Privacy Policy
Bright Week Books · Last updated: 7 October 2026
Bright Week Books ("we", "us") makes personalized illustrated storybooks. This policy explains what we collect when you use brightweekbooks.com and order a book, why, who we share it with, and how long we keep it.
The short version:
- We collect only what we need to make and deliver your book, plus, unless you say no, your email so we can tell you when a new story comes out.
- We never ask for a photo of your child.
- We do not sell your data, share it for advertising, or use tracking cookies.
1. Who we are
Alt Software Solutions EOOD, ul. Hubcha 2, Sofia, Bulgaria, operating as "Bright Week Books". Contact: support@brightweekbooks.com.
2. What we collect
You give us, to personalize the book:
- Your child's first name, as you want it printed (up to 30 characters).
- An optional dedication (up to 180 characters).
- The character you choose: boy or girl, skin tone, hair color and hairstyle. You pick from a set of illustrated characters. We do not collect a photo or any description of your actual child.
You give us, to place the order:
- Your email address.
- For a printed book: recipient name, full shipping address, phone number, city, state and ZIP code (United States only). Before payment we send the address and delivery phone to Lulu to check it and calculate delivery. You confirm any recommended correction. We store the confirmed address with the price so the book is sent to the address you approved. Unused checks are erased within 24 hours; checks tied to a quoted order follow the order retention windows below, to allow late payment confirmations.
You give our payment provider, Stripe, on its checkout page:
- Your card details. These go to Stripe only; we never see or store your card number.
- Your payment and billing details. We receive payment confirmation and your email after payment. Delivery uses the address you confirmed on our site.
Collected automatically:
- Our web server keeps no access log: we do not record your IP address or which pages you view. The shop's own processes keep short operational logs (which step of an order ran, errors) with no names, addresses or IP addresses in them, overwritten automatically as they fill.
- We do not use analytics, advertising pixels or tracking cookies. The site sets no cookies of its own.
- Our pages load nothing from other companies: fonts and images come from our own server, so no third party learns that you visited.
Emails about new stories: when you buy a book, we will email you when we publish a new story. At checkout you can tick "No thanks", and you can stop these emails at any time: reply to any of them, use the unsubscribe link they carry, or write to support@brightweekbooks.com. To be able to write to you, we keep your email address after the rest of the order's personal data is erased (section 5). When you unsubscribe we erase the address and keep only a one-way fingerprint of it (a hash), so that a later order does not put you back on the list. We do this on the basis of our legitimate interest in telling our customers about similar books (Article 6(1)(f) GDPR and Article 13(2) of the ePrivacy Directive). We send these emails ourselves; we do not give the list to anyone else.
Waiting-list email (optional): if you ask to hear about future titles, we keep your email and the title you are interested in until you unsubscribe or ask us to delete it.
3. How we use it
- To make your book. Your child's name, the dedication and the chosen character are placed into the print files.
- To take payment. Through Stripe.
- To print and ship. Through our print partner, Lulu.
- To answer you. Order questions, reprints and refunds.
- To tell you about new stories, unless you said no (section 2).
- To keep the service secure and prevent fraud.
Apart from the new-story emails, we do not use your information for marketing, and never for advertising by anyone else. We do not use your child's name, dedication or chosen character to train any AI model, and we do not send them to any AI service. The illustrations are prepared in advance.
4. Who we share it with
We share personal information only with the service providers who make and deliver your book, and only what each one needs:
| Provider | What they receive | Why |
|---|---|---|
| Stripe (payments) | Your email; your card, name, address and phone, entered on Stripe's page; the order number; a generic product name and the story's cover art, with no child in it | To take payment and prevent fraud |
| Lulu Press (printing and shipping, USA) | The print files (which contain your child's name, the dedication and the illustrated character), the recipient name, shipping address and phone (never your email) | To print the book and deliver it; the carrier may use the phone for delivery questions |
| Hetzner Online (hosting, Germany) | All of the above, stored on our servers | To run the shop |
We do not sell personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are used in US state privacy laws. We may disclose information if required by law, or to protect our rights, or in connection with a sale or merger of the business. In a sale or merger, this policy continues to apply.
5. How long we keep it
| Data | Kept until |
|---|---|
| Shipping name, address, phone, email | 60 days after delivery, refund or cancellation |
| Child's name and dedication | 60 days after delivery, refund or cancellation |
| Print files (PDFs) | 60 days after delivery, refund or cancellation |
| An order you started but did not pay for | 37 days after you last changed it (it is closed after 7 idle days, then kept 30 more) |
| Order record, with no name, address or dedication (order number, character, price, payment and shipping status) | 7 years, for tax and accounting |
| Email for new-story emails | Until you unsubscribe; after that only a one-way fingerprint, so you are not added back |
| Waiting-list email | Until you unsubscribe or ask us to delete it |
After those periods the information is deleted. Our daily database backups, kept on our own server for 14 days, may hold deleted information until they are overwritten. One consequence: we can reprint a lost or damaged book only within the window in section 5 of our Terms of Service, because after that we no longer have the name or the address.
6. Children's privacy
This website is for parents and other adults buying a gift. It is not directed at children, and we do not knowingly collect personal information from children under 13.
The child's first name and chosen character are provided by the adult placing the order, solely to print that child's book. If you believe a child has sent us information directly, email us and we will delete it.
7. Your choices and rights
You can ask us to:
- access the personal information we hold about you;
- correct it;
- delete it;
- tell you which categories we collect and who we share them with;
- stop the new-story emails, at any time and at no cost.
Depending on your state (for example California, Virginia, Colorado, Connecticut or Texas), you may have these rights by law. We honor them for all customers. Email support@brightweekbooks.com. We may need to confirm your identity by asking for your order number and the email used to order. We will not treat you differently for making a request.
Once a book has been sent to print, we cannot change its contents. If you ask us to delete data after the book has shipped, we will still keep what tax and accounting law requires (see section 5).
8. Where your data is stored
Our servers are in Germany (Hetzner). Stripe and Lulu process data in the United States and elsewhere. By ordering, you understand that your information is transferred to and stored in these countries. We protect it with the safeguards described below, wherever it is.
9. Security
- All traffic to our site is encrypted (HTTPS).
- Our database connections are encrypted.
- Payment details are handled by Stripe and never reach our servers.
- Print files are held at private, unguessable addresses.
No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.
10. Changes
If we change this policy, we will update the date above. If a change is significant, we will say so on the site before it takes effect.
11. Contact
Alt Software Solutions EOOD · ul. Hubcha 2, Sofia, Bulgaria · support@brightweekbooks.com