Privacy policy

Last updated: 22 April 2026

At Livrome, we make books where your child becomes the hero. To do that, we handle photos and a small amount of information about you and your child. This policy explains what we collect, why, how long we keep it, and your rights under Quebec's Law 25 and the European GDPR.

If you only read one paragraph: we use your photos to make your book. We keep them encrypted for 30 days, then delete them. We never sell them. We never train AI models on them. We never use them for anything else.

1. Who we are

Livrome is a trade name operated by a studio based in Montreal, Quebec, Canada. Our contact email is hello@livrome.com. This email is also our Data Protection Officer contact for Law 25 and GDPR requests.

2. What we collect

  • Photo of your child — one image you upload during the preview flow.
  • Child details — first name, age, gender (optional), skin tone, book language.
  • Your account — email, billing + shipping address, language preference.
  • Order — book purchased, payment confirmation (we do not store your card number; our payment processor does).
  • Site analytics — standard cookies (traffic patterns, no individual tracking). See our Cookie section below.

3. Why we use it

  • To draw your child's features into the book scenes (photo + child details).
  • To process your order and ship the physical book (account + order data).
  • To answer your support messages (email).
  • To improve our service (aggregated analytics — never individual).

Legal basis (GDPR): contract performance (your book order) and your explicit consent (for the photo and child details).

4. How long we keep it

  • Photos — encrypted at rest, deleted within 30 days of book delivery, or instantly on request from your account.
  • Child details — kept with the order record for warranty + reprint purposes for 2 years, then anonymized.
  • Account + order — kept until you delete your account, or 7 years for tax and accounting law compliance.

5. Who we share it with

We never sell your data. We share the minimum necessary with a small list of processors:

  • Print partner (Quebec, Canada) — receives the PDF and your shipping address.
  • Payment processor (Shopify Payments / Stripe) — receives payment info; we do not store card details.
  • Shipping carrier (Canada Post, DHL, or FedEx depending on destination) — receives shipping address.
  • Email service (for order and support emails).
  • Cloud hosting (encrypted storage for photos during the 30-day retention window).

Each processor is bound by a written agreement that limits use of your data to the specific purpose they serve.

6. International transfers

Some of our processors are based outside Canada and the EEA (notably in the United States). When your data is transferred internationally, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and equivalent safeguards under Law 25.

7. Your rights

Under Law 25 and GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct it if inaccurate
  • Delete it (the "right to be forgotten")
  • Port it to another service
  • Object to certain processing
  • Withdraw consent at any time

To exercise any of these rights, email hello@livrome.com. We reply within 30 days (Law 25 and GDPR both require this).

You can also file a complaint:

  • Quebec: Commission d'accès à l'information du Québec — cai.gouv.qc.ca
  • European Union: your national data protection authority

8. Automated decisions

We use AI-assisted tools to adapt our hand-drawn base illustrations to your child's features. This is not an automated decision in the legal sense — no eligibility, pricing, or contract decision is made by a machine. A human illustrator reviews every book before it prints.

9. Cookies

We use three categories of cookies:

  • Essential — cart, session, checkout. Always on. You can't turn these off without breaking the site.
  • Analytics — aggregated traffic patterns (no individual tracking). Opt-out via our cookie banner.
  • Marketing — not used.

10. Children's data

Livrome is a service for adults buying books for children. Every preview flow requires an explicit statement that you have parental authority for the child pictured. We never knowingly collect data directly from a child under 13 (COPPA) or under 16 (GDPR). If you believe we've received such data in error, write to us and we'll delete it immediately.

11. Changes

We'll update this policy if our practices change. We'll email registered customers for material changes. The "Last updated" date at the top always shows the current version.

12. Contact

Questions, requests, complaints: hello@livrome.com.