privacy.title
privacy.updated
privacy.intro
Who we are
Pages of the Ancestors is operated by Christopher Leece ("we", "us", "our"), a sole trader based in the United Kingdom. We are the data controller responsible for deciding how and why the personal data described in this notice is processed. This is not a limited company, so no company registration number applies.
Controller: Christopher Leece (sole trader)
Brand: Pages of the Ancestors
Registered address: B8, East Northdown Business Centre, George Hill Road, Thanet, CT9 3FF, United Kingdom
Contact / DSAR email: hello@pagesoftheancestors.com
ICO registration number: 00013889232
What personal data we collect
- Account details — your name and email address
- Profile details — your birth year (optional)
- Memoir content — the entries you write or dictate
- Photos you upload to your memoir
- Voice recordings and the transcripts produced from them
- Technical data — IP address, device, browser and basic usage logs needed to keep the service secure
- Communications — emails or support messages you send us
Payment and billing details (including your name, email address, billing address, card or payment method information, invoice details and tax information) are collected directly by Stripe, our Merchant of Record — we never see or store your full card details. See "Who we share data with" below.
Why we use your data and the legal basis
- To provide the service — saving your memories, organising them into chapters, transcribing your voice, and letting collaborators you invite read along. Legal basis: performance of our contract with you.
- To keep your account secure — preventing unauthorised access, fraud and abuse. Legal basis: our legitimate interests in protecting the service and our users.
- To take payment and manage subscriptions — via Stripe, our Merchant of Record and payment provider. Legal basis: performance of our contract with you, and compliance with legal/tax obligations.
- To send essential service emails — receipts, reminders, account notifications. Legal basis: performance of our contract.
- To improve the service — aggregate, non-identifying usage analysis. Legal basis: our legitimate interests in improving the product.
- Marketing emails — only if you opt in. Legal basis: your consent (which you can withdraw at any time).
Who we share data with
We only share personal data with the small number of providers needed to run the service:
- Stripe — our Merchant of Record and payment provider. Stripe acts as the reseller for all orders and receives your name, email and billing details so it can process payments, calculate and remit sales tax/VAT, issue invoices, handle refunds and provide customer service for purchases. See Stripe's Privacy Policy and Consumer Terms.
- Lovable Cloud — our managed database, authentication and storage provider (data hosted in the EU).
- AI service providers — used to transcribe voice recordings and lightly polish entries when you ask us to. Content is sent only as needed to complete that task.
- Email delivery providers — to send service emails (receipts, password resets, invitations).
- Professional advisers and authorities — only where required by law (e.g. accountants, regulators).
We do not sell your data and we do not run advertising. Your memoir content is never used to train AI models on a general basis.
International transfers
Where data is transferred outside the UK or EEA (for example to a US-based provider), we rely on UK/EU Standard Contractual Clauses or an equivalent safeguard to make sure your data remains protected.
How long we keep your data
We keep your account and memoir content for as long as your account is open. When you delete your account, we delete your profile, memoir entries, photos and voice transcripts within 30 days, except where we are required to keep limited records for longer:
- Payment and invoice records — kept for up to 7 years to meet UK tax and accounting law.
- Security and abuse logs — kept for up to 12 months.
- Backups — purged on our normal backup cycle, typically within 30 days.
How your data is stored and secured
Your data is stored on managed cloud infrastructure hosted in the EU. It is protected by encryption in transit (HTTPS/TLS) and at rest, and access is controlled by strict per-user permission rules. Only you, and people you explicitly invite as collaborators, can read your memoir. Our staff do not read your entries.
Your rights under UK GDPR
You have the right to:
- Access — ask for a copy of everything we hold about you
- Rectify — fix anything that's wrong
- Erase — delete your account and all data permanently
- Restrict or object to certain processing
- Portability — receive your data in a portable format
- Withdraw consent at any time (where we relied on consent)
- Complain to the UK Information Commissioner's Office at ico.org.uk
To exercise any of these rights, email hello@pagesoftheancestors.com. We respond within 30 days.
Cookies
We use only essential cookies — the ones required to keep you signed in. We don't use tracking or advertising cookies.
Changes to this notice
We may update this notice from time to time. If we make material changes we will let you know by email or in the app.
