Privacy policy
Last updated: 9 October 2026
Who is responsible and how to contact us
Ekinadose Ewean Gabriel, trading as Zedo World in England, United Kingdom, operates zedoworld.com and is responsible for the personal information described here. For privacy questions, access or deletion requests, or to withdraw a notification signup, email hellozedo@gmail.com. Please do not send passwords, payment-card details or identity documents in your first message.
What we collect and why
- Accounts and learning: email address, username, a securely hashed password, and account settings. When learning features are available, parent-managed child profiles may include a name, age, avatar, progress, quiz results and achievements.
- Orders: contact details, selected products, names and pronunciation guidance, occasion, instructions, permissions, order status and payment references. Photo/video packages also collect the files you choose to upload and, for AI likeness packages, your permission confirmation.
- Payments: Stripe handles payment information in its checkout. Zedo stores payment references and status; it does not store full card numbers or card security codes. Stripe may collect billing or delivery information needed for the transaction.
- Notifications: your email address and signup/delivery dates when you ask to hear about the Learning Hub reopening.
- Community and support: messages or posts you submit. Forum threads, comments, replies and attached images are publicly visible, including to people without accounts. Account posts display your username; guest comments are labelled Guest. We use a browser session identifier to manage guest comments and likes. Guest editing/deletion depends on retaining that browser session. Avoid posting sensitive information.
- Technical information: session identifiers and security/request information, including IP addresses processed by our hosting and authentication systems, to operate the site, prevent abuse and investigate faults.
We use information needed to fulfil orders and manage accounts to provide the service you request. Requested reopening emails rely on your consent. Site security and abuse prevention serve our legitimate interests in protecting customers and the service. Some transaction records may need to be retained to meet applicable legal obligations. Permissions for another person’s image or a child’s information must be obtained before submitting it.
Names, photos, videos and AI packages
Only upload material you are authorised to share. A parent or guardian should manage orders involving children. Use only the names and media necessary for the requested creation; avoid identity documents, home addresses in photos, medical details or other unnecessary sensitive content.
Uploaded order media is stored with authenticated access in Cloudinary. The submitting account or browser session and authorised staff can request temporary download links. Staff may need to download media to produce your order. Those copies must also be handled securely.
Personalised audio/video production may involve creative-service providers. Before a new external production provider receives identifiable customer media, Zedo must explain the intended use and applicable provider arrangements. Choosing an AI package is not permission to use your media for unrelated advertising or public AI-model training. Contact us before ordering if you need details of the production tools or have restrictions on their use.
If you choose free name inclusion with other names, the submitted name is intended to be included in a shared Zedo creation. Ask us about the planned publication before submitting if you do not want a name made public. Private paid-order media is not automatically published on the website.
Who receives information
Our service providers include Heroku for website hosting, Neon for database hosting, Cloudinary for media storage, Stripe for checkout and billing, and Google/Gmail for email when configured. Authorised staff and production providers receive only information needed for their tasks. Delivery providers may receive the details needed to deliver physical goods. Provider services can process information in countries outside your own.
For transfers subject to UK data-protection rules, the responsible operator must assess the destination and use an applicable lawful transfer arrangement, such as adequacy or approved contractual safeguards. You can request details of the providers and safeguards relevant to your information by emailing us. We do not sell personal information.
Cookies and external resources
The site uses essential cookies for login sessions, baskets and protection against forged requests. Blocking these can stop those functions working. Stripe uses its own checkout technologies. Some pages load Google Fonts, so your browser contacts Google and sends normal connection information. We do not configure our own advertising pixels or analytics service. Learning videos, when available, use YouTube; loading them sends information to YouTube under its privacy terms. Any future non-essential tracking will require an updated notice and any required consent.
How long information is kept
Retention depends on the purpose: account and learning information is kept while needed to maintain the account; order information while needed for fulfilment, support, disputes and applicable record-keeping duties; and uploaded media while needed to create the order and handle agreed revisions or issues. Reopening-list information is needed until the requested notice is sent or consent is withdrawn, with limited delivery records retained for handling problems. We must review retained information and remove or anonymise it when its purpose ends. Security logs and provider backups follow their operational retention arrangements.
You can request deletion sooner. We will explain any information that must be retained, why, and any limits affecting provider backups or legal records.
Your choices and rights
Where applicable, you may request access, correction, erasure, restriction or a portable copy of your information. You may object to processing based on legitimate interests. You can withdraw consent to reopening emails at any time by contacting us; withdrawal does not invalidate earlier lawful processing. We may need proportionate proof that a request concerns your account or a child you are authorised to represent.
We aim to handle requests within the applicable legal timeframe. If UK data-protection law applies, you can complain to the Information Commissioner’s Office. You may also contact the relevant regulator where you live.
Security and updates
We use access controls, encrypted connections and other safeguards, but no online service can promise absolute security. Our data protection policy explains the handling rules. We will update this notice when the service or its data use changes.