GDPR

Bukuva — GDPR Compliance Statement

Last updated: August 2026

This statement explains how D&H Publishing International Ltd complies with the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 in operating Bukuva.

1. LAWFUL BASIS
We process your personal data under the following lawful bases:
- Performance of a contract: to deliver the cover generation service you requested.
- Legitimate interests: to operate, secure, and improve the service.
- Consent: where you provide optional data such as author photographs.

2. DATA SUBJECT RIGHTS
Under GDPR you have the right to:
- Be informed about how your data is used.
- Access your personal data.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
- Lodge a complaint with your supervisory authority.

3. INTERNATIONAL DATA TRANSFERS
Your uploaded content is sent to OpenAI (United States) for image generation. We rely on standard contractual clauses and the provider's GDPR commitments to ensure appropriate safeguards.

4. DATA RETENTION
We keep personal data only as long as necessary to provide the service and comply with legal obligations. You may request erasure at any time.

5. AUTOMATED DECISION-MAKING
Bukuva uses AI to generate cover images from your inputs. This does not produce legal or similarly significant effects about you.

6. DATA PROTECTION CONTACT
To exercise your rights or raise a data protection concern, contact:
D&H Publishing International Ltd, Company No: 17413553, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.