Privacy Policy & GDPR Notice
Effective date: 14 October 2026
1. Data Controller
The data controller is Othermynd Limited
Registered office: 5c Milton Road, London SE24 0NL
Email: privacy@colourdoodle.com
2. Personal Data We Collect
We collect the following data:
- Email address
- First and last name
- Uploaded images
- Generated colouring pages
- Payment information (processed by Stripe; we do not store card details)
- Essential authentication cookies
- Anonymous counts of which pages of the site each browser reaches (see Cookies below)
- If you accept Meta cookies: Meta's cookies, and details of a purchase shared with Meta (see Cookies below)
3. How We Use Your Data
We use your data to:
- Create and manage your account
- Process images and generate colouring pages
- Deliver purchased products
- Provide customer support
- Prevent fraud and misuse
4. Lawful Bases (GDPR)
We process personal data under the following lawful bases:
| Purpose | Lawful Basis |
|---|---|
| Account creation | Contract |
| Image processing | Contract |
| Payment processing | Contract |
| Customer support | Legitimate interest |
| Fraud prevention | Legitimate interest |
If we introduce analytics or advertising tools in the future, we will rely on consent where required.
5. Image Processing & Storage
- Images are stored securely.
- Retained only to provide ongoing access to your content.
- Deleted when you delete them or close your account.
- Not used for training AI models or marketing.
6. Third-Party Processors
We use trusted third parties to operate the Service, including:
- Supabase (authentication & database)
- Stripe (payments)
- Meta Platforms (measuring our Facebook and Instagram ads, only if you accept Meta cookies)
- Google Gemini (AI image processing)
All processors act under appropriate data protection agreements.
7. Cookies
We use essential cookies to:
- Maintain login sessions
- Secure the Service
- Remember your cookie choice
Meta (advertising), only if you accept. We ask when you first visit. If you accept, Meta's pixel sets cookies so we can see which of our Facebook and Instagram ads lead to visits and orders. When you buy, we also tell Meta about the purchase from our server (its value, and your email address in a scrambled, hashed form) so it is counted even if the pixel was blocked. If you reject, or haven't chosen, nothing is sent to Meta.
Anonymous visit counting. To see where people stop when making a book, your browser keeps a random id and tells us, once each, which steps of the site it reaches, and whether it came from one of our ads. It doesn't include your name, email or photos, and isn't shared with anyone. You can turn it off below.
Meta cookies: not chosen yet.
Anonymous visit counting: on.
8. Your Rights (GDPR)
You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion
- Restrict or object to processing
- Data portability
- Lodge a complaint with the ICO (UK)
To exercise these rights, contact privacy@colourdoodle.com
9. Data Security
We use appropriate technical and organisational measures to protect your data.
10. Children
Our Service is not directed to children under 13. We do not knowingly collect their personal data.
11. Changes
We may update this policy from time to time. Material changes will be communicated via the Service.
