Privacy Policy

Magikast ("we", "us", "our") is operated by Baby Design Ltd., a company registered in the United Kingdom, with a trading address at 378 Mare Street, London E8 1HR, UK.

We are committed to protecting your privacy and the personal data of your family. This Privacy Policy explains how we collect, use, store, and protect personal information when you use Magikast.

This policy applies to users in the United Kingdom and European Union and is written in accordance with the UK GDPR and EU GDPR.

1. Who Magikast Is For

Magikast is intended for parents, guardians, family members, and friends who create personalised storybooks for children.

Children do not create accounts themselves. All accounts and purchases are made by adults.

2. Personal Data We Collect

We collect only the information necessary to provide our services.

Information you provide directly

• Adult name
• Email address
• Billing and delivery address
• Payment information (processed securely by Stripe)
• Child's first name only
• Child's age
• Child's appearance descriptions (e.g. hair, eyes)
• Child's interests, story themes, and selected values

Information collected automatically

• IP address
• Device and browser information
• Usage data
• Cookies and similar tracking technologies

We do not currently collect uploaded images of children. This may be introduced later with clear consent and updated policies.

3. How We Use Personal Data

We use personal data to:

• Create personalised stories and artwork
• Process orders and payments
• Deliver ebooks and printed books
• Manage user accounts
• Communicate with you about your order or account
• Send marketing communications where you have consented
• Improve and operate the Magikast platform
• Comply with legal obligations

We do not use personal data for purposes unrelated to Magikast.

4. AI-Generated Content

To create personalised stories and illustrations, certain data you provide may be processed by AI services.

• Story and artwork generation involves third-party AI providers
• Generated content is stored only within customer accounts
• Generated stories and artwork may be used internally to improve the product
• We do not sell or publicly share personalised stories or artwork

5. Payments

All payments are handled securely by Stripe. Magikast does not store or process payment card details directly.

Stripe processes payment information in accordance with its own privacy policy and security standards.

6. Third-Party Services

We use trusted third-party providers to operate Magikast, including:

• Hosting and infrastructure (e.g. Vercel, MongoDB)
• AI services (e.g. OpenAI, Google Gemini)
• Email and communications (e.g. Klaviyo, Mailchimp)
• Analytics and performance tracking (e.g. Google Analytics)
• Advertising platforms (e.g. Google, TikTok, Meta for pixel data only)

These providers only process data as necessary to perform their services and are required to meet appropriate data protection standards.

7. Marketing and Advertising

We may send marketing emails if you have opted in. You can unsubscribe at any time using the link in our emails.

We use advertising pixels and analytics tools (Google, TikTok, Meta) to understand performance and improve our marketing. These tools may collect anonymised or aggregated data.

We do not sell personal data to advertisers.

8. Cookies

Magikast uses:

• Essential cookies
• Analytics cookies
• Marketing cookies

A cookie consent banner allows you to manage your preferences in line with legal requirements.

9. Data Retention

We retain personal data only for as long as necessary to:

• Provide our services
• Meet legal and regulatory requirements under UK law

You may request account deletion at any time. When an account is deleted, associated personal data is removed or anonymised unless we are legally required to retain it.

10. Your Rights

Under UK and EU data protection law, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of data
• Restrict or object to processing
• Withdraw consent for marketing
• Lodge a complaint with a data protection authority

Requests can be made by contacting us using the details below.

11. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, or unauthorised access.

No system is completely secure, but we work hard to protect your information.

12. International Data Transfers

We do not intentionally transfer personal data outside the UK or EU.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

14. Contact Us

If you have questions about this Privacy Policy or how we handle data, you can contact us at: