Privacy policy

PRIVACY POLICY

Last updated: 23 August 2026

DoodleBorn ("we", "us" or "our") operates this website and online store and provides personalised digital artwork and related services (the "Services").

Our online store is powered by Shopify.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it and the rights you may have in relation to it.

We take particular care with customer-uploaded artwork and images, especially where they have been created by or relate to children.

1. INFORMATION WE COLLECT

Depending on how you interact with DoodleBorn, we may collect or process the following information:

Contact and order information

This may include:

  • your name;

  • email address;

  • billing address;

  • telephone number, where provided;

  • order details;

  • payment and transaction information; and

  • communications you have with us about your order.

Payment information is normally processed securely by our payment providers. We do not necessarily receive or store your complete payment-card details ourselves.

Uploaded artwork and images

When you order a personalised DoodleBorn product, you provide us with a drawing, photograph, scan or other image ("Submitted Material").

This material may contain personal information. For example, a drawing could include a child's name, handwriting or other identifying information, and photographs may contain identifiable people.

We process Submitted Material for the purpose of creating and delivering the personalised product you have ordered.

We ask you not to include personal information that is unnecessary for us to fulfil your order.

Website and device information

When you visit our website, certain information may be collected automatically, including:

  • IP address;

  • browser and device information;

  • information about how you use our website;

  • pages or products viewed;

  • shopping-cart activity; and

  • cookie and similar technology information.

Please see our Cookie Policy or cookie settings for further information.

Communications

If you contact us, we may retain the information contained in your message and our response where reasonably necessary to provide customer support, resolve a problem or maintain appropriate business records.

2. HOW WE USE YOUR INFORMATION

We use personal information where necessary for purposes including:

  • processing and fulfilling your order;

  • creating your personalised DoodleBorn artwork;

  • processing payments;

  • delivering your finished digital files;

  • communicating with you about your order;

  • providing customer support;

  • processing revisions or resolving problems;

  • preventing fraud and protecting our website;

  • complying with legal and regulatory obligations;

  • maintaining appropriate financial and transaction records; and

  • improving and operating our website and Services.

Where applicable, we may also use information for marketing purposes in accordance with applicable law and your marketing preferences.

We do not use customer-submitted children's artwork or photographs for advertising, social-media content, promotional galleries or other public marketing purposes without obtaining separate permission.

3. CHILDREN'S ARTWORK AND INFORMATION

DoodleBorn products are intended to be purchased by adults. Our online store is not intended for children to create accounts, make purchases or submit personal information independently.

However, we recognise that the nature of our service means that Submitted Material may have been created by a child or may contain information relating to a child.

If you provide material created by or depicting a child, you confirm that you are the child's parent or legal guardian, or that you otherwise have appropriate authority to provide that material to us for the purpose of creating the product you have ordered.

We ask customers to provide only the information and imagery reasonably necessary for us to fulfil the order.

In particular, unless it is genuinely required for the product being ordered, please avoid submitting information such as a child's:

  • full name;

  • home address;

  • school;

  • date of birth;

  • contact details; or

  • other unnecessary identifying information.

We will not knowingly use children's personal information contained in Submitted Material for behavioural advertising or profiling.

If you believe a child has provided personal information to us without appropriate authority, please contact us so that we can investigate and, where appropriate, delete it.

4. HOW YOUR ARTWORK IS PROCESSED

Creating DoodleBorn artwork may involve the use of third-party technology and service providers, including image-processing, cloud-storage and AI-assisted creative tools.

This means Submitted Material may need to be transmitted securely to and processed by service providers acting as part of our production process.

We aim to provide those services with only the information reasonably necessary to perform the relevant task.

Where possible, customer identity and contact information will not be included with an image submitted to an image-processing service unless necessary for the service being provided.

We select and use service providers with consideration for their privacy and data-handling arrangements and will update our privacy practices where our production technology changes.

Further information about particular service providers may be made available in this Privacy Policy or on request where appropriate.

5. SHOPIFY

Our online store is hosted by Shopify.

Shopify collects and processes certain personal information relating to your access to and use of our store in order to provide its ecommerce services.

Information submitted through our store may therefore be transmitted to and processed by Shopify and its service providers.

Shopify may also process certain information for its own purposes in accordance with its applicable privacy policies.

You can find more information in Shopify's Consumer Privacy Policy and privacy portal.

6. OTHER SERVICE PROVIDERS

We may disclose or provide personal information to trusted service providers where reasonably necessary to operate DoodleBorn.

These may include providers of:

  • ecommerce services;

  • payment processing;

  • email and digital delivery;

  • website hosting and infrastructure;

  • cloud storage;

  • analytics;

  • fraud prevention;

  • customer support; and

  • image-processing and AI-assisted creative services.

These providers may process information on our behalf or, in some circumstances, for purposes described in their own privacy policies.

We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal rights.

7. MARKETING AND ADVERTISING

Where permitted by law, we may use certain customer contact or website activity information to send marketing communications or measure and improve our advertising.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in those messages.

Opting out of marketing does not prevent us from sending service communications relating to an order you have placed.

Customer-submitted drawings, photographs and finished personalised DoodleBorn artwork are not automatically included in this permission.

We will seek separate permission before using personalised customer artwork or Submitted Material publicly for advertising, social media, promotional galleries, case studies or similar marketing purposes.

You can refuse such permission without affecting your order or your ability to use DoodleBorn.

8. HOW LONG WE KEEP YOUR INFORMATION

We retain different types of information for different periods depending on why we need it.

Order, transaction and accounting records may be retained for the period required to meet our legal, tax, accounting and business obligations.

Customer-service communications may be retained where reasonably necessary to deal with an order, complaint, dispute or legal obligation.

Uploaded drawings and finished artwork

Because Submitted Material may contain information relating to children, we do not intend to retain it indefinitely.

Our normal policy is to retain uploaded source images and working/finished artwork for up to 60 days after completion of your order. This allows us to provide download support, deal with reasonable revision requests and resolve problems with an order.

After that period, we aim to delete the working copies of the Submitted Material and personalised artwork that we control, unless we have a legitimate or legal reason to retain them for longer.

Information may remain temporarily within secure backups or systems operated by service providers until those systems complete their normal deletion cycles.

If you ask us to delete Submitted Material sooner, please contact us. Where we no longer need the material and are not legally required or otherwise entitled to retain it, we will delete it.

Once files have been deleted, we may not be able to provide replacement downloads or make further revisions. We therefore recommend that you download and safely store your finished DoodleBorn artwork when you receive it.

9. SECURITY

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or storage system can be guaranteed to be completely secure.

Please avoid including unnecessary sensitive or identifying information in images or messages sent to us.

10. INTERNATIONAL DATA TRANSFERS

Some of the technology and service providers we use, including Shopify and potentially image-processing or cloud-service providers, may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps as required by applicable data-protection law to ensure that relevant safeguards are in place.

These may include recognised adequacy arrangements or approved contractual safeguards.

11. YOUR PRIVACY RIGHTS

Depending on applicable law and the circumstances, you may have rights relating to your personal information, including the right to:

  • request access to personal information we hold about you;

  • ask us to correct inaccurate information;

  • request deletion of certain personal information;

  • request restriction of certain processing;

  • object to certain uses of your information;

  • receive certain information in a portable format; and

  • withdraw consent where our processing relies upon your consent.

These rights are not absolute and may be subject to legal exceptions.

To exercise a privacy right, please contact us using the details below. We may need to verify your identity before completing your request.

You also have the right to complain to the relevant data-protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).

12. COOKIES

Our website and Shopify may use cookies and similar technologies to operate the store, remember preferences, understand website usage, measure advertising and provide other functionality.

Where required, you will be given choices regarding non-essential cookies through our cookie-consent tools.

Please refer to our cookie settings or Cookie Policy for further information and to manage your preferences.

13. THIRD-PARTY LINKS

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of websites that we do not operate. We recommend reviewing the privacy information provided by those services before supplying personal information to them.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal requirements or business practices.

When we do so, we will update the "Last updated" date at the top of this page and provide any additional notice required by law.

15. CONTACT US

If you have questions about this Privacy Policy, want to exercise your privacy rights or have concerns about how your information has been handled, please contact:

DoodleBorn
Trading name of: Big Bridge Marketing Ltd
Email: doodles@doodleborn.com
Address: 3F1 Third floor, 3Hill Street, Edinburgh, EH2 3JP

For applicable UK data-protection law purposes, the relevant DoodleBorn business operator is the data controller for personal information processed by DoodleBorn.