EllaTales respects the privacy of users, families, and children. This Privacy Policy explains how personal information is handled when users access free stories, purchase personalized stories, create accounts, use My Library, contact support, or interact with the EllaTales platform.

By using EllaTales, the adult user acknowledges the practices described in this Privacy Policy.

1. Who we are

EllaTales is a commercial brand operated by:

For purposes of this Privacy Policy, 008 Digital Services SAS is the entity responsible for the processing of personal information collected through EllaTales, unless another party is expressly identified as responsible for a particular service.

2. Scope of this Privacy Policy

This Privacy Policy explains how EllaTales collects, uses, stores, shares, protects, and otherwise processes personal information when a person:

• Visits ellatales.com.
• Creates or manages an EllaTales account.
• Registers to access free stories.
• Uses the Story Builder.
• Purchases a personalized story.
• Uses My Library or protected downloads.
• Requests password recovery.
• Contacts customer support.
• Subscribes to marketing communications.
• Otherwise interacts with EllaTales.

This Policy applies to users worldwide. Additional rights may apply depending on the user’s country, state, or place of residence.

3. Adults, children, and account responsibility

EllaTales accounts and purchases are intended to be created and managed by adults.

The adult who creates an account, accesses a free story, or purchases a personalized story confirms that they are at least 18 years old and are the parent, legal guardian, or an adult authorized to provide the information used for the requested story.

EllaTales does not knowingly create customer accounts directly for children and does not intentionally ask children to submit information directly to the platform.

When an adult provides information relating to a child, that adult is responsible for ensuring that the information is lawful, accurate, appropriate, and limited to what is reasonably necessary for the story.

4. Information we collect

Depending on how a user interacts with EllaTales, we may collect the following categories of information:

• Account and contact information, such as name, email address, username, telephone number when provided, account status, language preference, and password-related records. Passwords are stored through the security mechanisms used by WordPress and WooCommerce and are not visible to EllaTales in plain text.
• Order and billing information, such as billing name, billing address when required, selected plan, order number, order items, price, currency, coupon information, payment status, transaction reference, and refund or dispute information.
• Story personalization information voluntarily submitted through the Story Builder, such as a child’s name or nickname, age, preferences, personality traits, favorite things, story details, family or contextual information, special instructions, and communication language.
• Free story activity, such as account registration, stories added to a library, available languages and formats, and download activity.
• My Library and download information, such as the stories associated with an account, access status, file versions, download links, download events, and security records used to protect digital files.
• Communications and support information, such as messages, questions, complaints, correction requests, cancellation requests, and other correspondence.
• Technical and usage information, such as IP address, browser type, device information, operating system, referring pages, pages viewed, session information, cart activity, login events, password-reset events, security events, and website logs.
• Consent and preference information, such as acceptance of Terms, privacy notices, marketing consent, communication preferences, and withdrawal of consent.

5. Information we do not request

EllaTales does not request, need, or accept photographs of children for free or personalized stories.

Users must not send photographs of children through the Story Builder, email, customer support, contact forms, uploads, or other EllaTales channels.

EllaTales also asks users not to submit unnecessary sensitive information, including a child’s home address, school details, medical information, identification documents, financial information, precise location, or other information that is not needed to create the story.

If an unsolicited photograph or unnecessary sensitive information is identified, EllaTales may remove it from active systems and communication channels as soon as reasonably practicable. Temporary copies may remain in restricted backups until those backups are overwritten or deleted according to normal retention cycles.

6. How we collect information

We collect information:

• Directly from the adult user when creating an account, registering for free stories, completing the Story Builder, placing an order, contacting support, or subscribing to communications.
• Automatically through cookies, sessions, logs, security tools, and similar technologies when the website or account area is used.
• From payment, hosting, email, authentication, analytics, or other service providers when needed to operate the platform.
• From public authorities or other parties when required to investigate fraud, respond to a legal request, protect users, or comply with applicable law.

7. Why we use personal information

EllaTales may use personal information to:

• Create, verify, and manage user accounts.
• Provide access to free stories and My Library.
• Process carts, orders, payments, refunds, and transaction records.
• Create, review, produce, and deliver personalized stories.
• Generate and maintain the four digital story formats included in a personalized order.
• Provide protected downloads and verify that a user is authorized to access a story.
• Send account, password, order, payment, production, delivery, security, and customer-support communications.
• Respond to questions, correction requests, complaints, cancellations, and refund requests.
• Prevent fraud, abuse, unauthorized downloads, security incidents, and misuse of the platform.
• Maintain, troubleshoot, secure, analyze, and improve the website and services.
• Comply with accounting, tax, consumer-protection, privacy, legal, and regulatory obligations.
• Send promotional communications when the user has provided the applicable consent or when otherwise permitted by law.
• Create aggregated or de-identified information that does not reasonably identify a person.

8. Legal grounds for processing

Depending on the service and the law that applies, EllaTales relies on one or more of the following legal grounds:

• The user’s authorization or consent.
• Performance of a contract or steps requested before entering into a contract.
• Compliance with legal, tax, accounting, consumer-protection, and regulatory obligations.
• EllaTales’ legitimate interests in operating, securing, supporting, and improving the service, provided those interests are not overridden by the rights of the individual.
• Protection of users, EllaTales, and third parties against fraud, abuse, security threats, or unlawful activity.
• Any other lawful basis recognized in the user’s jurisdiction.

Where processing depends on consent, the user may withdraw that consent for future processing, subject to legal, contractual, and technical limitations.

9. Free stories and registration

EllaTales may require an account and valid contact information before a user can access or download a free story.

Account information may be used to authenticate the user, provide access, maintain the user’s library, send necessary service communications, prevent abuse, and provide support.

Registering for a free story does not automatically authorize EllaTales to send promotional or marketing emails. Marketing consent is separate and optional.

EllaTales may change the free catalog, available languages, formats, or access conditions over time.

10. Personalized stories

Information submitted through the Story Builder is used to create the personalized story requested by the adult customer.

EllaTales limits the intended use of that information to production, editorial review, delivery, support, security, legal compliance, and maintenance of the story in My Library.

Story information may be accessed by authorized personnel and carefully selected technology or production service providers when reasonably necessary to complete the requested service.

EllaTales does not use a personalized story, a child’s name, identifiable family information, or identifiable illustrations for public advertising or portfolio purposes without separate and express authorization from the responsible adult.

11. Technology-assisted production

EllaTales may use internal editorial workflows and selected technology-assisted tools to help create, review, format, translate, illustrate, or deliver personalized stories.

Only information reasonably necessary for the requested production should be used. EllaTales seeks to avoid sharing unnecessary sensitive information and does not require photographs of children.

Where a third-party production tool processes personal information on behalf of EllaTales, EllaTales will seek to use the service in a manner consistent with this Privacy Policy and applicable data-protection requirements.

12. Payments

Payments are processed through third-party payment providers available at checkout.

EllaTales may receive transaction details such as payment status, transaction identifier, payment method category, amount, currency, fraud indicators, refund status, and billing information needed to manage the order.

EllaTales does not intentionally store complete payment-card numbers or card security codes. Those details are handled by the payment provider according to its own privacy and security practices.

13. Accounts, passwords, and security records

EllaTales uses account information to authenticate users and protect My Library and digital downloads.

Password-reset emails contain a temporary secure link that allows the account holder to create a new password. EllaTales does not send a new password in plain text by email.

Security logs may record login attempts, password-reset events, IP addresses, download events, and other activity needed to protect accounts and files.

Users are responsible for keeping their credentials secure and should contact EllaTales if they suspect unauthorized access.

14. Transactional and marketing communications

EllaTales may send functional or transactional communications necessary to provide the service, including:

• Account registration and email-verification messages.
• Password setup and password-reset messages.
• Order and payment notices.
• Production and delivery notifications.
• Security alerts.
• Customer-support responses.
• Important service or legal updates.

These communications are not marketing messages and may be necessary to maintain the account or provide a purchased service.

Promotional messages are sent only when the user has provided the applicable consent or when otherwise permitted by law. A user may unsubscribe from marketing without losing access to transactional communications or purchased stories.

15. Cookies and similar technologies

EllaTales uses cookies, sessions, local storage, logs, and similar technologies to operate the website and services.

These technologies may be used to:

• Keep users signed in.
• Maintain the cart and checkout.
• Protect forms and accounts.
• Remember preferences.
• Provide My Library and protected downloads.
• Measure website performance and usage.
• Detect fraud, errors, or security incidents.

Essential technologies are required for the website to function. Non-essential analytics, personalization, or advertising technologies will be managed according to applicable consent requirements.

Additional details may be provided in a separate Cookie Policy or cookie-consent interface.

16. When we share personal information

EllaTales may share personal information only when reasonably necessary with:

• Hosting, cloud, database, and website-infrastructure providers.
• Email-delivery and communication providers.
• Payment processors, banks, digital wallets, and fraud-prevention providers.
• E-commerce, form, account, authentication, analytics, security, and customer-support providers.
• Authorized editorial, design, translation, illustration, or technology providers involved in producing a requested story.
• Professional advisers such as accountants, auditors, insurers, or legal advisers.
• Government authorities, courts, regulators, or law-enforcement agencies when required or permitted by law.
• A successor organization in connection with a merger, acquisition, restructuring, financing, or sale of all or part of the business, subject to appropriate protections.

Service providers are expected to process information only for the services they provide and according to applicable contractual, confidentiality, and legal obligations.

17. Sale or sharing of personal information

EllaTales does not sell personal information for money.

At the effective date of this Policy, EllaTales does not knowingly sell or share personal information about children for targeted advertising.

If future advertising or analytics practices create a legal “sale,” “sharing,” or similar disclosure under applicable law, EllaTales will update its notices and provide any required opt-out controls before applying those practices.

18. International processing and transfers

EllaTales is operated from Colombia and may serve users internationally.

Personal information may be processed in Colombia and in other countries where EllaTales or its service providers operate. Those countries may have privacy laws different from the laws in the user’s country.

Where required, EllaTales will seek to use appropriate safeguards for international transfers, such as contractual protections, provider commitments, recognized transfer mechanisms, or other measures permitted by applicable law.

19. Data retention

EllaTales retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including:

• Account and My Library information while the account remains active and as needed to maintain access to free or purchased stories.
• Personalized story instructions, production records, delivered files, and related support information while needed to provide, maintain, document, or defend the service.
• Order, transaction, refund, accounting, tax, and legal records for the periods required by applicable law.
• Security, fraud-prevention, access, and download records for a period reasonably necessary to protect the platform and users.
• Marketing information until consent is withdrawn, the user unsubscribes, or retention is no longer necessary.
• Email-delivery logs generally for up to two years, unless a shorter or longer period is required for security, support, or legal purposes.

When information is no longer required, EllaTales may delete, anonymize, aggregate, or securely isolate it. Some information may remain temporarily in restricted backups until normal backup cycles overwrite or delete it.

20. Security

EllaTales uses reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Measures may include HTTPS, access controls, account authentication, protected download links, security logs, backups, software updates, restricted administrative access, and selected service providers.

No website, transmission, storage system, or security measure can guarantee absolute security. Users should use strong passwords, protect their email accounts, and promptly report suspected unauthorized access.

21. Privacy rights

Depending on applicable law, a person may have the right to:

• Know whether EllaTales processes their personal information.
• Access personal information held about them.
• Request correction or updating of inaccurate or incomplete information.
• Request deletion or suppression, subject to legal, contractual, security, and technical exceptions.
• Request restriction of processing.
• Object to certain processing.
• Withdraw consent for future processing.
• Request portability of information when applicable.
• Ask for information about the sources, purposes, categories, recipients, or disclosures of personal information.
• Opt out of certain sales, sharing, targeted advertising, or marketing when applicable.
• Complain to a competent privacy or consumer-protection authority.
• Receive equal service and not be unlawfully discriminated against for exercising privacy rights.

Some requests may be limited when EllaTales must retain information to complete a transaction, maintain My Library, protect users, prevent fraud, comply with law, resolve disputes, or establish or defend legal claims.

22. How to exercise privacy rights

Privacy requests may be submitted to:

The request should describe the right being exercised and provide enough information to identify the relevant account or interaction.

EllaTales may need to verify the requester’s identity and authority before responding. When a request concerns information relating to a child, EllaTales may also verify that the requester is the parent, legal guardian, or authorized adult.

EllaTales will respond within the period required by applicable law. A request may be denied or limited when a lawful exception applies, and EllaTales will provide an explanation when required.

23. Colombian data-protection rights

Under applicable Colombian data-protection law, data subjects may have rights including:

• Knowing, updating, and correcting personal information.
• Requesting proof of authorization where applicable.
• Being informed about the use made of personal information.
• Submitting complaints before the Superintendencia de Industria y Comercio when legal requirements are met.
• Revoking authorization or requesting deletion when legally available.
• Accessing personal information that has been processed.

Before submitting certain complaints to the Colombian authority, the individual may be required to first contact EllaTales and allow the company to respond according to the applicable procedure.

24. Additional rights for international users

Users in the European Economic Area, the United Kingdom, California, and other jurisdictions may have additional rights under local law.

Where those laws apply to EllaTales, the company will honor the applicable rights and notices, including rights relating to access, correction, deletion, restriction, objection, portability, consent withdrawal, sales or sharing opt-outs, and complaints to a competent authority.

The availability and scope of a particular right depend on the law, the nature of the relationship, the information involved, and any applicable exception.

25. Automated decision-making and profiling

EllaTales does not use information relating to children to make solely automated decisions that produce legal or similarly significant effects on them.

EllaTales may use automated tools for security, fraud detection, website operation, formatting, or production assistance, but material customer-service, correction, cancellation, and refund decisions may be reviewed by authorized personnel.

26. Third-party links and services

The EllaTales website may contain links to third-party websites or services.

EllaTales is not responsible for the privacy practices, content, or security of a third party that operates independently. Users should review the privacy notice of the relevant third party before providing information.

27. Changes to this Privacy Policy

EllaTales may update this Privacy Policy to reflect changes in the service, technology, providers, legal requirements, or privacy practices.

When material changes are made, EllaTales may provide notice through the website, account area, email, or another appropriate method.

The effective date and version number will be updated when a revised Policy is published.

28. Language

This Privacy Policy was originally prepared in English.

EllaTales may provide translations for convenience. Until an official human-reviewed translation is published, automated translations should be considered informational.

If an inconsistency arises between the English version and an automated translation, the English version will control, except where applicable mandatory law requires otherwise.

29. Contact information

Questions, requests, or complaints about privacy may be submitted to: