptions.

To exercise an applicable privacy right, contact us at:

[CONTACT EMAIL — ADD]

We may need to verify your identity before processing certain requests.

We will not discriminate against you for exercising privacy rights available under applicable law.

16. Marketing Preferences

You may unsubscribe from promotional emails at any time by using the unsubscribe link contained in the relevant email.

Even if you unsubscribe from marketing communications, we may still send transactional or service-related communications necessary for your orders, account, customer service requests, or our legal obligations.

17. International Transfers

Because we operate an international ecommerce business and use service providers that may operate in multiple countries, personal information may be transferred, stored, or processed outside the country in which you reside.

Where personal information protected by the GDPR is transferred outside the European Economic Area, we rely on applicable lawful transfer mechanisms where required, such as an adequacy decision, Standard Contractual Clauses, or another legally recognized safeguard.

18. Complaints

If you have concerns about how Little Keepsly processes personal information, please contact us first at:

[CONTACT EMAIL — ADD]

We will review your concern and respond as required by applicable law.

Where applicable, you also have the right to lodge a complaint with the competent data protection supervisory authority.

For customers in the European Economic Area, information about national supervisory authorities is available from the European Data Protection Board.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technologies, service providers, business practices, or legal and regulatory requirements.

When we update this Privacy Policy, we will update the “Last updated” date at the top of this page and provide any additional notice required by applicable law.

20. Contact

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise an applicable privacy right, please contact:

Little Keepsly
Legal name: Roman Kovalchuk
Email: littlekeepsly@gmail.com
Business Address: Finkenweg 19, 58640 Iserlohn-Kalthof, Germany

For purposes of applicable data protection laws, Roman Kovalchuk, trading as Little Keepsly, is the controller responsible for your personal information.