Privacy Policy

Who this policy applies to

Beloved Tale is a freelance digital e-book service based in Dehiwala, Sri Lanka. This policy explains our handling of personal information with regard to Sri Lanka’s Personal Data Protection framework and other obligations that may apply to the service.

Information we collect

Information needed to create and support an order may include:

• Customer name, email address and phone number.
• Address or location fields supplied at checkout.
• Order details, prices, currency and payment-status information.
• Story preferences, language choices and personalisation details.
• Names, ages and other information entered for story characters.
• Customer-uploaded photographs.
• Generated stories, illustrations and downloadable PDFs.
• Technical and security information reasonably necessary for fraud prevention, verification and operation of the service.

Payments

PayHere handles payment-card entry and payment processing. Beloved Tale receives the payment and order information required to verify a transaction, but does not receive or store complete card numbers or card security codes (CVV values).

How information is used

Information is used only as reasonably necessary to:

• Create, verify and fulfil an order.
• Generate story text, illustrations and the final PDF.
• Provide story review, secure delivery and customer support.
• Prevent abuse, fraud and unauthorised access.
• Maintain transaction, accounting and legally required records.

AI-assisted processing is used to generate story text and illustrations from the order information and reference material the customer provides. Beloved Tale does not silently translate an order into another language.

Private photographs and generated files

Customer photographs are stored privately and are not displayed publicly. They are used as references for fulfilling and supporting the order. Generated stories, illustrations and PDFs are likewise handled as order materials and delivered through controlled service access rather than a public storage URL.

Service providers and international processing

Cloudflare infrastructure is used for Workers, private R2 object storage, D1 database services, Workers AI, Browser Run PDF rendering, Turnstile and related security functions. PayHere receives the customer and transaction information required to process payment.

Service-provider infrastructure may process information in other jurisdictions. Beloved Tale seeks to use providers and safeguards appropriate to the nature of the information and the service. Personal information is not sold.

Information may be disclosed where legally required, to respond to a lawful request, or where reasonably necessary to protect customers, the service or its security.

Retention

Information is retained only as long as reasonably required for order fulfilment, secure download, support, fraud prevention, accounting and legal obligations. Different records may require different retention periods. Beloved Tale does not promise automatic deletion on a fixed schedule where the current service does not provide it.

Your requests

A customer may request access to, correction of or deletion of their personal information. A request may be limited where transaction, fraud-prevention, dispute or legal-retention requirements apply. We may ask for information necessary to verify that the requester is the customer or is otherwise authorised.

Adults, children and other people’s information

A customer must be at least 18 years old to place an order. We do not knowingly invite children to order directly. An adult purchasing for a child or another person confirms that they have the parental, guardian or other legal authority and consent necessary to upload and use that person’s photographs and information for the order.

Browser storage and security checks

The service uses essential browser storage and checkout references to continue payment, review, status and download journeys. Cloudflare Turnstile and related technical information help distinguish genuine customer requests from abusive or automated traffic. These functions are necessary to operate and protect the service.

Security

Beloved Tale uses access controls, private storage, validation and other reasonable technical and organisational measures appropriate to the service. No internet transmission or storage system can guarantee absolute security.

Changes to this policy

This policy may be updated when the service, providers or legal obligations change. The revised policy will be published on this page with its effective date. Changes will not retroactively reduce rights that cannot legally be limited.