1. Introduction
Welcome to MySanta.me. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, process, and disclose your information when you use our website and order our personalised Santa video services.
For the purposes of the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988-2018, the Data Controller is MySanta.me ("we", "us", or "our").
2. Information We Collect
To provide our service, we collect specific information from you. This is primarily data provided by parents or guardians to create personalised video messages from Santa.
When you place an order, you provide us with:
Parent/Guardian Contact Details: Your name and your email address (for order confirmation, receipt, and video delivery).
Information about the Child/Children:
Child’s First Name(s)
Child’s Age(s)
Child’s Photograph(s)
Personal interests (e.g., favourite toys, hobbies) for the extra-personalised video option.
3. How We Use Your Information
We use the information you provide strictly for the following purposes:
Service Fulfilment (Contractual Necessity): To produce the personalised video message from Santa and deliver it to you via email.
Customer Support: To assist you with any issues regarding your order, downloads, or payment.
Legal Compliance: To comply with applicable laws (e.g., tax and accounting obligations regarding transaction records).
We do not sell, rent, or trade your personal information or the information of your children to third parties for marketing purposes.
4. Legal Basis for Processing
Under the GDPR, we rely on the following legal bases to process your data:
Performance of a Contract: We need your data to fulfill the order you placed (making the video).
The consent of the individual: For processing children's photographs and personal details, we obtain explicit consent from the parent or guardian placing the order.
Legal Obligation: To maintain financial records for tax purposes.
5. Data Storage and Security
We take the security of your data, and specifically the photos and details of children, very seriously.
Location: Your data is stored securely within the European Union. Specifically, in a data center located in Frankfurt, Germany.
Security Measures: We use secure cloud storage services. Access to the information you provide is restricted strictly to authorised personnel who require it to create your video. We utilise industry-standard encryption (SSL) to protect data during transmission.
6. Data Retention
We practice strict data minimisation. We only keep your data for as long as is necessary to provide the service.
Video and Personal Data: Once your video has been delivered, we retain the input data (photos, names, interests) and the final video file until the end of the Christmas season, specifically January 31st. This is to allow you to re-download the video if you lose the link.
Deletion: After January 31st, all personal data regarding the child and the video files are securely deleted from our systems.
Transaction Records: We may retain basic transaction data (order value, date, parent email) for a period of 6 years strictly to comply with our tax obligations. This does not include the photos or details of the children.
7. Sharing Your Information
We may share your data with trusted third-party service providers who assist us in operating our website and conducting our business, specifically:
Payment Processors: To facilitate your payment (e.g., Stripe, Apple Pay, Google Pay).
Email Service Providers: To send you your order confirmation and the link to your video.
Cloud Hosting Providers: To store the data securely (located in Frankfurt).
All third-party providers are compliant with GDPR and are contractually obligated to keep your information confidential.
8. Your Rights
As a customer based in the EU/EEA, you have specific rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct incorrect or incomplete data (e.g., a misspelled name).
Right to Erasure ('Right to be Forgotten'): You may request that we delete your personal data before the standard January 31st deletion date.
Right to Restriction: You can ask us to stop processing your data.
To exercise any of these rights, please contact us at [email protected].
9. A Note on Children's Privacy
Our service is directed at parents and guardians. We do not knowingly collect personal information directly from children under the age of 18. All data regarding children is provided explicitly by the parent or guardian for the purpose of creating the video message from Santa. By placing an order, you confirm that you are the legal guardian of the child/children pictured and named.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Email: [email protected]