Privacy Policy
Last updated: 25 March 2026
1. Who we are
Vivlore Ltd ("we", "our", "us") operates vivlore.com. We are registered in England and Wales. This policy explains how we collect, use, and protect your personal data under UK GDPR and the Data Protection Act 2018. Our lawful bases are: performance of the contract (your subscription or print order), legitimate interest (service operation and security), and consent (optional product emails). For questions or to exercise your rights, contact privacy@vivlore.com.
2. What we collect
Account data (name, email, password hash, locale). Biography content (text, photos, audio recordings, dates you upload). Payment data (card details are processed and stored by Stripe, never by us; we receive only the transaction reference and last four digits). Order data (shipping address, phone number for delivery, order history). Usage data (pages visited, features used, anonymised where possible). Device data (browser type, IP address — retained for 30 days for security and abuse prevention).
3. How we use it
To provide and improve our service, process payments, produce and ship the printed books you order, send transactional emails (account verification, password reset, order confirmation, shipping notifications), and optionally send product updates if you opt in. We never sell your data to third parties, and we never use your biography content to train AI models.
4. Sub-processors
We use the following sub-processors to provide the service. Each is contractually bound to UK GDPR-equivalent data protection terms. Stripe (Ireland / USA) — payment processing. Lulu Press Inc. (USA) — printing and fulfilment of hardback books; receives your name, shipping address, phone number, and the contents of any book you order. Amazon Web Services (London, UK region eu-west-2) — hosting and data storage. Resend (USA) — transactional email delivery. Sentry (USA) — error monitoring (collects technical error context, may include user ID). Google (USA / EU) — Sign In with Google, if you choose to use it. We do not currently use AI-generation services on your biography content; if that changes, this policy will be updated and you will be notified.
5. Your rights
Under UK GDPR you have the right to access your data (Art. 15), request deletion (Art. 17), export your data in a portable format (Art. 20), restrict processing (Art. 18), object to processing (Art. 21), and withdraw consent for any consent-based processing. You can exercise these rights from Account Settings, or by emailing privacy@vivlore.com. We respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).
6. Data retention
Active account data is kept while your account exists. If you delete your account, all your data (including biography content) is permanently removed within 30 days. Encrypted backups are purged within 90 days. We retain a minimal record of completed print orders (order ID, amount, date) for seven years to meet UK tax-record requirements; this record does not include the contents of your biography.
7. Cookies
We use essential cookies only (session, authentication, cookie-preference). We do not use advertising or cross-site tracking cookies. You can decline all non-essential cookies via the consent banner shown on your first visit, or manage cookies at any time in your browser settings. Declining cookies does not affect your ability to use the service.
8. International transfers
Some of our sub-processors are based outside the UK. Where data is transferred internationally we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses with the UK addendum, plus the sub-processor's own UK GDPR-equivalent commitments.
Questions? Email privacy@vivlore.com. See also our Terms of Service.