Privacy notice

Last updated 1 October 2026

We make labels from your child's drawing. This notice explains, in plain English, what we collect, why, who helps us, and how long we keep it. The short version: we collect as little as we can, your child's drawing is never public, and we never use your child's drawing to train AI models.

Who we are

Scribble Tags is responsible for your information (the "controller" under UK data protection law).

Trading name: Scribble Tags
Company: Scribble Tags, registered in (to be added), company number (to be added)
Registered address: to be added
Email: [email protected]

What we collect

Your child's drawing, and any AI versions of it you ask us to make.
Your child's first name, to print on the labels. We do not need their surname, age, school or a photo of them, so please do not send them.
Your details when you order: your name, email, delivery address and phone number if you give one. Card details go straight to Stripe; we never see or store them.
Your order: what you bought, what you paid and when.
Your account, if you make one: when you sign in with Google, Google tells us your name, email address and an account ID. We never see your Google password.
If you ask about the school scheme: your name, email, the school and anything else you tell us in the form.
If you write a review: your rating, what you write, the name you choose to show and any photo of the item you add. We remove location data from photos.
Technical data: our servers keep short-lived logs (such as IP address and pages requested) to keep the site secure and working.

Why we use it

To make, deliver and support your order. This is necessary for our contract with you.
To keep your account, saved drawings and order history, if you sign in. You can delete your account at any time.
To set up and run the school scheme, if you ask about it, and to keep in touch about it.
To show your review on the site, if you write one. You agree to this when you send it, and can ask us to remove it at any time.
To check drawings and AI versions are suitable to print, and to keep the site secure. These are our legitimate interests in running a safe shop for children's products.
To keep records the law requires, such as orders and payments for tax.

We do not sell your information, and we do not use it for advertising profiles.

Who helps us

These companies process information for us, only to provide their service:

Our AI image provider (OpenAI or Google), only if you choose an AI style. They receive the drawing to make the new version, under terms that stop them training on it.
OpenAI's moderation service, which checks every drawing and AI version for anything unsuitable before it can be printed. It receives the image only, not your name or details.
Stripe, to take payment.
Google, if you choose to sign in with your Google account.
Google Workspace, which runs our email, including the order emails we send you.
Sevalla, which hosts our website and stores drawings in private storage.
Our print partner, which receives the approved design, the name and the delivery address to make and post your order.

Some of these providers may handle information outside the UK. Where they do, we rely on the safeguards UK law requires, such as the UK International Data Transfer Agreement.

How long we keep it

Drawings you do not order are deleted automatically 30 days after upload.
Drawings in an order, with your child's name and the artwork made from them, are kept until the order is posted, then for as long as you chose when you uploaded: until 30 days after your order is delivered (or posted, if we don't hear it was delivered), so we can reprint it free if anything goes wrong; for a year so you can reorder; or until you delete it.
You can delete a drawing and everything made from it at any time from its page, and it is deleted straight away. If it is in an order we are making, we delete it as soon as the order is posted.
Your account is kept until you delete it from your account page. That also deletes your saved drawings, apart from any in an order we are making, which are deleted once it is posted.
School scheme contacts are kept while the school is in the scheme. You can ask us to delete them at any time.
Reviews, published or not, are kept until you ask us to remove them or to delete your details.
Order and payment records are kept for six years, as UK tax law requires.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, object to how we use it, or ask us to stop using it. Email [email protected] and we will reply within a month. If you are unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We only use cookies the site needs to work, such as remembering your basket. See our cookies page.