Biography Studio

Privacy Policy

Last updated: 24 April 2026

This Privacy Policy explains how Biography Studio (“we”, “us”, “our”) collects, uses, and protects your personal information when you use our website biographystudio.com and our guided autobiography service. We are the data controller for the personal information we collect. You can contact us at Biography Studio, Corpascus, Mabe Burnthouse, Penryn, Cornwall, TR10 9JB, United Kingdom, or by email at hello@biographystudio.com. Our ICO registration number is ZB984262.

  1. The information we collect: We collect information you give us when you create an account or place an order, including your name, email address, billing address, delivery address, and telephone number where provided. Payment information is collected and processed directly by our payment provider; we do not store full card numbers on our systems. We collect the content you create within your project, including the answers you write or speak in response to the question framework, the photographs you upload, the cover photo and book title you confirm, and any custom questions you add. If you use the voice input tool, your spoken words are converted to text on your device and audio is not stored. We collect information about your visits to the website, including your IP address, browser type, device information, pages visited, and the time and date of your visit, through cookies and analytics. We also retain the contents of any email or contact form message you send us.
  2. How we use your information: We use your personal information to provide the service you have purchased, including creating and maintaining your account, processing your project through to a finished printed book, generating your PDF, arranging printing and delivery, and providing customer support. We use it to process payments, to fulfil and deliver your order, and to edit your answers where you have chosen the editing option, in which case your answers are processed through our editorial system, which uses a third-party AI language processing provider operating under our detailed editorial instructions; your content is not used to train any AI model. We use your information to send transactional emails about your project, including confirmations, status updates, proof approval requests, and dispatch notifications, and to send marketing emails about Biography Studio where you have explicitly opted in, from which you can unsubscribe at any time. We use aggregated and anonymised information about how the website and platform are used to improve the service. We also use your information to meet our legal obligations, including tax records, accounting, and responding to lawful requests from authorities.
  3. The legal basis for processing your information: Under UK GDPR we are required to identify a lawful basis for each use of your personal information. We rely on contract for the information needed to provide the service you have purchased. We rely on legitimate interests for transactional emails about your project, for fraud prevention, for the security of our systems, and for the analytics we use to improve the service, having considered your rights and concluded that our processing does not override them. We rely on consent for marketing emails and for non-essential cookies, and you can withdraw consent at any time. We rely on legal obligation for tax, accounting, and other statutory record-keeping.
  4. Who we share your information with: We do not sell your personal information and we do not share it with third parties for their own marketing purposes. We share information with the following categories of recipient where it is necessary to provide the service to you: our website hosting and infrastructure providers; our payment processing provider; our printing and fulfilment partner, who receives your interior PDF, cover PDF, name, and delivery address in order to print and post your book; our PDF generation provider; a third-party AI language processing provider, where you have chosen the editing option; our email marketing provider, where you have opted in to marketing; our email and communications infrastructure provider; our professional advisers, including accountants and solicitors, where necessary; and regulatory or law enforcement authorities, where we are required to disclose information by law. All of our processors are bound by data processing agreements that require them to handle your information only on our instructions and to keep it secure, and none of our processors uses your content for their own purposes, including the training of AI models. If you would like to know the specific identity of any of our processors, contact us at hello@biographystudio.com and we will tell you.
  5. International transfers: Some of our processors are based outside the United Kingdom, including in the United States and the European Union. Where personal information is transferred outside the UK, we rely on the UK’s adequacy decisions where they apply, or on Standard Contractual Clauses approved by the UK Information Commissioner’s Office.
  6. How long we keep your information: We retain your account and project content for as long as your account is active. If you close your account, we retain your project content for 12 months in case you wish to reactivate, after which it is deleted, and you can request earlier deletion at any time. We retain order and payment records for 7 years to meet HMRC requirements. We retain marketing email lists until you unsubscribe. Website analytics are aggregated and anonymised after 14 months. Customer support correspondence is retained for 3 years.
  7. Your rights: Under UK GDPR you have the right to be informed about how we use your information, the right of access to the personal information we hold about you, the right to rectification of inaccurate information, the right to erasure of your information in certain circumstances, the right to restrict processing of your information in certain circumstances, the right to data portability, the right to object to processing based on legitimate interests and to direct marketing at any time, the right to withdraw consent at any time where we are relying on consent, and the right not to be subject to automated decision-making that produces legal or similarly significant effects on you, although we do not make any such automated decisions. To exercise any of these rights, email us at hello@biographystudio.com and we will respond within one month. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office at ico.org.uk.
  8. Security: We take the security of your information seriously. Our website is served over HTTPS, passwords are stored as one-way hashes, access to customer data is restricted to authorised personnel, and our hosting, database, and processors all maintain industry-standard security practices. No system is perfectly secure, and if we ever become aware of a breach affecting your personal information we will notify you and the Information Commissioner’s Office where required by law.
  9. Cookies: We use cookies on our website. See our Cookie Policy for full details.
  10. Children: Biography Studio is not intended for use by anyone under 18 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
  11. Changes to this policy: We may update this policy from time to time. The date at the top of this page shows when it was last updated, and material changes will be notified to account holders by email.
  12. Contact: For any question about this policy or about how we handle your information, contact us at hello@biographystudio.com or at Biography Studio, Corpascus, Mabe Burnthouse, Penryn, Cornwall, TR10 9JB, United Kingdom.