PRIVACY POLICY

Last updated: 1 June 2026

This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the website kidspace.ai (the "Website") and our online store. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and applicable Romanian law.

1. WHO WE ARE (DATA CONTROLLER)
KidSpace is a brand operated by:
SC TEMATIC PHOTOGRAPHY SRL
Registered office: Str. Vasile Alecsandri nr. 76, Alba Iulia, Alba County, 510201, Romania
Sole Registration Code (CUI): 45971224
Trade Register No.: J01/457/2022
Email: hello@kidspace.ai
("we", "us", "our")

2. INFORMATION WE COLLECT
- Information you provide: your name and email address (when you subscribe, create an account, or place an order), and billing details you enter at checkout.
- Order and payment data: the products you purchase, order amount, and payment metadata processed via Stripe. We do not store your card numbers.
- Account data: login details and order history if you create an account.
- Technical data: IP address, browser type, device, and operating system.
- Cookies and similar technologies (see Section 6).

3. HOW WE USE YOUR INFORMATION AND LEGAL BASES
- To provide and deliver the digital products you purchase and to give you access to your downloads (performance of a contract).
- To process payments (performance of a contract).
- To issue fiscal invoices and meet our accounting and tax obligations (legal obligation).
- To create and manage your account (performance of a contract).
- To send you service messages and, where you have subscribed, our newsletter (consent or legitimate interest; you can unsubscribe at any time).
- To operate, secure, improve, and analyse the Website (legitimate interest, or consent where required for cookies).
- To prevent fraud and ensure the security of our services (legitimate interest and legal obligation).

4. PAYMENTS
Payments are processed securely by Stripe, which acts as an independent payment processor. Stripe handles your card data under its own privacy terms and PCI-DSS standards. We receive only payment confirmation and limited billing metadata; we never see or store full card numbers.

5. INVOICING
For each purchase, a fiscal invoice is generated through our invoicing provider (Oblio) and, where required by Romanian law, reported to the National Tax Authority (ANAF), including via the electronic invoicing system. For this purpose we process the billing details necessary to issue a valid invoice. This is a legal obligation.

6. COOKIES AND ANALYTICS
We use cookies and similar technologies to make the Website work, remember your preferences, analyse usage, and improve your experience. You can manage cookies through your browser settings and any cookie banner provided on the Website. We do not serve personalised ads.

7. HOW WE SHARE YOUR DATA
We share data only as needed with trusted service providers who help us operate, including: website hosting providers, Stripe (payments), and Oblio (invoicing). These providers are contractually bound to protect your data and use it only to provide their services to us. We may also disclose data to public authorities (such as ANAF) where required by law, and to enforce our terms or protect our rights. We do not sell your personal data.

8. CHILDREN
KidSpace is a family brand. Purchases must be made by adults. We do not knowingly collect personal data from children under 13 without verified parental consent, and we do not serve personalised advertising to children.

9. INTERNATIONAL DATA TRANSFERS
Some of our providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect your data.

10. DATA RETENTION
We keep your personal data only for as long as necessary for the purposes described above. Order and invoice records are retained for the period required by applicable accounting and tax law (generally up to 10 years). Account and marketing data are kept until you close your account or withdraw your consent.

11. YOUR RIGHTS
Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, contact us at hello@kidspace.ai. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, dataprotection.ro) or your local supervisory authority.

12. SECURITY
We use reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Changes are effective when posted, with the "Last updated" date revised accordingly.

14. CONTACT
SC TEMATIC PHOTOGRAPHY SRL - KidSpace
Email: hello@kidspace.ai
Str. Vasile Alecsandri nr. 76, Alba Iulia, Alba County, 510201, Romania