Skip to content

Privacy

You are sending us photographs of your children. Here is exactly what happens to them, in plain words.

Last updated 20 August 2026

The short version

  • Your photographs are never public. They are stored outside the web root and served only to you, signed in.
  • We delete them automatically 90 days after your book has been delivered. You do not have to ask.
  • We use no analytics, advertising, tracking pixels or social media buttons. There is nothing here watching you.
  • We never sell anything to anybody, and we never will.
  • You can delete your account and everything in it yourself, at any time, from your account page.

What we collect

Only what is needed to make a book and post it to you.

  • Your photographs. We strip the hidden data cameras add — including where the picture was taken — the moment one is uploaded. We keep only the picture.
  • Who is in the book. Names, what the child calls them, how they are related, and anything you write yourself: a birth year, a caption, a dedication.
  • Your account. Your name and email address, from Google when you sign in.
  • Your order. Delivery address, phone number and email, because a printer and a courier need them, and what you paid.
  • Nothing about your browsing. No analytics, no profiling, no advertising identifiers.

How long we keep it

Photographs: 90 days after delivery. They are kept that long so we can reprint if a book arrives damaged, and then a job deletes them overnight. Nothing is kept just in case.

The names and relationships stay until you remove them. When the photographs go, the rest of the book does not: names, how everyone is related, birth years and captions remain, so you can see what you ordered and reorder next year without building it again. If you would rather they did not, delete the book — or your whole account — and they go at once.

Orders are kept. A record of a sale is an accounting record, and we are required to keep it. If you delete your account we strip your name, address, phone number and email from that record and keep only the transaction.

Who else sees it

Five companies, each doing one job. Each gets the least it needs, and none of them may use it for anything else.

  • Lulu prints and posts the book. They receive the finished book — so, your photographs — and your delivery name, address, phone number and email.
  • PayPal takes the payment. We never see your card details; they never reach us.
  • Resend delivers our email to you.
  • Google signs you in, if you use the Google button.
  • Google reCAPTCHA runs on the contact form only, to keep out spam, and receives your IP address. It is not loaded anywhere else on the site.

Your book is printed in the region it is posted to, so the print file goes to whichever of Lulu’s facilities is nearest you. Your details may therefore be handled outside South Africa.

How your photographs are protected

  • They are stored outside the public part of the site. There is no address anyone can visit to reach them.
  • Every request for one checks that you are signed in and that the book is yours.
  • The file we hand to the printer sits at an address containing a random identifier nobody can guess, and is deleted as soon as the printer has taken its copy — usually within a minute.
  • The whole site is served over an encrypted connection, and the database is backed up nightly to storage only the server can read.

Cookies

One, for signing in. It remembers that it is you, and nothing else. There is no cookie banner because there is nothing to consent to — we set no analytics, advertising or tracking cookies of any kind.

The contact page is the exception: Google reCAPTCHA sets its own cookies there in order to tell a person from a robot. That is the only third-party cookie on the site, and it appears only if you open the contact form.

What you can ask for

You can see, correct, download or delete anything we hold. Most of it you can do yourself without asking: every name and photograph is editable in the book, and your account page deletes everything at once.

For anything else, email us and a person will answer — normally within a day, and always within 30 days. If we cannot do what you ask, we will tell you why.

If you are unhappy with how we have handled your information, you can complain to the Information Regulator in South Africa, or to the data protection authority where you live.

Children

These books are about children and the photographs in them are of children, but the customer is always an adult. You need to be 18 or over to buy, and by uploading a photograph you confirm you have the right to do so and the permission of anyone else in it.

Changes

If we change how any of this works, we will change this page and move the date at the top. If a change is significant and affects an order you have already placed, we will email you.

Who we are

Little Family Faces is run by Seb Howarth t/a Little Family Faces, a sole proprietor registered in South Africa.

Unit 6, 6 Protea PlaceSandton2196South Africa

orders@littlefamilyfaces.com · a person reads every message.