Privacy Policy – Tales and Treasures
Effective Date: December 15, 2025
Last Updated: December 15, 2025

Tales and Treasures (“Tales and Treasures,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, place an order, submit your story, or otherwise interact with our services.

1) Contact Us

Email: sheylah@tales-and-treasures.com
Business Address: 10625 Gooch Hill Rd, Gallatin Gateway, MT 59730
Legal Entity: Tales & Treasures LLC, MT

2) What This Policy Covers

This Policy applies to personal information we collect through:

  • Our website and related pages

  • Our order and story intake process (questionnaires/forms)

  • Communications with you

  • Delivery, printing, fulfillment, and shipping (if purchased)

This Policy does not cover third-party websites or services you access via links on our site.

3) Personal Information We Collect

A) Information You Provide

  • Contact information: name, email address, phone number (if provided)

  • Order information: product selection, add-ons, preferences

  • Shipping information: shipping name and address (for printed products)

  • Story intake information: any details you submit through questionnaires/forms

  • Customer support communications: emails/messages you send us and your replies

  • Marketing permissions: consent choices (e.g., whether excerpts may be used)

B) Payment Information

Payments are handled by third-party payment processors. We generally receive confirmation of payment and basic transaction details (e.g., amount, date, and order ID). We do not store full credit/debit card numbers.

C) Information Collected Automatically

  • Device and usage data: IP address, browser type, pages viewed, timestamps

  • Cookies and similar technologies: used for site functionality, analytics, and performance (see Section 10)

4) Important Notice About Sensitive Information

Our Services create custom family stories. Please do not submit highly sensitive information, such as:

  • Passwords, financial account numbers, or payment card details

  • Government ID numbers (e.g., SSN, passport numbers)

  • Precise medical diagnoses or medical records

  • A child’s direct contact details (phone/email) or school information

  • Any other information you would not want exposed in the event of a data incident

If you choose to submit sensitive information, you do so at your own discretion.

5) How We Use Personal Information

We use personal information to:

  • Create and deliver your custom story and any purchased add-ons

  • Provide revisions/corrections consistent with your order terms

  • Communicate with you about your order, delivery, and support requests

  • Operate and improve our website and services

  • Prevent fraud and protect the security and integrity of our Services

  • Comply with legal obligations and enforce our Terms of Service

6) AI and Third-Party Processing

To create your custom story, we may process story intake content using third-party AI tools (for example, Claude by Anthropic and/or ChatGPT by OpenAI) and related software tools. We may also use AI-based illustration tools to generate images based on prompts derived from your story.

We strive to limit the data shared by using only what is reasonably necessary (for example, using placeholders instead of full names where feasible). However, use of third-party tools means your information may be processed under those providers’ terms and policies.

7) When We Share Personal Information

We share personal information only as needed to operate our business, including:

A) Service Providers

We may share information with vendors that help us run our business, such as:

  • Website hosting and analytics providers

  • Form and productivity platforms (e.g., Google Workspace tools)

  • AI providers (to generate story drafts)

  • Illustration tools (to generate images from prompts)

  • Payment processors

  • Printing and fulfillment providers

  • Shipping carriers

  • Email and customer support tools

These providers are authorized to access personal information only as necessary to perform services for us.

B) Legal, Safety, and Compliance

We may disclose information if required by law or if we believe disclosure is necessary to:

  • Respond to lawful requests

  • Protect rights, safety, and security of our customers and the public

  • Prevent fraud, abuse, or security incidents

  • Enforce our agreements and policies

C) Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction.

D) Marketing Use (Only If You Consent)

We will not use your story, excerpts, or identifiable details for marketing unless you explicitly consent. If you consent, we will aim to remove personal names and identifying details.

8) Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required by law.

Recommended defaults (edit to match your real practice):

  • Story intake + drafting materials: retained for 30 days after delivery for support/revisions, then deleted or de-identified.

  • Order and billing records: retained for [X years] for accounting/tax/legal compliance.

  • Chronicles archive (optional): if you opt in, we store materials longer under the terms shown at enrollment; you may request deletion at any time (subject to legal retention requirements).

9) Security

We use reasonable safeguards appropriate for a small business, which may include access controls, least-privilege permissions, multi-factor authentication where available, device encryption, and vendor security measures.

No security system is perfect. We cannot guarantee absolute security.

10) Cookies and Analytics

We may use cookies and similar technologies to:

  • Enable core website functionality

  • Remember preferences

  • Analyze traffic and site performance

You can control cookies through your browser settings. Disabling cookies may affect site functionality.

11) Children’s Privacy

Our Services are intended for adults (18+). We do not knowingly collect personal information directly from children. If you believe a child has provided us personal information directly, contact us and we will take appropriate steps to delete it.

12) Your US Privacy Rights

Depending on your state of residence, you may have rights to request access to, correction of, or deletion of certain personal information. To submit a request, email [sheylah@tales-and-treasures.com] with the subject “Privacy Request.” We may verify your identity before fulfilling your request.

13) Changes to This Policy

We may update this Policy periodically. We will post the updated version and revise the “Last Updated” date. If changes are material, we may provide additional notice.