Your photographs, handled carefully.
A plain-English summary of what we collect, what we do with it, and what your rights are.
- We keep your child's uploaded photo only long enough to render the portrait, then delete it within 24 hours.
- We never sell your data, and we never use your photos to train any AI model.
- Payment details go straight to Stripe — we don't store your card.
- You can ask us to delete everything we have about you at any time.
Who we are
The Little Hero Company (“we”, “us”) operates the website at thelittleherocompany.com. For any privacy questions, contact us at info@thelittleherocompany.com.
What we collect
- The photograph you upload — used only to generate your portrait. Deleted from our storage within 24 hours.
- Your shipping address and name — collected at checkout, used to dispatch canvas orders and to contact you about your order.
- Your email address — used to send order confirmations, delivery updates, and occasional service emails. You can unsubscribe from non-essential email at any time.
- Payment details — handled entirely by Stripe. We only see the last four digits of your card and the card brand, for our records.
- Basic usage data — like a session ID (in a first-party cookie) so we can link the preview you generated to the order you place, and an anonymous hash of your IP for fraud protection.
What we don't do
- We never sell your data to third parties.
- We never use your photos to train AI models — neither ours nor anyone else's.
- We don't share your photo with anyone outside our print fulfilment partner, and only the final, rendered portrait (not your original upload).
- We don't run advertising pixels from third-party networks without your consent.
Who we share data with
We use a small set of trusted providers to deliver the service:
- Stripe — payment processing
- Prodigi — canvas printing and fulfilment (receives only your shipping details and the final rendered portrait)
- Resend — transactional email delivery
- Cloudflare R2 — image storage (UK/EU-aligned)
- Supabase — our application database
We've chosen providers who publish strong data-protection commitments. If any of them materially change, we'll update this page.
How long we keep things
- Uploaded photos: up to 24 hours, then deleted.
- Rendered portrait (for canvas orders): up to 90 days, so we can reprint if needed.
- Order records: 7 years (UK accounting requirements).
- Email address: until you ask us to delete it.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, correct it, or ask us to delete it. Email info@thelittleherocompany.com with your order number (if any) and we'll action the request within 30 days.
If you think we're mishandling your data, you can also complain to the UK Information Commissioner's Office (ico.org.uk).
Cookies
We use a handful of first-party cookies for essential functionality — keeping you logged in, remembering your currency preference, tying your preview to your later order. We don't use third-party advertising cookies without your consent. See our cookies page for the full list.
Changes to this policy
If we change anything material in how we handle your data, we'll update this page and, where reasonable, email you.
Last updated: 25 April 2026