Privacy Policy & GDPR Notice
Effective date: 22 January 2025
1. Data Controller
The data controller is Othermynd Limited
Registered office: 5c Milton Road, London SE24 0NL
Email: privacy@colourdoodle.com
2. Personal Data We Collect
We collect the following data:
- Email address
- First and last name
- Uploaded images
- Generated colouring pages
- Payment information (processed by Stripe; we do not store card details)
- Essential authentication cookies
We do not use analytics, advertising pixels, or tracking cookies at this time.
3. How We Use Your Data
We use your data to:
- Create and manage your account
- Process images and generate colouring pages
- Deliver purchased products
- Provide customer support
- Prevent fraud and misuse
4. Lawful Bases (GDPR)
We process personal data under the following lawful bases:
| Purpose | Lawful Basis |
|---|---|
| Account creation | Contract |
| Image processing | Contract |
| Payment processing | Contract |
| Customer support | Legitimate interest |
| Fraud prevention | Legitimate interest |
If we introduce analytics or advertising tools in the future, we will rely on consent where required.
5. Image Processing & Storage
- Images are stored securely.
- Retained only to provide ongoing access to your content.
- Deleted when you delete them or close your account.
- Not used for training AI models or marketing.
6. Third-Party Processors
We use trusted third parties to operate the Service, including:
- Supabase (authentication & database)
- Stripe (payments)
- Google Gemini (AI image processing)
All processors act under appropriate data protection agreements.
7. Cookies
We use essential cookies only to:
- Maintain login sessions
- Secure the Service
No marketing or analytics cookies are currently used.
8. Your Rights (GDPR)
You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion
- Restrict or object to processing
- Data portability
- Lodge a complaint with the ICO (UK)
To exercise these rights, contact privacy@colourdoodle.com
9. Data Security
We use appropriate technical and organisational measures to protect your data.
10. Children
Our Service is not directed to children under 13. We do not knowingly collect their personal data.
11. Changes
We may update this policy from time to time. Material changes will be communicated via the Service.
