Starring You Books waitlist: privacy notice
Who we are. Your Evenings Ltd ("we") runs this waitlist for Starring You Books, a personalised storybook service we're planning. We're the controller of your personal data. Your Evenings Ltd, company number 17185055, 66 Paul Street, London, England, EC2A 4NA. ICO registration ZC183075. Contact: hello@yourevenings.com.
What we collect about you
- Quiz answers: who the book is for, whether you've bought one before, which book you'd choose, when you need it, and anything you add in the optional box. We save these whether or not you join the waitlist.
- Waitlist details, only if you tick the email box: your first name, your email, which ad or link brought you, the country your connection comes from, whether you pressed the deposit button, and a record of the box you ticked and when. If you don't tick the box, we save your quiz answers only, without your name, your email or anything about the child, and you're not on the waitlist.
- If you pay the £1/$1 deposit: Stripe processes the payment, and we receive your name, email, amount and payment status (never your full card number). We give Stripe a reference number for your waitlist entry, and your email only if you ticked the email box. We never send Stripe anything about the child.
- Anonymous totals: which page was visited, which buttons were clicked, which quiz options were picked, which country visits come from, and which ad or link brought you (UTM tags). These are stored as daily counts, not linked to you.
- A visitor code: when you join the waitlist, we save a short code made by hashing (scrambling) your IP address together with a secret value and the date. It lets us spot repeat or fake sign-ups without storing your IP address. We never store your IP address itself.
- A rate-limit code: to stop automated spam, we count sign-up attempts per hour using a hashed version of your IP address (with a secret value and the hour). We delete these counts within 3 hours.
- Cookies and the Meta Pixel, only if you press Accept on the cookie banner: we use the Meta Pixel to measure our ads and to show our ads to people who have visited. If you accept, your browser sends Meta Platforms Ireland Ltd which of these pages you viewed and these events: page viewed, product page viewed, quiz completed, joined the waitlist, deposit button pressed, and deposit paid (£1). Meta also receives your device and browser details, your IP address and cookie IDs (Meta's _fbp cookie, and _fbc if you came from a Meta ad). We never send Meta your name, your email, your quiz answers, anything about the child or your Stripe payment details. If you press Reject, or don't choose, no Meta code loads and no Meta cookies are set.
- Your cookie choice: we remember whether you pressed Accept or Reject in your browser's local storage, so we don't ask again on every page.
What we collect about the child, and only if you join the waitlist and confirm you're their parent or guardian, or have their permission
- Their first name, if you choose to give it. It's optional.
- Their age range, and up to 3 interests from our list (like "dinosaurs" or "space").
- We never ask for or accept photos. We don't want a surname, birthday, school, address, or anything about health or religion. Please don't type these in the optional box. If you do, we delete them.
Where it's stored
These pages are hosted by Cloudflare. Your answers, waitlist details and the totals are stored in a Cloudflare D1 database located in the EU.
Why we use it, and our lawful basis
| Purpose | Data | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Show the story idea and save your place | your details, quiz answers, child's first name and interests | Steps at your request before a possible contract (6(1)(b)). For the child's details, your confirmation as parent or guardian (6(1)(a) consent, which you can withdraw at any time) |
| Email you when founding places open, plus up to 3 launch updates (including one email after you sign up with a link to hold a place) | name, email | Your consent (6(1)(a)) |
| Decide whether to launch and what to make | quiz answers, combined into totals | Legitimate interests (6(1)(f)). Never used to profile the child |
| Take, hold and refund your deposit | payment details via Stripe | Contract (6(1)(b)), plus legal obligation for accounting records (6(1)(c)) |
| Measure our ads and show our ads to people who visited (Meta Pixel) | page and event data, device and cookie IDs, IP address | Your consent (6(1)(a)), and consent for cookies under PECR |
| Count visits and clicks | page, button and UTM counts | Legitimate interests (6(1)(f)) |
| Stop spam and repeat sign-ups | visitor code and rate-limit code | Legitimate interests (6(1)(f)) |
Who we share it with
Cloudflare, which hosts these pages and runs the database for us; Stripe (deposits); Zoho Corporation, which sends our emails to you and holds our email (Zoho Mail, EU data centre). Emails you send to hello@yourevenings.com are also copied to the inbox of the AI assistant that helps us run our email (Cursor, in the US). No print partner receives any data during this waitlist stage, and no AI provider receives your quiz answers or anything about the child. We don't sell data. Nothing about the child is ever shared for advertising. Where Stripe, Cloudflare or Cursor process data in the US, they do so under the UK's approved safeguards (the UK–US data bridge or the International Data Transfer Addendum). If you accept cookies, Meta Platforms Ireland Ltd receives the page, event, device and cookie data described above, to measure and show our ads. Meta may transfer this data to the US. Where it does, Meta relies on the UK Extension to the EU-US Data Privacy Framework, and standard contractual clauses where that doesn't apply. Meta's own privacy policy (facebook.com/privacy/policy) explains how it uses this data.
How long we keep it
- The child's first name, age range and interests: deleted on 30 December 2026 if you haven't placed an order, or 30 days after your book is delivered if you have. If we don't launch, within 30 days of deciding not to.
- Everything else: no later than 31 March 2027. The visitor code is deleted with your waitlist details. Rate-limit counts are deleted within 3 hours.
- Deposit records: 6 years, as UK tax law requires.
- Meta Pixel: Meta's _fbp cookie lasts up to 90 days in your browser; the _fbc cookie is set only if you came from a Meta ad. Meta keeps the event data under its own policy. Your Accept or Reject choice stays in your browser until you change it or clear your browser data.
- Totals with no names attached may be kept.
Your rights. You can ask to see, correct or delete your data (or the child's), object to how we use it, or ask for a copy. Withdraw consent or ask for deletion any time, through the unsubscribe link or by emailing hello@yourevenings.com. To withdraw consent to cookies, use the Cookie settings link at the bottom of any of these pages and press Reject. The Meta Pixel then stops loading and we remove its cookies from these pages. We'll delete the child's details within 7 days of asking. If you're unhappy, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
US visitors. We collect information about a child only from a parent or guardian, and only what's needed for their book. A parent or guardian can review or delete it at any time by emailing hello@yourevenings.com.
Automated decisions. The quiz adds up your answers to choose which message you see and the order we contact people in. Nothing has legal or similar effects.
Last updated 29 October 2026.