Free shipping when you buy 2 or more books! 50% off the 3rd hardcover book

Free shipping when you buy 2 or more books!

Privacy Policy

We, Magical Children's Book (trading name of Nextkit), Eburonenweg 20, 6224 HW Maastricht, The Netherlands – Chamber of Commerce 59540028 – VAT NL001784063B13, (hereinafter "we", "us", or "our"), value your privacy and handle your personal data with care. This privacy policy is intended to inform you about what data we collect when you use our website https://magicalchildrensbook.com (hereinafter: "the Website"), place an order, or otherwise contact us. We explain how we use this data, how it is stored, with whom it may be shared, and what rights you have regarding your data. By using our Website, you agree to the terms of this privacy policy.

1. Personal Data Collected

We collect various types of personal data to provide and improve our services:

1.1 Data you provide directly to us

  • Contact and Account Data: Your name, email address, password (encrypted) when you create an account.
  • Order Data: Address details (billing and shipping address) for shipping physical books.
  • Personalization Data: The name(s) to be included in the book, chosen story steps, and textual instructions (prompts) you enter. Note: do not enter sensitive medical or special category personal data in the free text fields.
  • Uploaded Images: Photos you upload for personalizing the illustrations. These are analyzed by our AI systems to generate an illustration resembling the character.
  • Communication Data: Data you provide when you contact us via email or other communication channels.
  • Payment Data: This is not stored directly by us but processed by our external payment provider Mollie B.V. We only receive a confirmation of the payment.

1.2 Data collected automatically

When you visit our Website, we may automatically collect certain data via cookies and similar tracking technologies (see also Article 6 ‘Cookies and Tracking Technologies’):

  • Technical Data: IP address, browser type and operating system, device data.
  • Usage Data: Pages visited, click behavior, duration of your visit, and interactions on the Website.

2. Purposes of Data Processing

We process your personal data exclusively for the following purposes:

  • Creating and managing your account.
  • Processing, producing, and handling your orders.
  • Generating personalized children's books (both eBooks and physical books) using AI technology.
  • Checking textual input for conflicts with our terms and conditions (e.g., detection of copyrighted terms or inappropriate content).
  • Shipping your ordered products (physical books) and making digital eBooks available for download.
  • Communicating with you about your order, answering your questions, or providing customer service.
  • Sending service-oriented emails (e.g., order confirmations, shipping notifications).
  • Improving our products, services, and the functionality of our Website.
  • Analyzing website usage to optimize user-friendliness (anonymized where possible).
  • Complying with legal obligations, such as tax retention duties.
  • Preventing fraud and misuse of our services.

3. Legal Grounds for Processing

We process your personal data based on the following legal grounds (GDPR):

  • Performance of the agreement (Art. 6(1)(b) GDPR): For processing your order, delivering the products, and managing your account.
  • Consent (Art. 6(1)(a) GDPR): For the use of the photos you upload and specific personalization data for creating the children's books. You give this consent when uploading and confirming your choices. You have the right to withdraw this consent at any time, although this does not affect the lawfulness of processing before the withdrawal.
  • Legal obligation (Art. 6(1)(c) GDPR): To comply with our administrative and fiscal obligations.
  • Legitimate interest (Art. 6(1)(f) GDPR): For fraud prevention, enforcing our terms and conditions (preventing intellectual property infringement), and improving our services.

4. Sharing Personal Data with Third Parties

We do not sell your personal data to third parties. We only share your data with third parties if necessary for the performance of our services. We conclude Data Processing Agreements (DPAs) with these parties. A detailed list of our current sub-processors is available upon request. This concerns the following categories:

  • Payment Providers (e.g., Mollie B.V.): For the secure processing of your payments.
  • Shipping Partners and Printing Facilities: For the production and delivery of physical products.
  • Hosting and IT Service Providers: For hosting the Website and data storage.
  • AI Technology Providers: Specialized parties for generating texts and illustrations via artificial intelligence. Your uploaded photos and textual input (prompts) are processed by these systems to create the final product.
  • Analytics Services (e.g., Google Analytics): For analyzing website usage (anonymized as much as possible).
  • Authorities: If required by law.

Transfer outside the EEA

Because we use advanced third-party AI technology, your data (including photos and prompts) may be processed on servers outside the European Economic Area (EEA), particularly in the United States. We ensure that we only work with parties that offer an appropriate level of protection in accordance with the GDPR, for example via certification under the Data Privacy Framework or through EU-approved Standard Contractual Clauses (SCCs).

5. Retention Periods

We do not retain your personal data longer than is strictly necessary to realize the purposes for which your data is collected, or as required by law. We apply the following retention periods:

  • Account Data: As long as your account is active, or until you request deletion.
  • Order and Invoice Data: At least 7 years, in accordance with the statutory retention obligation for tax authorities.
  • Data for Personalization (Photos and eBooks): The photos uploaded by you AND the digital eBooks generated from them (hereinafter: "the project files") are stored for a maximum of 10 weeks, calculated from the moment of creation. We apply this period to ensure your privacy. After 10 weeks, these files are automatically and permanently deleted. You must download your eBook within this period.
  • Communication Data: Up to 2 years after handling your question or complaint.

6. Cookies and Tracking Technologies

We make use of cookies and similar technologies (such as pixels and local storage) to analyze the use of our Website, improve functionality, and, with your consent, for marketing purposes. Cookies are small text files placed on your device when you visit our Website. We use the following types of cookies:

  • Functional (Necessary) Cookies: These cookies are essential for the correct functioning of the Website. They ensure you can navigate, log in, and place products in your shopping cart and order them.
  • Analytical Cookies: These cookies help us understand how visitors use the Website (e.g., which pages are popular, how long visitors stay). This allows us to optimize the Website. The data is anonymized as much as possible.
  • Marketing Cookies (if applicable and with consent): These cookies can be used to track your browsing behavior and show you relevant advertisements based on that on our Website or on third-party websites. These are only placed after your explicit consent.

Upon your first visit to our Website, you will be informed via a cookie banner about our use of cookies and asked for your consent to place non-necessary cookies. You can change your cookie settings or withdraw your consent at any time via the cookie settings on our Website or via your browser settings. Disabling cookies may affect the functionality of the Website.

7. Security of Personal Data

We take the protection of your personal data seriously and take appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. This includes, among other things, the use of encryption (SSL/TLS) for data transmission, secure servers, access management, and regular security updates.

Despite our efforts, we cannot offer an absolute guarantee for the security of data transmitted via the internet. Any transmission of data is at your own risk. Should a data breach occur with likely adverse consequences for your privacy, we will inform you in accordance with legal obligations.

8. Your Rights (Data Subject Rights)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): You have the right to request an overview of the personal data we process about you.
  • Right to rectification (Art. 16 GDPR): If your data is incorrect or incomplete, you have the right to have it corrected or completed.
  • Right to erasure ("right to be forgotten", Art. 17 GDPR): You have the right to have your personal data deleted, unless we have a legal obligation or legitimate interest to retain it (e.g., fiscal retention obligation).
  • Right to restriction of processing (Art. 18 GDPR): In certain cases, you have the right to have the processing of your data temporarily restricted.
  • Right to notification (Art. 19 GDPR): We will, if you use your right to rectification, erasure, or restriction, inform the third parties to whom your data has been provided, unless this proves impossible or involves disproportionate effort.
  • Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format and/or to transfer it to another controller, insofar as the processing is based on consent or an agreement and is carried out via automated means.
  • Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data based on our legitimate interest. You can also object at any time to processing for direct marketing purposes.
  • Right not to be subject to automated individual decision-making (Art. 22 GDPR): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless this is necessary for entering into or performing a contract, is authorized by law, or is based on your explicit consent.

If you wish to exercise any of these rights, you can contact us via the contact details at the bottom of this policy (Article 12). We will respond to your request as soon as possible, but no later than within one month. Depending on the complexity of the request, this period may be extended by two months. We may ask you to identify yourself before we process your request.

If you believe that our processing of your personal data infringes privacy legislation, you have the right to lodge a complaint with the competent Data Protection Authority.

9. AI Generation and Use of Images

When uploading images for the personalization of your children's book, you explicitly give us consent to process these images through our AI systems and those of our carefully selected technology partners. This processing takes place exclusively for generating the ordered product. Important: We and our partners do not use your photos and input data to train AI models. Your data remains your property and is only used for the execution of your order.

10. Children's Data

Our products are aimed at children but are ordered by adults. We do not knowingly collect personal data directly from children without the consent of a parent or legal guardian. Personal data of children (such as the name for the book and the uploaded photo) is only processed for the purpose of personalizing the product, based on the input and consent of the adult Buyer. If you suspect that we have collected personal data from a child without the required consent, please contact us so that we can take appropriate measures.

11. Changes to the Privacy Policy

We reserve the right to modify this privacy policy. Changes will be published on our Website. The date of the last revision is stated at the bottom of this policy. We advise you to consult this policy regularly to remain informed of any changes. In the event of significant changes that have a substantial impact on your rights or the way we process your data, we will actively inform you, for example via email or a clear notice on our Website.

12. Contact Details

If you have questions about this privacy policy, the processing of your personal data, or if you wish to exercise your rights, you can contact us via email: [email protected], or via our contact page.

This privacy policy was last updated on May 8, 2025.