1. Who is responsible
CELESTE LABS DIGITAL LTD is the controller of your personal data under UK GDPR. Postal address: Initial Business Centre, Unit 7 Wilson Business Park, Manchester, United Kingdom, M40 8WN. Email: support@ourlittlesong.com.
2. What we collect
We collect your story text, names, pronunciation hints and song preferences; email address; song files, lyrics and cards; order details and payment status; and support correspondence. We store a hashed IP address for generation limits. With tracking consent, event information can also include your IP address, user agent, pages visited and fbp/fbc advertising identifiers. Payment card data stays with Stripe or PayPal; we receive payment references and status, not full card numbers.
3. Why we use it
We use order and story data to fulfil our contract with you: generating, storing and delivering your song and providing order support. We use limited security data for our legitimate interests in preventing abuse and protecting the service. We keep required transaction records to meet legal obligations. Optional analytics and advertising use your consent; you can withdraw it through Cookie settings. Song and order emails support your purchase; reminder emails include an unsubscribe link.
4. Service providers
- Cloudflare: website hosting, song storage and database services.
- Stripe and PayPal: payments and fraud prevention, where those payment methods are offered.
- Resend: song and order emails. Cloudflare Email may replace Resend as our configured email provider.
- Meta Pixel and Conversions API: with consent, advertising measurement using hashed email, IP address, user agent and fbp/fbc identifiers. Hashing does not make this data anonymous.
- PostHog (self-hosted): consent-based product analytics, such as song-form steps and playback events.
- Microsoft Clarity: consent-based session replay with form text masked.
- kie.ai: lyrics and greeting-card text generated with Google Gemini from the necessary story details.
- apimart: music and vocals generated with Suno from lyrics and musical preferences.
5. How long we keep data
- Paid songs: we keep the full audio, covers, lyrics, gift page and the details you submitted for as long as Our Little Song runs.
- Unpaid songs: 90 days after creation, we delete the song, your submitted details, all audio and covers, and its email history. We keep songs with a payment in progress until that payment is resolved.
- Order and payment records: we keep these for 6 years. These records do not contain card details.
- Unsubscribe, bounced-email and spam-complaint records: we keep these permanently so we do not send unwanted emails.
6. Your rights
Subject to UK GDPR conditions, you can request access, correction, deletion, restriction and portability of your personal data, and object to processing. You can withdraw consent without affecting earlier lawful processing. Email support@ourlittlesong.com. You can also complain to the UK Information Commissioner’s Office (ICO).
Information Commissioner’s Office8. International processing
Our providers may process data outside the UK. UK GDPR requires an applicable adequacy decision or appropriate safeguards for restricted transfers. Contact us for information about the locations and safeguards applicable to your data.