Privacy notice

Privacy notice

Last updated 20 August 2026.

Who we are

Raising Legends is a trading name of Audley & Oxford Ltd, a company registered in England. We are the data controller for the personal data described in this notice. You can contact us at hello@raisinglegends.ai for any privacy question.

What we collect and why

We collect a small set of personal data to make and deliver your book:

• Your email address and shipping address — to deliver the book and send order updates. Lawful basis: performance of a contract.
• Your child’s first name and pronouns — to personalise the story text. Lawful basis: performance of a contract, with your explicit consent for using a child’s first name.
• A photograph of your child that you upload — to generate the illustrations that appear in your child’s book. Lawful basis: your explicit consent. You provide this photograph knowing that it will be used to generate illustrations for the book you have ordered.
• Payment details — Stripe handles these directly. We only see the last four digits of the card, the country, and the outcome of the payment. Stripe’s privacy notice covers their processing.
• Basic web analytics — anonymised counts of page visits. No personally-identifying analytics cookies.

Who we share your data with

• Supabase — our database and file storage. Data is stored in the EU region.
• Replicate (via the PuLID-Flux model) — the AI service that generates the illustrations. Your child’s photograph is sent to Replicate over an encrypted connection so that PuLID-Flux can produce illustrations that match your child’s face. Replicate deletes prediction inputs after the inference completes; we do not train any model with your photograph.
• Stripe — processes your payment.
• Lulu Direct — prints the hardback book and ships it. We share your name, shipping address and the finished PDFs.
• Resend — sends the confirmation and shipping emails from us to you.

We do not sell your data or your child’s photograph to anyone. We do not use it for marketing anything other than your own future orders.

How long we keep it

• Your child’s photograph: stored only as long as needed to generate the illustrations, plus 90 days after your order ships so we can honour reprints and complaints. You can request deletion sooner at any time by emailing hello@raisinglegends.ai.
• Generated illustrations: we keep the finished images and PDFs for as long as you have an account with us, so that reorders and gifts of the same book don’t require regeneration.
• Order records: retained for six years to meet UK accounting requirements.

Your rights

Under UK GDPR you have the right to:

• Ask us for a copy of the personal data we hold on you.
• Ask us to correct anything that is wrong.
• Ask us to delete your data, including your child’s photograph and any illustrations generated from it.
• Withdraw the consent you gave to us processing your child’s photograph. If you withdraw before your book has been printed we will offer a full refund; if you withdraw after, we will stop storing the photograph but the printed copy has already left our hands.
• Complain to the Information Commissioner’s Office at ico.org.uk if you think we have handled your data badly.

To exercise any of these rights, email hello@raisinglegends.ai. We will respond within 30 days.

Cookies

We use only essential cookies (session cookies for keeping you signed in, and a preferences cookie so we remember your cookie choices). We do not use any analytics or advertising cookies. There is no need for a cookie banner because we do not set anything non-essential.

Children’s data

The data controller for a child’s data is the child’s parent or legal guardian. By uploading a photograph and personal details of your child, you confirm that you have the authority to do so and that you consent on the child’s behalf. We treat children’s data with heightened care.

Contact us

Any question about your privacy — email hello@raisinglegends.ai.