Privacy policy
Last updated: May 2026
Tales by Tuck is a UK-based service that creates and delivers a personalised bedtime story for your child. We take privacy seriously, especially because we handle a small amount of children’s data. This policy explains what we collect, why, and the choices you have. We process personal data in line with UK GDPR, the Data Protection Act 2018, and the ICO Age Appropriate Design Code (the “Children’s Code”).
Who we are
Tales by Tuck (“we”, “us”) is the data controller for the personal data described here. You can reach us at hello@talesbytuck.com.
Tales by Tuck is a trading name of Stancia Limited, a company registered in England and Wales (company number 16408027), registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. VAT registration number GB 513 1153 44.
What we collect
About you (the parent or guardian): your name, email address, mobile number (so we can deliver stories), and account and billing details. Card payments are handled securely by Stripe; we never see or store your full card number.
About your child: only a first name or nickname, their age, and a few interests or favourite characters. We deliberately do not ask for a surname, date of birth, photographs, or any special-category data. This is all the story needs.
Usage data: basic technical information such as delivery success, and limited analytics to keep the service running and improving (see our Cookie policy).
How we use it
- To generate and deliver a personalised story to your child each day.
- To manage your account, subscription and payments.
- To send service messages, and (only if you opt in) occasional updates.
- To keep the service safe, including an automated safety check on every story before it is sent.
Our lawful bases
We rely on contract to provide the service you sign up for, and consent for processing your child’s details to personalise stories and, separately, for any marketing. You can withdraw consent at any time.
Children’s data
The account holder is an adult parent or guardian who provides consent on the child’s behalf. In keeping with the Children’s Code, we minimise what we collect, default to the most private settings, and never use nudge techniques or profiling for marketing to children.
Who we share it with
We only share data with the trusted suppliers that help us run the service, under data-processing agreements. These include payment processing (Stripe), story generation (our AI provider, which does not use this data to train its models), secure hosting and database, message delivery (email and WhatsApp providers), and security and analytics tooling. We never sell your data.
International transfers
Some suppliers are based outside the UK. Where that is the case, we rely on appropriate safeguards such as the UK Extension to the EU-US Data Privacy Framework, or UK International Data Transfer Agreements, and we keep primary storage in a UK or EU region.
How long we keep it
Stories are automatically deleted after 12 months. Account and billing records are kept for as long as you have an account and for any period we are legally required to retain them. Consent records are kept as an audit trail.
Your rights
You can access, export, correct or delete your data at any time from your account, or by emailing us. You also have the right to object to or restrict certain processing, and to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Cookies
We use a small number of cookies to run the site. See our Cookie policy for details.
Changes
If we update this policy, we will change the date above and, for significant changes, let you know by email.
Contact
Questions about your data? Email hello@talesbytuck.com and we’ll help.