How we look after your data

Forever Conversations creates personalised audio keepsakes from a child's voice. We are the data controller for the personal data you give us. If you have questions about this policy, use the chat helper at the bottom right of any page.

• Your details: name, email address, and (for card orders) a postal address for delivery.
• Your child's details: first name and age range, used to build age-appropriate questions.
• The recipient's details: their name, your relationship to them, the occasion, and (for card orders) their postal address.
• Voice recordings: audio of your child's answers and, if you choose, your own voice reading the questions.
• Payment information: processed by Stripe. We never see or store your card details.

We use your data only to create and deliver your keepsake:

• To generate personalised questions and produce the edited audio.
• To send you your private recording and listening links by email.
• To print and post the QR keepsake card if you ordered one.
• To process your payment and handle refunds if needed.
• To email you when your keepsake is ready.

We use Google Ads measurement cookies to understand how our advertising performs. These are only set if you accept them via our cookie banner, which is shown to visitors in the UK and other regions that require consent. We do not sell or share your data with third parties for their own purposes.

Because the recordings involve a child's voice, we require the purchaser to confirm at checkout that they are the child's parent or legal guardian, and that they give consent for the recording to be made and used as a keepsake. This consent is recorded with a timestamp and linked to your order.

You may withdraw consent at any time by emailing us. If you withdraw consent before the keepsake is published, we will delete the recordings. After publication, we will delete the recordings on request, though the finished keepsake remains available through your private listening link unless you ask us to remove it too.

The recipient of a keepsake can pick a moment of up to 30 seconds and ask to share it publicly (for example on social media). Nothing becomes public without your explicit approval as the child's parent or legal guardian: we email you a preview of the exact clip, and only if you approve does that clip get a public link. The full keepsake always stays private.

A shared clip shows only your child's first name and age range. You can revoke it at any time from your approval page, and the link stops working immediately. You can also ask us to remove it at any time.

• Raw voice recordings (individual answers and purchaser prompts): deleted within 30 days after the keepsake is published.
• Finished keepsake audio: retained for as long as your private listening link is active, or until you ask us to delete it.
• Order records: retained for 6 years for accounting and tax purposes, as required by UK law.
• Email addresses: retained with the order record; we do not send marketing emails.

All data is stored securely in our database and private file storage, protected by row-level security policies. Voice recordings are accessible only through your private, token-based links. They are not public. Access to recordings by staff is limited to those involved in producing and quality-checking your keepsake, and all staff actions are logged.

• Stripe: processes your payment. They receive your payment details directly; we do not.
• Prodigi: prints and posts the QR card if you ordered one. They receive the card address and artwork only.
• Our email provider: sends your order confirmation and keepsake-ready emails on our behalf.
• Google: receives measurement data from our advertising cookies, but only if you have accepted them via our cookie banner. This helps us understand which ads lead to purchases. See Google's privacy policy.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data and recordings
• Withdraw consent at any time
• Object to how we process your data
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, use the chat helper at the bottom right of any page. We respond within 30 days.

Your data is stored in the UK/EU. Our payment processor (Stripe) and print partner (Prodigi) may process data in their own regions under appropriate safeguards such as Standard Contractual Clauses.

We only create recordings with the consent of the child's parent or legal guardian. The child's voice is used solely to create the keepsake you ordered. We do not collect data directly from children. All information is provided by the purchasing adult.

We may update this policy as our service evolves. The version number and date above show the current version. When you place an order, we record which version you consented to.