1. Who is responsible for your data
The controller of your personal data is the selling company for your market: TMS BRAND COMPANY INC. for markets where the seller is the US company (United States, Puerto Rico, Bolivia, Costa Rica, Dominican Republic, Ecuador, Guatemala, Nicaragua, Panama, Paraguay, El Salvador, Pakistan, Indonesia, Philippines, Vietnam, Thailand, Malaysia, Türkiye, Bahrain, Egypt, Morocco, Nigeria, Kenya, South Africa, Tanzania, Uganda, Rwanda, Côte d’Ivoire, Cameroon), and TMS BRAND COMPANY LTD for all others (Company No. 16958162, The Business Resource Network, 53 Whateley's Drive, Kenilworth, Warwickshire, CV8 2GY, England). Both companies act as joint controllers in respect of data obtained through the website sonadoraproduction.com. For any data-related questions, please write to privacy@sonadoraproduction.com.
2. What data we collect
| Category | Examples | Source |
|---|---|---|
| Contact details | Name, email, phone number or messenger username, country | You, in your order request or chat |
| Order request content | Name of the gift recipient, occasion, stories, style preferences, photos (optional) | You |
| Order data | Order number, product, price, status, time of delivery and file download | Our systems |
| Payment data | Amount, currency, payment method, last 4 digits of the card, payment status | The payment provider. We do not receive full card details |
| Technical data | IP address, browser type, market, language and theme settings, advertising campaign tags (UTM) | Your browser |
| Correspondence | Messages to support, emails, chats | You |
Please do not send us medical, financial or other sensitive data. If such data appears in an order request, we will use it only for the order and delete it together with the rest of the brief.
3. Purposes and legal bases
- Fulfilling your order — creating the preview and the product, payment, delivery, revisions and support (performance of a contract, or steps taken at your request before entering into it).
- Accounting and tax — keeping payment and accounting records (legal obligation).
- Preventing fraud and disputes — keeping order and delivery logs, reviewing unusual transactions (legitimate interests).
- News and offers — only if you tick a separate box; you can unsubscribe in any email (consent).
- Publishing examples — only with your separate written consent (consent).
We do not use your stories or photos to train AI models, and we prohibit our suppliers from doing so where they offer that option.
4. Who we share data with
Only with suppliers who help us fulfil your order, and only to the extent necessary:
- payment providers — Stripe (including PayPal payments made through Stripe), EBANX, Cashfree Payments and dLocal, depending on your market and payment method — as independent controllers of payment data;
- AI services for creating music, voice, images and animation — only the text brief and, where needed, photos;
- hosting, email, CRM and messaging services used to communicate with you;
- the affiliated Sonadora company in another jurisdiction, to fulfil and support orders;
- public authorities, only where required by law.
We do not sell personal data or share it for third-party behavioural advertising.
5. International transfers
Our companies and suppliers are located in the United Kingdom, the EU, the United States and other countries. When transferring data from the EEA or the United Kingdom, we rely on adequacy decisions, the EU Standard Contractual Clauses or the UK International Data Transfer Agreement (IDTA).
6. Retention periods
| Data | Period |
|---|---|
| Photos sent for an order | 30 days after delivery |
| Brief and finished file | 12 months after delivery, for re-delivery and revisions |
| Unpaid order requests | 6 months |
| Payment and accounting records | 6 years (required by tax law) |
| Correspondence with support | 24 months |
You can ask us to delete your brief, photos and file sooner by writing to privacy@sonadoraproduction.com.
7. Your rights
You have the right to obtain a copy of your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. Please send requests to privacy@sonadoraproduction.com — we will respond within 30 days. You may also lodge a complaint with a supervisory authority: in the United Kingdom, the ICO (ico.org.uk); in the EU, the authority of your country of residence.
8. Regional provisions
We do not sell or “share” personal information for cross-context behavioural advertising. You have the right to know what data we collect, to request its deletion or correction, and not to be discriminated against for exercising these rights.
You have all the rights of a data subject under Law No. 13,709/2018. Please send requests to privacy@sonadoraproduction.com.
You may send data-related requests and complaints to privacy@sonadoraproduction.com.
We process data in accordance with the Act on the Protection of Personal Information and provide notice of cross-border data transfers.
If the law of your country grants you additional rights, we will respect them. Please write to privacy@sonadoraproduction.com.
9. Children
The website is intended for adults. We do not collect data directly from children. Information about a child (name, age, photos) for an animated film or song may be provided only by a parent or guardian, and we use it solely for the order.
10. Security
Access to data is limited to team members who need it for their work. We use encrypted connections (HTTPS) and two-factor authentication on our work services, and we do not store card details. In the event of an incident affecting your data, we will notify you and the supervisory authority within the time limits set by law.
11. Changes and contact
We update this policy when our services or the law change, and publish the new version on this page. We notify you of material changes by email. Contact for data matters: privacy@sonadoraproduction.com. For information about cookies, see our Cookie policy.