Privacy policy
Last updated: September 27, 2026
This policy explains how Nimora handles your personal data and, in particular, your child's photo. We have written it with care, because this is data we pay particular attention to.
1. Who is responsible for your data?
The data controller is Nimora, Holenackerstrasse 65, 3027 Berne, Switzerland. Contact: info@nimorakid.com (you can send any request regarding your personal data to this address).
2. What data do we collect?
- For your order: name, shipping and billing address, email, phone number (if requested), order contents.
- To personalize the book: the child's photo and first name.
- To receive your preview by email (optional): your email address, which you give us while the preview is being generated.
- Browsing data: pages viewed, device, cookies, if you accept them.
- Your communications with us: messages sent via the contact form or by email.
3. Why, and on what legal basis?
- To create, print and deliver your book (performance of the contract): the photo, first name and your contact details are used for this purpose only.
- Preview before ordering: the photo is used to generate an illustrated preview, with your consent.
- To manage your orders, billing and customer service (contract and legal obligations).
- To send you the link to your preview by email, at your request, followed by a single reminder if no order was placed from the preview (a service linked to your request). The address is then deleted.
- To tell you about our new products and offers (consent, which you can withdraw at any time; separate checkbox, not selected by default).
- To measure and improve the site (consent for non-essential cookies).
4. Your child's photo: our commitments
- We only ask parents or legal guardians for this photo, or request it with their permission. A consent checkbox is selected before the photo is uploaded.
- The photo is used solely to create your child's book. It is never sold, never used for advertising purposes, and never shared with third parties other than the service providers needed to create and print the book (see section 6).
- Retention: if you do not place an order, the photo is deleted within 7 days (30 days if the preview was added to your cart, so you can still order). If you order, it is deleted no later than 30 days after your book has shipped.
- You can ask us to delete the photo sooner at any time by writing to us.
- We do not create any facial recognition database, and we do not use the photo to identify people.
5. Artificial intelligence
The photo is sent to a specialized technical service provider that generates the character illustration. The resulting illustrations are created by AI and may differ from the photo. We choose our service providers with care and only allow them to use your images to provide the service.
6. Who do we share your data with?
Only with service providers who help us provide the service:
- our online store and payment platform (Shopify);
- printing and shipping partners in the country of delivery (United Kingdom or United States);
- a technical provider of AI image generation;
- an email delivery tool (for the preview link you request and, if you have agreed, for our marketing communications);
- carriers, for delivery;
- the authorities, where required by law.
Some of these providers may be located outside the European Union or Switzerland, particularly in the United States. In such cases, we make sure appropriate safeguards are in place, such as standard contractual clauses or an adequacy decision.
7. How long do we keep your data?
- Your child's photo: see section 4.
- Email address given to receive the preview: 3 days at most, deleted as soon as the reminder is sent or if the preview leads to an order. If you have agreed to receive our communications, it is kept until you unsubscribe.
- Order and billing data: for the legal retention period for accounting records (10 years in Switzerland).
- Messages to customer service: for as long as needed to handle your request, then for the applicable limitation period.
- Marketing data: until you unsubscribe.
8. Your rights
You may at any time request access to your data, its rectification or deletion, the restriction of or objection to its processing, and its portability, and you may withdraw any consent you have given. Write to us at the address given in section 1. We will respond within one month.
You may also contact the data protection authority in your country: the CNIL (France), the Data Protection Authority (Belgium) or the Federal Data Protection and Information Commissioner (Switzerland).
9. Cookies
This site uses cookies that are essential for it to work and, with your consent, analytics and advertising cookies. You can change your choices at any time from the banner provided for this purpose.
10. Security
We take reasonable technical and organizational measures to protect your data. Payment is processed by a secure provider, and we do not store your banking details.
11. Changes
We may update this policy. The date of the last update is shown at the top of the page.