Privacy, with care.

Designed for adults

Parents, guardians, and authorized adults provide the details used to create a message. We do not offer child accounts or ask for child photographs, voice recordings, full names, schools, home addresses, or exact birth dates. Please do not enter those details in free text.

What the workshop uses

We use an adult email address, a child’s first name or nickname, a broad age range, interests, optional achievements or wishes, and the selected tone to fulfill the order. We also keep order status, payment references, support correspondence, and limited technical information needed to secure and operate the service. Card details are handled by Shopify and its payment providers; the workshop does not store card numbers or CVCs.

Service providers

Shopify handles checkout and payment processing. OpenAI receives the selected personalization details to prepare the script; the adult email is not included in that script request. HeyGen receives the script to prepare the video. Resend receives the adult email and message needed to send order updates and the private delivery link. Cloudflare hosts the workshop, order database, and private video storage.

These providers may process information outside Cyprus, including in the United States. Their privacy terms and retention practices also apply to information they receive. We use these services to fulfill and operate orders; we do not include advertising trackers on the workshop website.

Retention and deletion

Hosted video access expires 30 days after delivery. Our cleanup process removes the hosted video and personalization after expiry; storage lifecycle cleanup is an additional backstop. Payment and financial records may need to be retained separately. This hosted-link period does not promise that every service provider deletes its own copies at the same time; provider retention and deletion procedures can differ.

Your choices and requests

You can stop before checkout. Keep your private order and delivery links confidential. The purchasing adult can contact us to request access, correction, or earlier deletion. We may need to verify the request and retain records required for payment, disputes, or legal obligations. Where a request concerns provider-held information, we will explain the available next steps.

Contact

Santa’s Secret Workshop operates from Cyprus. Send privacy requests through our contact page, using your order reference and leaving out unnecessary child details.

Questions? Visit our contact page.