Privacy Policy

Last updated: 08 September 2024

At Stamplo, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and how we protect your personal data when you use our services.

1. Information We Collect

We collect the following types of information:

Account Information: When a parent registers, we collect basic information such as name, email address, and the child's first name.
Pen Pal Information: When children add a pen pal, we collect and store the invite code and pen pal details (e.g., name, country).
Communication Data: We store the content of letters sent between pen pals, including any media (like photos) attached to the letters.

2. How We Use Your Information

We use the information we collect for the following purposes:

To Provide Our Service: We use your information to facilitate pen pal connections and enable the exchange of letters between children.
Parent Supervision: Stamplo ensures all letters pass through both the sender's and recipient's parents for approval, ensuring safety and privacy.
Improvements: We may use aggregated data to improve our website, services, and user experience.

3. Legal Basis for Data Processing

Under GDPR, we process personal data based on the following legal grounds:

Consent: We rely on consent to collect and process data for creating accounts, sending letters, and sharing pen pal information.
Contractual Necessity: Some of the data we collect is necessary to provide our services and fulfill our contractual obligations.
Legal Obligation: We may process your data if required by law (e.g., tax regulations).

4. How We Protect Your Data

Your privacy and data security are important to us. We take the following measures to protect your information:

Encryption: We use encryption to secure all personal information during transmission.
Access Control: Only parents can manage their child's account, and both parents must approve any content exchanged between pen pals.
Data Minimization: We only collect the minimum information necessary to provide our services.

5. Sharing Your Information

We do not share, sell, or rent your personal information with third parties, except in the following cases:

Legal Requirements: We may disclose your information if required by law or in response to a legal request.
Service Providers: We may share information with trusted third-party service providers who help us operate our platform, but only to the extent necessary for them to provide their services.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy or for as long as required by applicable law.

For example:

Account data will be retained as long as the account is active or until a deletion request is made. Once the account is deleted, the associated data will be held for an additional 30 days to allow for potential recovery requests, after which it will be permanently removed from our systems.
Letters and media (e.g., photos) will be retained for up to 12 months after they are sent, after which they will be automatically deleted from our systems.

7. Your Rights Under GDPR

As a parent or data subject, you have the following rights under GDPR:

Right to Access: You can request access to the data we hold about you and your child.
Right to Rectification: You can request corrections or updates to your personal data.
Right to Erasure: You can request the deletion of your account and personal data (the "right to be forgotten").
Right to Restriction of Processing: You can request that we limit the processing of your personal data under certain circumstances.
Right to Data Portability: You can request that we provide your data in a machine-readable format.
Right to Object: You have the right to object to certain types of processing, such as direct marketing.

8. How to Exercise Your Rights

To exercise your rights as outlined above, please contact us at support@stamplo.kids. We will respond to your request within 30 days in accordance with GDPR regulations. If needed, we may request additional information to verify your identity before processing your request.

9. Parent Control and Child Safety

Parents have full control over their child’s profile and can manage pen pal connections, view, approve, or reject letters, and enable or disable the sending/receiving of photos. We do not collect any location or sensitive personal data about the children.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on Stamplo. When you visit our website, we may store or retrieve information on your browser, mostly in the form of cookies. This information may relate to your preferences, device, or usage, and is used to make the site work as you expect it to.

Types of Cookies We Use

Essential Cookies: Necessary for the functioning of the website.
Analytics Cookies: Help us understand how users interact with the site. (Planned for Google Analytics integration.)

Upon your first visit, you will be asked to accept or decline the use of cookies. You may also change your preferences at any time.

11. Data Transfers

We may transfer personal data to service providers outside the European Economic Area (EEA) for processing. We ensure that all data transfers comply with GDPR requirements and that these third parties provide adequate protection for personal data through contractual agreements.

12. Automated Decision-Making

Stamplo does not use automated decision-making or profiling that affects users in any significant way. All decisions, including account management and content approvals, involve human oversight.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on our website. Your continued use of Stamplo after any changes indicates your acceptance of the new terms.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: support@stamplo.kids