bibi
Draft: needs legal review before launch. This text was drafted to be accurate and plain, but it is not legal advice.

Privacy policy

Last updated [DATE]

Bibi's Story is run by MCP Electrical Services Pty Ltd (ABN MCP Electrical Services Pty Ltd). We make personalised books about young children, so we hold some personal information about them. We take that seriously and collect as little as we can. This policy explains what we collect, why, who sees it, and how long we keep it. It is written to meet the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Who gives us information

Only a parent or guardian can make a book. Before you enter any details about a child, we ask you to confirm you are their parent or guardian and are allowed to give us those details. We do not collect information directly from children.

What we collect

About your childFirst name only; the date they arrived; optionally the time and weight; the town and place (for example a hospital, or home); optionally family members' and a pet's names; one thing they love; the message you choose; whether to include their star sign; your dedication; and the skin tone, hair colour and hairstyle you choose for the illustrations.
About youYour email address, whether you agreed to reminder and marketing emails, your delivery name, address and phone number, and a second address if you send a copy to someone else.
PaymentStripe processes payment. We never see or store your full card number.
Website useA random visitor ID and price group in first-party cookies, which pages of our order process you reached, and the advertising campaign that brought you (from the link). This is never linked to your child's details in our analytics.

We never ask for photos of your child, their surname, or what you or your family look like.

Why we use it

To show you a preview, make and print your book, deliver it, email you about your order, give you a digital copy, answer questions, and meet our legal and tax obligations. If you tick the box, we also email you a reminder if you don't finish, and occasional news. You can unsubscribe from those at any time with one click.

No artificial intelligence is used on your order. The story text is fixed and the illustrations were made in advance. Your child's details are never sent to an AI service.

Who we share it with

We share only what each service needs to do its job:

Prodigi (printer)The finished book file (which contains your child's details) and the delivery address, to print and post your book. Printing for Australian orders happens in Australia; Prodigi is a UK company and may process order data in the UK.
StripeYour email, payment and delivery details, to take payment. No child details.
RailwayHosts our website, database and files privately ([REGION: confirm the Railway region]).
ResendSends our emails (your email address and the email content). Based in the USA.
Sentry (if used)Reports website errors. Our error reports are set up to exclude child details.
Meta (Facebook, Instagram)When you buy, a scrambled (hashed) version of your email address and the order value, so we can tell which ads work. Nothing about your child. The Meta pixel runs only on our home page and thank-you page, never on the pages where you enter details.

Some of these services are overseas (mainly the USA and UK). We choose providers with strong security and contractual privacy commitments. We never sell personal information.

How long we keep it

Security

Files are kept in private storage and are only reachable through links that expire. Links to your preview and order use long random codes, and we never put your child's details in a web address. Access to our systems is limited and password protected.

Your choices and rights

You can ask to see, correct or delete the information we hold. Before your book is printed you can fix typos from your order page. You can delete your child's details from your order page once it has shipped, or use our delete my data page any time. You can use our website without giving us your name until you order.

Complaints

Email tyler@mcpelec.com.au. We'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Contact

MCP Electrical Services Pty Ltd, 36 abbott st Wallsend NSW 2287. tyler@mcpelec.com.au