Privacy policy

The short version

Memoricol turns your photos into a personalised colouring book. To do that, we need your photos, a name for the cover, and somewhere to post it. The moment your book ships, we permanently delete every photo and the printable files we generated. We never sell your data. Ever.

Memoricol (ABN 69 907 237 659) is a GST-registered business based in New South Wales, Australia. If you have any question about your privacy, email hello@memoricol.com.au.

What we collect

• Photos you upload for the book.
• Personalisation details: the name on the cover, the occasion, any custom title text.
• Delivery details: your name, email, postal address, optional phone, and any delivery note you add.
• Payment details, handled directly by Stripe. We never see your full card number. We receive a tokenised reference + the last four digits + transaction status.
• Basic technical data: your IP address at the time of order (for fraud prevention) and standard web-server logs.

What we don’t collect

• We don’t run third-party advertising trackers on the checkout flow.
• We don’t profile your child or anyone in your photos.
• We don’t sell, rent, or share your data with marketing partners.

How long we keep your photos

Your photos and any printable files we generate from them live in our system only long enough to print and ship your book. The moment your order’s status changes to “shipped”, an automatic process permanently deletes:

• Every photo you uploaded (originals).
• Every line-art page our system generated from those photos.
• The print-ready PDF and cover wrap.
• Your raw upload folder on our server.
• Your name and email address stored alongside the order (kept only for the deletion confirmation email).

You’ll receive an email confirming the deletion. After that, we have no copy of your photos. If you ever want another book, you’ll need to re-upload.

What we keep for accounting

After deletion, the only data we retain about your order is:

• Order reference number, date, total amount, GST.
• Delivery suburb + postcode (for shipping cost auditing).
• The cover title we printed (without your name attached).

This is kept for five years to comply with our obligations under the Income Tax Assessment Act 1997 and the GST regime.

Third parties who briefly touch your data

• Stripe processes your payment. Stripe’s privacy policy.
• Google Places powers the address autocomplete on the checkout form. Only the text you type into the address field is sent (not your photos or order details).
• Our print partner receives only the print-ready PDF + delivery address. They never see your raw photos or any other data.
• Australia Post and international couriers receive your delivery address.
• Our email provider delivers your order confirmation and the photo-deletion confirmation.

Each of these is a “data processor” acting on our instructions; we have agreements in place that prevent them from using your data for their own purposes.

Sending data overseas

Some of these providers are based outside Australia, so a limited amount of your information may be handled overseas. In particular, Stripe (payments) and Google (address autocomplete) operate in the United States, so your payment reference and the address text you type may be processed there. Where a provider is overseas, we only use reputable services that are bound to protect your information. We don’t otherwise disclose your personal information to anyone outside Australia.

Cookies

We use minimal cookies: a session cookie to remember your shopping flow if you navigate away mid-order, and Stripe’s payment-form cookies. We don’t use third-party advertising or marketing-pixel cookies.

Your rights under the Privacy Act 1988

You have the right to:

• Ask what data we hold about you (we’ll tell you within 30 days).
• Ask us to correct anything that’s wrong.
• Ask us to delete your data earlier than our normal cycle. Email hello@memoricol.com.au with your order reference and we’ll delete within 7 working days.
• Complain to the Office of the Australian Information Commissioner if you think we’ve handled your data badly. We’d much prefer you raised it with us first so we can fix it.

Children and the people in your photos

Memoricol books are for kids, but the orders are placed by adults. By uploading a photo of a child (yours or someone else’s), you confirm that the parent or guardian has agreed to the photo being used to make this book. We never use the photos for anything else: not marketing, not training AI models, not promotional material, ever.

How we protect your data

Your uploads and order details are held on access-controlled systems, your photos sit in a folder that isn’t publicly reachable on the web, and payment happens over an encrypted connection through Stripe. We keep your photos only as long as we need them to make and ship your book, which keeps the window in which anything could go wrong as small as possible.

If something goes wrong

If we ever have a data breach that affects your information, we’ll notify you and the OAIC within the timeframes required by the Notifiable Data Breaches scheme.

Changes to this policy

If we ever change anything that affects what we collect, who we share it with, or how long we keep it, we’ll update this page and email anyone with an active order in the previous 90 days. Smaller editorial updates land here without an email; the “Effective” date at the top tells you when it last changed.