Privacy policy

Last updated: 15 September 2026. English translation and contact details updated: 23 October 2026.

Genaya Stories operates this store and website, including all related information, content, features, tools, products and services, to provide you with a personalised shopping experience (the “Services”). Our store is powered by Shopify, which enables us to provide the Services. This Privacy Policy explains how we collect, use and disclose your personal information when you access or use the Services, make a purchase or another transaction, or otherwise communicate with us. If our Terms of Service conflict with this Privacy Policy, this Privacy Policy takes precedence regarding the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing and using our Services, you acknowledge that you have read this policy and understand the collection, use and disclosure described here.

Personal information we collect or process

“Personal information” means information that identifies you or can reasonably be linked to you or another person. It does not include information collected anonymously or made non-identifiable so that it cannot identify or reasonably be linked to you. Depending on how you interact with the Services, where you live and what applicable law permits or requires, we may collect or process the following categories, including inferences drawn from them:

  • Contact details: your name, address, billing address, shipping address, phone number and email address.
  • Financial information: credit card, debit card and bank account numbers, payment card and bank account information, transaction details, payment method, payment confirmation and other payment details.
  • Account information: your username, password, security questions, preferences and settings.
  • Transaction information: items you view, put in your basket or wish list, purchase, return, exchange or cancel, and your previous transactions.
  • Your communications with us: information you include when contacting us, for example in a customer service enquiry.
  • Device information: information about your device, browser or network connection, IP address and other unique identifiers.
  • Usage information: how and when you access or interact with the Services.

Sources of personal information

We may collect personal information:

  • Directly from you, when you create an account, access or use the Services, contact us or otherwise provide information.
  • Automatically through the Services, including from your device when you use our products or services or visit our websites, and through cookies and similar technologies.
  • From our service providers, when we use them to implement technology or they collect or process information on our behalf.
  • From our partners or other third parties.

How we use your personal information

Depending on your interactions with us and the Services you use, we may use your information for:

  • Providing, personalising and improving the Services. This includes performing our contract with you, processing payments and orders, remembering your preferences and items of interest, sending account notifications, handling purchases, returns, exchanges and other transactions, creating and managing your account, arranging shipping, facilitating returns and exchanges, enabling reviews and personalising your shopping experience, such as recommending products related to purchases. It may include using your information to make the Services more relevant.
  • Marketing and advertising. This includes sending marketing, advertising and promotional communications by email, text message or post, and showing online advertisements for products or services on the Services or other websites, including based on previous purchases, items added to your basket and other activity on the Services.
  • Security and fraud prevention. We use information to authenticate accounts, provide secure payment and shopping experiences, detect, investigate or respond to fraudulent, illegal, dangerous or malicious activity, protect public safety and secure our services. If you create an account, you are responsible for keeping your credentials confidential. We strongly recommend that you do not share your username, password or other access credentials.
  • Communicating with you. We use information to provide customer service, respond to requests, deliver effective services and maintain our business relationship.
  • Legal reasons. We use information to comply with applicable law or valid legal proceedings, including requests from law enforcement or government bodies, investigate or participate in civil discovery, potential or ongoing litigation or other contentious proceedings, enforce our terms or policies, or investigate possible violations.

How we disclose personal information

In some circumstances we may disclose personal information to third parties for legitimate reasons consistent with this policy, including:

  • To Shopify, providers and other third parties performing services for us, such as IT management, payment processing, analytics, customer service, cloud storage, fulfilment and shipping.
  • To business and marketing partners to provide marketing services and advertising. For example, we use Shopify to support personalised advertising through third-party services based on online activity across merchants and websites. These partners use information under their own privacy notices. Depending on where you live, you may have a right to ask us not to share information to show targeted advertising and marketing based on your activity across merchants and websites.
  • When you instruct or request us to disclose information, or otherwise consent, such as for shipping products or through social media widgets or login integrations.
  • To affiliates or within our corporate group.
  • In a business transaction such as a merger or bankruptcy; to comply with legal obligations, including subpoenas, search warrants or similar requests; to enforce applicable terms or policies; or to protect or defend the Services, our rights and the rights of users or third parties.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes information about your access to and use of the Services to provide and improve them. Information submitted to the Services is transmitted to and shared with Shopify and third parties that may be located outside your country of residence. To protect, develop and improve our business, we also use enhanced Shopify features incorporating information from your interactions with our store, other merchants and Shopify. To provide these features, Shopify may use personal information collected from these interactions. In these circumstances Shopify is responsible for processing your information, including responding to requests to exercise rights regarding these uses. See Shopify’s Consumer Privacy Policy for details. Depending on your location, you can exercise certain rights through Shopify’s privacy portal.

Third-party websites and links

The Services may link to websites or other online platforms operated by third parties. If you follow links to sites we do not control or that are not affiliated with us, review their privacy, security and other terms. We do not guarantee and are not responsible for their privacy or security, or the accuracy, completeness or reliability of their information. Information you provide in public or semi-public spaces, including on third-party social media, may be visible to other users of the Services or those platforms without restrictions on use by us or a third party. Including a link does not itself endorse the platform, its content, owner or operator unless expressly stated.

Children’s information

Genaya accounts and services are intended for adults. A parent, legal guardian or authorised adult may provide information about a child to personalise a book: first name, approximate age, a chosen photo, character features and story preferences. We use this information to create the requested characters, illustrations and books. Provide only necessary information and images you are authorised to use. You can request access, correction or deletion at contact@genayastories.com.

Personalisation and use through ChatGPT

Personalisation uses the Genaya customer space, AI generation services, and hosting and storage services. These providers receive the information needed to fulfil your request. Saved previews and creations are associated with your account so you can retrieve them and continue your project.

If you use Genaya through ChatGPT, Genaya receives information submitted in plugin tool calls. It returns information useful for your request, such as character information, book previews, store links and order status. You choose whether to connect your account for private features. Your ChatGPT conversation is also governed by the terms and settings of your OpenAI account. Deleting data in Genaya does not automatically delete your ChatGPT conversation.

Payment takes place in the Shopify store. The plugin does not ask for payment card details in the conversation. Providers responsible for producing and delivering your book receive the files and information needed for that order. Preparing a basket does not trigger payment or printing.

Security and retention

No security measure is perfect or infallible, and we cannot guarantee “perfect security”. Information sent to us may not be secure in transit. We recommend avoiding insecure channels when communicating sensitive or confidential information.

Retention depends on factors such as whether we need information to manage your account, provide the Services, meet legal obligations, resolve disputes or enforce applicable agreements or policies.

Characters and projects saved in your Genaya space are retained so you can retrieve and reuse them. They are not automatically deleted after printing. You can request deletion at contact@genayastories.com. Processing needed for order tracking, support requests and applicable obligations is separate from retention of your creations.

Your rights and choices

Depending on where you live, you may have some or all of the rights below. These rights are not absolute, may apply only in certain circumstances and, where the law permits, we may refuse a request.

  • Access/right to know: you may have the right to request access to information we hold about you.
  • Deletion: you may have the right to request deletion of information we hold about you.
  • Correction: you may have the right to request correction of inaccurate information.
  • Portability: you may have the right to receive a copy of your information and request transfer to a third party in certain circumstances, subject to exceptions.
  • Communication preferences: you may unsubscribe from promotional emails at any time using their unsubscribe option. We may still send non-promotional emails about your account or orders.

If you live in the United Kingdom or European Economic Area, subject to local exceptions and limitations, you may also have:

  • The right to object to or restrict processing: you may ask us to stop or restrict processing for certain purposes.
  • The right to withdraw consent: where processing relies on your consent, you may withdraw it. This does not affect the lawfulness of processing before withdrawal.

You may exercise rights through the relevant options on the Services or by contacting us below. For Shopify’s use of information and related rights, see Shopify’s privacy portal.

We will not penalise you for exercising these rights. We may need to verify your identity before processing a request, as required or permitted by law. You may appoint an authorised agent where applicable law allows. Before accepting an agent’s request, we require proof of your authorisation and may ask you to verify your identity directly with us. We respond within the periods required by applicable law.

Complaints

To complain about our handling of personal information, contact us below. Depending on your location, you may appeal our decision by contacting us or complain to your local data protection authority. For the EEA, a list of authorities is available here.

International transfers

We may transfer, store and process information outside your country of residence. For transfers outside the EEA or UK, we rely on recognised transfer mechanisms such as European Commission Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority, unless the destination is recognised as providing adequate protection.

Changes to this Privacy Policy

We may update this policy to reflect changes in practices or for operational, legal or regulatory reasons. We will publish the revised policy here, update the “Last updated” date and provide notice as required by applicable law.

Contact

For questions about privacy or this policy, or to exercise your rights, email hello@genayastories.com or write to GENAYA — Genaya Stories, 173 rue de Courcelles, 75017 Paris, France. For applicable data protection law, we are the controller of your personal information.