Privacy Policy

Last updated: 18 May 2026

Little Legend ("we", "us", "our") is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under the Australian Privacy Act 1988.

Who we are

Little Legend is an Australian-based business selling personalised children's posters and books. Our contact email is hello@mylittlelegend.com.au.

What data we collect

• Order data: your name, email address, delivery address, and the personalisation details you provide (your child's name and character preferences).
• Payment data: processed securely by Stripe — we never see or store your full card details.
• Usage data: standard analytics such as pages visited and time on site (via anonymised cookies).
• Email sign-ups: if you join our mailing list or request a notify-me alert.

How we use your data

• To process and fulfil your order.
• To send you an order confirmation and delivery updates.
• To respond to customer service queries.
• To send you occasional marketing emails (only if you opt in — you can unsubscribe at any time).
• To improve our website and products.

Cookies

We use essential cookies to keep the site working and optional analytics cookies to understand how visitors use our site. You can manage your cookie preferences via your browser settings at any time. We do not use cookies for cross-site advertising.

Third-party payment processing

All payments on Little Legend are handled by Stripe, a PCI-DSS Level 1 certified payment processor. When you check out, your card details are entered into Stripe's secure environment — they are never sent to or stored on our servers. Stripe's privacy policy is available at stripe.com/privacy.

Who we share data with

We share data only with trusted third parties who help us deliver our service:

• Stripe — payment processing.
• Print & fulfilment partners (e.g. Gelato, Prodigi) — your name and delivery address only.
• Email service provider — for sending order confirmations and (with consent) marketing emails.

We do not sell your personal data to any third party. Ever.

How long we keep your data

We retain order records for 7 years to comply with Australian tax law. Email marketing data is kept until you unsubscribe. You can request deletion of your personal data at any time (subject to legal retention requirements).

Children's data

Our products are purchased by parents and guardians. We collect children's first names and appearance preferences solely to personalise products. This data is used only to fulfil the order and is not shared beyond what is required for printing and delivery.

Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict how we process your data.
• Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au).

Changes to this policy

We may update this policy from time to time. Any significant changes will be communicated by email or via a notice on this website.