Privacy Policy

Draft for legal review. This policy is written to align with the Australian Privacy Act 1988 (including the Australian Privacy Principles) and the New Zealand Privacy Act 2020. Have it reviewed by a qualified adviser before launch.

Who we are

Letter From Santa is operated by [legal entity name, ABN/NZBN and address]. Contact our privacy officer at support@getleletterfromsanta.com.

What we collect

• About your child(ren): first name, age, an optional pronunciation guide, and the message you write.
• About you: your email address (collected by Stripe at checkout) so we can deliver the video and help with your order.
• Payment: processed by Stripe. We never see or store your full card details.
• Technical: an anonymous session identifier, your selected country, and — only if you accept analytics cookies — Meta Pixel and Google Analytics data.

We don't ask for surnames, photos, addresses, schools or other details about your child, and we ask you not to include sensitive information in your message.

Parental consent

Orders must be placed by a parent or legal guardian, who confirms they consent to their child's first name, age and the message being used to make the video. We do not knowingly collect information directly from children.

How we use it

• To turn your message into narration and a personalised video, and to deliver it to you.
• To process payment, prevent fraud, and provide support and refunds.
• To measure, in aggregate, how well our website works (e.g. how many visitors complete an order).

We never use your child's details for advertising, never send them to analytics or advertising platforms, and never use your message to train AI models.

How the video is made (third-party processing)

Santa is portrayed by a professional performer. To produce your video automatically we use licensed voice and video technology from service providers who process your message on our behalf:

• Voice generation — [voice provider, e.g. ElevenLabs (USA)]: receives the narration text.
• Video generation and lip-sync — [video provider, e.g. HeyGen (USA)]: receives the narration audio.
• Payments — Stripe.
• Hosting, database and secure file storage — [e.g. Vercel, Supabase (region)].
• Email delivery — [e.g. Resend]: receives your email address and the private link.

Some providers store or process data outside Australia and New Zealand (for example in the United States). We choose providers with appropriate security and contractual protections and only share what each needs to do its job.

Security

Videos are stored privately and can only be opened through a long, random link sent to you. We store only a scrambled (hashed) version of that link. Access to our systems is restricted to authorised staff, and all data is encrypted in transit.

How long we keep it

We keep your child's details, message and video for 90 days after delivery so you can download it and so we can help if something goes wrong, then delete them automatically. Unpaid draft orders are deleted after 14 days. We keep anonymised payment records (amount, date, order number) as required for tax and accounting. Please download your video to keep it.

Your rights

You can ask to access or correct your information, or ask us to delete your child's details and video at any time, by emailing support@getleletterfromsanta.com with your order number. If you're not happy with how we handled your request you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or the New Zealand Office of the Privacy Commissioner (privacy.org.nz).

Cookies

We use essential cookies to keep your order and country selection while you browse. Analytics and advertising cookies (Meta Pixel, Google Analytics) load only if you accept them in the cookie banner.