1. Introduction
Hear Their Name ("we", "us", "our", or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal data in connection with our personalised audio story service for children.
Hear Their Name is operated by BuiltSmarter, a UK-based business. We comply with the UK GDPR and other applicable data protection laws.
2. What Personal Data We Collect
When you purchase and use Hear Their Name, we collect the following personal data:
Data You Provide Directly:
- Child's name
- Child's age
- Child's gender
- Child's interests and preferences
- Names of the child's friends (if provided)
- Family member names and details (if provided)
- Your email address
- Payment information (processed by Stripe, not stored by us)
Data Collected Automatically:
- IP address and device identifiers
- Browser type and version
- Pages visited and interaction data
- Cookies and analytics data (see section 7)
3. How We Use Your Data
We use your personal data only for the following purposes:
Primary Purpose:
Story Creation and Delivery: All data provided is used exclusively to create personalised audio stories tailored to your child. We use this data to craft story content that matches your child's interests, age, and preferences, and to generate voice narration through our partner ElevenLabs.
Secondary Purposes:
- To process your payment via Stripe
- To send you important service updates and responses to your inquiries via Resend email service
- To improve our service and troubleshoot technical issues
- To comply with legal obligations
We will never share or sell your data to third parties. We do not use personal data for marketing purposes or to build profiles beyond what is necessary for service delivery.
4. Legal Basis for Processing
Under UK GDPR, we process your data based on the following legal grounds:
- Contract: Processing is necessary to provide the Hear Their Name service you have purchased (Article 6(1)(b))
- Consent: For children's data, we rely on parental consent via account acceptance
- Legitimate Interest: To improve service quality and prevent fraud (where not overridden by your rights)
- Legal Obligation: To comply with tax, accounting, and law enforcement requirements
5. Who We Share Data With
Your data is only shared with the following essential service providers who act as Data Processors under Data Processing Agreements:
- Anthropic Claude: AI model used to generate personalised story content
- ElevenLabs: Voice synthesis service for audio narration
- Supabase: Cloud storage for generated audio files
- Stripe: Payment processor (card details not stored by Hear Their Name)
- Resend: Email delivery service for communications
- Google Analytics (GA4): Website analytics (see section 7)
- Meta Pixel: Marketing analytics (see section 7)
- TikTok Pixel: Marketing analytics (see section 7)
These service providers are contractually obligated to process data only as needed to provide their services and to maintain the confidentiality and security of your data.
We may also disclose data if required by law, court order, or to protect our legal rights, or if required by government authorities.
6. Data Retention
- Audio Stories: Kept indefinitely unless you request deletion
- User Account Data: Retained while your account is active
- Payment Records: Retained as required by UK tax laws (typically 6 years)
- Marketing Data: Retained until you unsubscribe or request deletion
- Analytics Data: Retained by Google Analytics, Meta, and TikTok according to their policies
You can request deletion of your data at any time by emailing jamie@heartheirname.com. We will delete personal data within 30 days, except where retention is required by law.
7. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies for the following purposes:
Essential Cookies:
- Session cookies to maintain your login and cart functionality
Analytics and Marketing Cookies:
- Google Analytics (GA4): To understand how users interact with our site
- Meta Pixel: To track conversions and optimise advertising
- TikTok Pixel: To track conversions and optimise advertising
These cookies may track your behaviour across multiple websites. You can control cookie preferences through your browser settings or opt out through each provider's privacy controls.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right to Access: Request a copy of all data we hold about you
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (right to be forgotten)
- Right to Restrict Processing: Request we limit how we use your data
- Right to Data Portability: Request your data in a portable format
- Right to Object: Object to certain types of processing, including marketing
- Rights Related to Automated Decision Making: Right not to be subject to decisions based solely on automated processing
To exercise any of these rights, please email jamie@heartheirname.com with your request. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
- Encryption of data in transit and at rest
- Secure cloud storage via Supabase
- Limited access to data on a need-to-know basis
- Regular security reviews
While we take security seriously, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
Hear Their Name is designed for children aged 2-14. We recognise the special importance of protecting children's privacy:
- Parents or guardians must provide consent for children's data processing
- We do not collect data directly from children
- We do not use children's data for marketing or profiling
- Children's interests are used only to personalise their stories
- We do not sell or share children's data with third parties
11. International Data Transfers
Some of our service providers (Anthropic, ElevenLabs, Stripe, Google, Meta, TikTok) may process data outside the UK. Where transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing your information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, for significant changes, by email to the address associated with your account.
14. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we process your data, please contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have violated your data protection rights.