Privacy Policy
Last updated 29 October 2026
1 : Who we are
Protector of the Light is operated by Qiyam Alhuda Association (جمعية قيم الهدى), registration number 889. The association is the controller responsible for how personal data is used in this service. Our address is Office 205, Al Aqsa Business Centre, Al Rehab District, Jeddah, Saudi Arabia. For privacy questions or requests, contact info@qyamalhuda.com.sa.
The website is intended to be managed by adults. A parent or legal guardian makes personalisation choices and exercises the child’s privacy rights on their behalf, subject to applicable law.
2 : What information we collect
- Adult contact and order information, including your name, email address, telephone number, delivery address, purchases and support messages.
- The name entered for the child’s story and the selected character features. A child’s photo is collected only if you choose photo personalisation. We also process the illustrated character, preview and personalised book files created for your order.
- Payment confirmation and transaction references needed to manage orders and refunds. Checkout payment providers process the payment information needed for the transaction.
- Technical information needed to run and protect the website, such as IP address, browser details, necessary cookies, error logs and records of consent.
Please use a first name or nickname where possible. Do not upload identity documents or include unnecessary details about a child’s school, health, address, family circumstances or other people. A standard order does not require information about orphan status or religious identity.
3 : How and why we use information
We use order and adult contact information to process purchases, prepare and deliver the printed and digital books, communicate about the order, and provide support. Where applicable, this processing is necessary to perform the purchase contract. We retain records required by law on the basis of our legal obligations.
We rely on the parent’s or legal guardian’s consent to use the child’s personalisation information, including any uploaded photo and AI-assisted character generation. A photo is optional: you can choose an avatar instead. Without the information needed for your chosen method, we cannot create that version of the character.
We also use necessary technical information to operate and secure the service. Where a lawful interest is the applicable basis, we assess its necessity and effect on individual rights. This does not replace required consent for sensitive data. Optional analytics or adult promotional messages require the relevant separate choice.
4 : How we use the child’s picture
After guardian confirmation and consent, we use the uploaded photo as a visual reference for an illustrated character in the style of the books. A designer reviews the photo and generated character for quality and necessary adjustments. You can review the available preview before proceeding with the selected books.
The image may be processed by authorised AI image-generation and hosting providers. The personalised production file is shared with the people and providers who need it for design, printing or digital delivery. Access must be limited to the information needed for that role.
The permission you give covers the selected personalised books and necessary support. It does not grant unrestricted rights over the child’s image or authorise advertising, public galleries, selling the child’s information, facial identification, or AI model training. We do not use the child’s images to train our own AI models, and require providers acting for us to restrict use to the agreed service purposes.
5 : Sharing and international processing
We share necessary information with authorised designers and service providers for image generation, hosting, payments, printing, delivery and support. Providers acting on our behalf must follow our instructions and applicable confidentiality and data-protection requirements. We may also disclose the minimum necessary information where law or a valid authority request requires it, or to respond lawfully to a safeguarding or security concern.
Designers or technology providers may process data outside Saudi Arabia. Before an overseas transfer, we must meet the applicable Saudi requirements and use appropriate safeguards. Photo consent does not, by itself, replace these requirements. Information about the AI provider and relevant processing locations is made available before photo processing; you may also request details at info@qyamalhuda.com.sa.
6 : Retention and deletion
We keep original photos and generated working files only while needed to create, review and deliver the selected books, complete necessary corrections, or resolve an open service issue. When those purposes end, the working files are deleted without unnecessary delay, unless a specific legal obligation requires limited further retention. We do not retain a child’s original photo indefinitely simply because a book was purchased.
Unfinished or abandoned personalisation data is kept only while needed for an active request or a genuine service or security issue, then deleted. Necessary temporary copies, restricted backups and provider operational records are retained only for their recovery, security or other lawful purpose and removed through the applicable deletion or expiry process.
Financial, consent and dispute records may be kept for the applicable legal or evidential period. These requirements do not automatically justify retaining the original photo. We require relevant processors to follow the applicable retention and deletion instructions.
You receive your own digital copy of the book. Please save it securely. Delivery of a digital copy does not mean that we maintain a permanent archive or guarantee that a later reorder will be available.
7 : Your rights and choices
Under the Saudi Personal Data Protection Law, and subject to its conditions, you may ask to be informed about processing, access or obtain a readable copy of relevant data, correct or complete it, and request destruction when it is no longer needed. You may withdraw consent at any time. A legal guardian can make a request for the child.
Email info@qyamalhuda.com.sa with your request and an order reference if available. Please do not resend the child’s photo unless it is necessary and we request it securely. We may verify identity and guardianship proportionately before acting.
We respond without undue delay and normally within 30 days. If a lawful extension is necessary, we will explain the reason and notify you before extending for up to a further 30 days. Where a request cannot be fulfilled, we explain the applicable reason.
Withdrawal stops future consent-based processing without undue delay. It does not invalidate earlier lawful processing, remove limited legal recordkeeping duties, or retrieve books or files already delivered. It may prevent us from completing photo personalisation; we will explain any available avatar alternative or applicable order remedy. We also notify relevant processors and request deletion where required.
You can raise a concern with us at info@qyamalhuda.com.sa or submit a personal-data complaint to the Saudi Data and Artificial Intelligence Authority through https://dgp.sdaia.gov.sa/. Any additional mandatory rights that apply to you remain unaffected.
8 : Cookies security and changes
Necessary cookies support functions such as keeping your selections and operating checkout. If optional analytics or advertising technologies are used, we provide the appropriate information and choice before using them where required. Optional marketing permission is separate from personalisation and can be withdrawn.
We take proportionate organisational and technical steps to protect personal data and limit access. No online service can guarantee absolute security. We investigate incidents and notify the competent authority and affected people where required by law.
We update this policy when the service or its processing changes and show the date above. We obtain fresh consent before a new use that requires it; continued browsing is not consent to a new purpose for a child’s image.