Privacy Policy

US Privacy Policy

• Last updated: January 2026

This Privacy Policy explains how we collect, use, disclose, and protect personal information when providing school yearbook and related services in the United States.

This policy is written to comply with applicable U.S. state privacy laws, including the California Consumer Privacy Act and California Privacy Rights Act ("CCPA/CPRA"), as well as applicable federal laws such as FERPA and COPPA.

1. Who We Are

We provide school-directed yearbook and leavers’ book services to U.S. schools and school-affiliated organizations ("Schools"). We act as a service provider / processor on behalf of Schools.

Schools are the data owners/controllers of student information. We process personal data only in accordance with School instructions and contractual obligations.

2. Scope of This Policy

This policy applies to personal information relating to:

• Students

• Parents or guardians

• School staff and administrators

• Authorized contributors to school yearbooks

This policy does not apply to information collected for purely personal or household activities.

3. Personal Information We Collect

Depending on the services provided, we may collect:

• Student names, class details, and school information

• Student photographs and written contributions

• Parent or guardian contact details (where provided by the School)

• Teacher and staff names and roles

• Account login credentials for authorized users

• Order, payment, and delivery information

• Communications sent to us

We do not knowingly collect sensitive personal information except as necessary to provide the services.

4. How We Use Personal Information

We use personal information solely to:

• Create, produce, and deliver school yearbooks

• Operate and maintain our online creation tools

• Communicate with Schools and authorized users

• Provide customer support

• Fulfil contractual and legal obligations

We do not use student personal information for advertising, profiling, or independent commercial purposes.

5. Children’s Data (FERPA & COPPA)

• FERPA

Student data provided by Schools constitutes education records under FERPA. We:

• Act as a school official with legitimate educational interest

• Use student data only for the School’s authorized purposes

• Do not redisclose student data except as permitted by the School or law

• COPPA

Our services are school-directed and provided with School authorization. We do not knowingly collect personal information directly from children under 13 outside of School instruction and consent.

6. Sharing of Personal Information

We may share personal information with:

• Delivery partners such as Royal Mail, Hermes, Amazon or alternatives

• Hosting and IT service providers

• Payment processors

• Professional advisers where legally required

All service providers are contractually required to protect personal information and use it only for providing services to us.

We do not sell or share personal information for cross-context behavioral advertising.

7. Data Retention

We retain personal information only for as long as necessary to:

• Fulfill the School contract

• Complete production, delivery, and support

• Meet legal, accounting, or regulatory requirements

Unless otherwise instructed by the School, student personal data is typically retained for the duration of the School’s project and for up to 12 months thereafter, after which it is securely deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, or misuse.

9. U.S. State Privacy Rights (Including California)

Depending on your state of residence, you may have the right to:

• Request access to personal information

• Request deletion of personal information

• Request correction of inaccurate personal information

• Not be discriminated against for exercising privacy rights

• California Privacy Rights

California residents have rights under the CCPA/CPRA, including the rights listed above. We do not sell or share personal information.

Requests may be submitted via the contact details below. We may need to verify your identity or confirm authorization with the School.

10. How to Exercise Privacy Rights

Privacy requests may be submitted by:

• Emailing us at our designated privacy contact

Where we act on behalf of a School, requests may be referred to the School for authorization.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to Schools.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us using the details provided in your School agreement.