What happens to
your details.

The short version

MyLittleLore keeps accounts optional — you can buy as a guest and never create one. We use Google Analytics 4 to see which pages and traffic sources bring visitors and whether our ads are working, which sets a small number of analytics cookies in your browser. Outside the EEA, the UK and Switzerland we also use the Meta Pixel (Facebook/Instagram) to see which bundles are viewed and bought and to help our own ads reach the right people; it is not loaded at all for visitors in those regions. The only personal information we hold is what PayPal passes on so an order can be completed, an email address you choose to leave for occasional new-bundle notes, plus anything you write to us.

We do not sell your details and we do not pass them to anyone outside the services named below. Outside the EEA, the UK and Switzerland, Google Analytics and the Meta Pixel may use your visit to help us measure and target our own advertising; we never upload your name or email to either.

What is collected

There are exactly two ways your information reaches us.

The shop keeps a record of each completed order — your name, the email address PayPal shares, which bundle, the amount and the payment reference — so files can be re-sent and orders looked up. For personalised sets we also keep the child's name(s) and print size you entered, because we need them to make and re-send your files. The anti-replay reference still deletes itself automatically after 90 days; the order record itself is kept for as long as the shop needs it to honour re-sends and refunds.

Cookies and tracking

We use Google Analytics 4 to see which pages and traffic sources bring visitors and whether our ads are working. It sets a small number of analytics cookies in your browser so it can tell a returning visit from a new one. It is never told your name or your email address. It does record which bundles are viewed and bought, and an order reference, so we can see which sets sell. For visitors in the EEA, the UK or Switzerland, analytics and advertising cookies stay off by default; the site has no cookie banner to ask first, so everywhere else that default starts on. If you would rather opt out everywhere, Google publishes a browser add-on that does exactly that: tools.google.com/dlpage/gaoptout.

We also use the Meta Pixel (Facebook/Instagram) the same way, to see which bundles are viewed, added and bought so we can measure and target our own ads there. It is not loaded at all for visitors in the EEA, the UK or Switzerland — everywhere else it sets a cookie and tells Meta which pages and bundles were viewed, added to the bag or bought, and the order value. It is never given your name, your email, an order reference or a download link.

Beyond that, the shop puts two small things in your browser: your bag — which bundles you have added — kept in the browser's local storage on your device so it is still there when you come back, never sent anywhere; and, after a purchase, your download link, held in the tab's own session storage just long enough to carry it from the payment to the page that shows it, and cleared the moment you close the tab.

PayPal may set its own cookies when its checkout runs, which it needs in order to take the payment safely. Those belong to PayPal and are covered by PayPal's own policy, not this one.

Who else handles it

Running even a small shop means a few companies are involved. These are the only ones.

Each of those is an independent company with its own privacy terms. Beyond what is named above, we do not pass your details to anyone else — no marketing lists, no data brokers.

What it is used for

Three things, and nothing beyond them: sending you the bundle you paid for, answering you when you get in touch, and keeping the sales records a small business has to keep for its accounts and tax return.

We do not send marketing emails. If you write to us, you get a reply about the thing you asked about, and that is the end of it.

How long it is kept

Order records are kept for as long as accounting and tax rules require, and so that we can still help if you lose your files a year later. The automatic anti-replay record of a completed payment expires after 90 days. Email threads are kept while they are useful and deleted when they are not.

Nothing is kept by us because it might be handy for marketing one day.

Seeing, correcting or deleting what we hold

Write to us through the contact page and say which order you mean — the email address you paid with is usually enough. You can ask what we hold, ask for something to be corrected, or ask for it to be deleted.

We will delete what we are free to delete and confirm when it is done. The one thing we cannot remove is a sales record we are legally required to keep for accounts and tax; if that applies, we will say so rather than quietly ignore the request. Anything held by PayPal has to be requested from PayPal directly.

Children

The art is made for children's rooms, but the shop is sold to adults. We do not knowingly collect information from children, and there is nothing on the site for a child to sign up to.

Changes, and one honest note

If this changes — a new payment method, an analytics tool, anything at all — the description here is updated and the date at the top changes with it.

One last thing, said plainly: MyLittleLore is a small family business, not a company with a compliance department. This page describes what genuinely happens rather than claiming certifications we do not hold. If you think something here is wrong or unclear, tell us and we will fix the page.