Privacy Policy

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access Our Service or parts of Our Service.

Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

Brand refers to One and Wonder, the personalized children's storybook brand operated from Morocco.

Child refers to the minor on whose behalf a Parent or Guardian places an order through the Service. The Child is the data subject whose name, age, gender, eye color, and photograph are collected solely to produce the personalized storybook.

Company (referred to as either "the Company," "We," "Us," or "Our" in this Agreement) refers to One and Wonder.

Cookies are small files placed on Your computer, mobile device, or any other device by a website, containing details of Your browsing history on that website among other uses.

Country refers to: Morocco.

Device means any device that can access the Service, such as a computer, cellphone, or digital tablet.

Parent or Guardian means the adult (aged 18 or over) who is the parent, legal guardian, or another consenting adult family member of the Child, and who places an order on behalf of the Child through the Service.

Personal Data is any information that relates to an identified or identifiable individual.

Service refers to the Website.

Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.

Storybook refers to the personalized hardcover children's book produced and delivered by the Company based on information provided by the Parent or Guardian.

Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.

Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Website refers to One and Wonder, accessible from https://www.oneandwonder.ma

You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Shipping address
• Account credentials (login email and encrypted password, if You create an account)
• Marketing preferences (such as opt-in status for our newsletter and WhatsApp communications)
• Transactional data, such as order numbers and purchase history
• Communications data, such as messages You send Us by email, WhatsApp, or through Our Website

Child Data

To produce a personalized Storybook, We collect the following information about the Child, provided exclusively by the Parent or Guardian:

• A clear photograph of the Child
• The Child's first name (as it will appear in the Storybook)
• The Child's age
• The Child's gender
• The Child's eye color (when not clearly visible from the photograph)

This information is treated with heightened protections and is described in detail in the section "Handling of the Child's Photograph and Data" below.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g., IP address), browser type and version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers, and other diagnostic data.

Tracking Technologies, Cookies & Analytics

We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. Tracking technologies used include:

• Google Analytics to understand how visitors use Our Website (pages visited, time spent, device type, referral source, approximate geographic location)
• Meta Pixel to measure the effectiveness of Our advertising on Facebook and Instagram
• First-party cookies to remember Your preferences and authenticate Your session

You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of Our Service.

We use both Session and Persistent Cookies for the purposes set out below:

• Necessary / Essential Cookies: These are essential to provide You with services available through the Website and to enable You to use some of its features.
• Cookies Policy / Notice Acceptance Cookies: These identify if users have accepted the use of cookies on the Website.
• Functionality Cookies: These allow Us to remember choices You make when You use the Website, such as Your login details or language preference.
• Analytics Cookies: These help Us understand how the Service is used so We can improve it.

The Brand may use Personal Data for the following purposes:

• To provide and maintain Our Service: Including monitoring the usage of Our Service, enabling security features, and processing the information necessary to design, illustrate, and produce Your personalized Storybook.
• To produce Your Storybook: The Child's photograph, name, age, gender, and eye color are used solely to design the illustrations, write the personalized narrative, and print the Storybook You ordered.
• To manage Your Account: To manage Your registration as a user of the Service.
• For the performance of a contract: To develop, comply with, and undertake the purchase contract for the Storybook You have ordered from Us.
• To process payments: Through Our payment partner Payzone.
• To deliver Your order: Through Our shipping partners.
• To contact You: By email, telephone, WhatsApp, or other equivalent forms of communication regarding updates or informative communications related to functionalities, products, or contracted services, including security updates and order updates.
• To send You marketing communications (newsletter emails and WhatsApp messages) when You have provided express consent to receive them.
• To provide You with news, special offers, and general information about goods or services similar to those You have already purchased or inquired about, unless You have opted not to receive such information.
• To manage Your requests to Us: Including customer service inquiries, complaints, and support requests.
• For Service improvement: To analyze how visitors use Our Website (in aggregate, anonymized form via Google Analytics) so We can improve the experience.
• For business transfers: Including potential mergers, acquisitions, or asset sales.
• For Compliance and Protection: To comply with applicable laws (including Moroccan Law 09-08 on the protection of personal data), lawful requests, and legal process; to protect Our, Your, or others' rights, privacy, safety, or property; to enforce the terms and conditions; and to prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity.

What We Do NOT Do With Your Data:

• We do not use the Child's photograph, name, or any Child Data to train artificial intelligence models.
• We do not sell, license, or rent Your Personal Data or the Child Data to any third party.
• We do not share the Child's photograph with any third party for any purpose other than the secure cloud storage and printing necessary to produce Your Storybook.
• We do not retain the Child's photograph beyond the period necessary to produce and deliver the Storybook (see the next section for the specific deletion timeline).

Because the Child is a minor and the photograph is the most sensitive piece of information We collect, We apply heightened protections in addition to the general practices described in this Policy:

• Encrypted upload: From the moment the Parent or Guardian uploads the Child's photograph, it is encrypted in transit using industry-standard protocols (HTTPS/TLS).
• Secure storage: Photographs are stored exclusively on encrypted Google Cloud servers, accessible only to authorized members of Our team working on the Storybook.
• Limited use: The Child's photograph is used solely to design the illustrations of the Storybook the Parent or Guardian has ordered. It is never used for any other purpose.
• Permanent deletion: Within 24 hours of the confirmed delivery of the Storybook, the Child's photograph is permanently and automatically deleted from Our systems.
• No third-party sharing: The Child's photograph is never shared, sold, licensed, or transferred to any third party — for any reason. This includes advertising, AI training, analytics, or any other use.

The Child's name, age, gender, and eye color may be retained alongside Your order history for Our records and to support potential reorders or customer service requests, in accordance with the retention periods described in "Retention of Your Personal Data" below.

We may share Your personal information in the following situations:

• With Service Providers: We share information with trusted Service Providers who help Us deliver the Service. Specifically:
  
  Payzone, Our payment partner, receives Your payment details to process Your transaction. Payzone is bound by its own strict security and privacy obligations.
  Google Cloud, Our cloud infrastructure provider, hosts Our encrypted servers where photographs and order data are securely stored during production.
  Google Analytics receives anonymized website usage data.
  Meta (Facebook/Instagram) receives data via the Meta Pixel to help Us measure the effectiveness of Our advertising.
  Shipping partners receive Your name, shipping address, and phone number to deliver Your Storybook.
  
  
• For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
• With Affiliates: We may share Your information with Our affiliates, in which case We will require those affiliates to honor this Privacy Policy.
• With Authorities and Professional Advisors: Law enforcement, government authorities, and professional advisors (e.g., lawyers, auditors) as We believe in good faith to be necessary for compliance and protection purposes.
• With Your consent: We may disclose Your personal information for any other purpose You expressly authorize.

We do not share Personal Data with third parties for their own marketing purposes.

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, including:

• The Child's photograph: Permanently deleted within 24 hours of confirmed delivery of the Storybook. No exceptions.
• The Child's name, age, gender, and eye color: Retained alongside Your order history for as long as Your account remains active or as necessary for legal, tax, and accounting obligations.
• Your account and contact information: Retained for as long as You remain a customer or are subscribed to Our marketing communications. You may request deletion at any time.
• Marketing data: Retained until You unsubscribe or request deletion.
• Transactional and accounting records: Retained for the duration required by Moroccan law (typically up to 10 years for tax and financial records).
• Usage Data: Retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer periods.

Your information, including Personal Data, is processed at the Company's operating offices in Morocco and in any other places where the parties involved in the processing are located. Some Service Providers We work with — including Google Cloud and Meta — operate servers located outside Morocco, which means certain data may be transferred internationally.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy. No transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place, including encryption and contractual safeguards to protect Your information wherever it is processed.

You have the right to delete or request that We assist in deleting the Personal Data We have collected about You.

You may update, amend, or delete Your information at any time by signing in to Your Account, if You have one, and visiting the account settings section. You may also contact Us at contact@oneandwonder.ma to request access to, correct, or delete any personal information that You have provided to Us.

Deletion Timeline:

• The Child's photograph: Always deleted within 24 hours of confirmed Storybook delivery, regardless of whether You request deletion.
• Account and order data: Upon Your request, Your account and associated personal data will be deleted within 30 days, except where We are legally required to retain certain records (e.g., tax, accounting, or legal hold obligations).

Please note that We may need to retain certain information when We have a legal obligation or lawful basis to do so.

Subject to applicable law (including Moroccan Law 09-08 and, where applicable, the EU General Data Protection Regulation), You have the following rights regarding Your Personal Data:

• Right of access: Request a copy of the Personal Data We hold about You.
• Right of rectification: Ask Us to correct inaccurate or incomplete information.
• Right of deletion: Ask Us to delete Your Personal Data, subject to legal limitations.
• Right to object: Object to certain types of processing, including marketing communications.
• Right to restrict processing: Ask Us to limit how We process Your Personal Data in certain circumstances.

To exercise any of these rights, email Us at contact@oneandwonder.ma. We will respond within a reasonable timeframe, typically within 30 days.

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

The security of Your Personal Data is important to Us. We take reasonable and appropriate measures to protect Your information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted cloud storage for sensitive files, including the Child's photograph
• Restricted internal access — only the team members who need information to perform their work can access it
• Regular reviews of Our systems and Our Service Providers' security practices

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

If You have opted in, We may send You:

• Email newsletters with new book launches, special offers, and brand updates
• WhatsApp messages about Your order, restocks, or limited-time promotions

You can unsubscribe from emails at any time by clicking the "unsubscribe" link at the bottom of any email. To stop WhatsApp messages, simply reply "STOP" to any message We send You, or email Us at contact@oneandwonder.ma.

Our Service is intended for use exclusively by adults aged 18 or over, who place orders on behalf of children. The Storybook We produce is for children, but We do not collect Personal Data directly from children.

• Children and teenagers cannot create accounts, upload photographs, or place orders through Our Service.
• All Child Data is provided by the Parent or Guardian, who confirms at the time of purchase that they are the parent, legal guardian, or another consenting adult family member acting with the parent's permission.
• Information about the Child is held to a stricter standard than other data We collect and is used only for the specific purpose of producing the Storybook.

If You believe a Child's Personal Data has been provided to Us without proper authorization, please contact Us immediately at contact@oneandwonder.ma. We will take prompt steps to remove that information from Our systems.

Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

For significant changes, We will notify You by email and/or a prominent notice on Our Service prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If You have any questions about this Privacy Policy, You can contact Us:

• By email: contact@oneandwonder.ma
• Hours: Monday to Friday, 8 AM to 6 PM (Morocco time)