Privacy policy

1. What this policy covers

This policy explains how StorySolve collects and uses personal data when you visit this website, contact us, discuss a project, receive an introduction, or work with us. StorySolve is the controller for the processing described here.

2. Personal data we collect

We may collect:

• Enquiry and contact data: your name, email address, phone number, organisation and correspondence.
• Project data: the type of work, budget range, timing, objectives, audience, creative requirements and information you choose to include.
• Relationship and transaction data: proposals, contracts, invoices, payment records, project decisions and delivery records.
• Technical and security data: IP address, browser and device information, request logs, approximate country and anti-spam or security signals.
• Information from collaborators or public business sources: professional contact details and project information needed to manage an introduction or engagement.

Please do not submit special-category data, confidential material belonging to another person, or personal data that is not reasonably needed for the enquiry.

3. Why we use personal data

The required checkbox on the contact form confirms that you have seen this privacy information. It is not consent to receive marketing.

4. Who receives personal data

We disclose personal data only where reasonably necessary. Recipients may include:

• Cloudflare, which hosts and protects the website and may provide Pages, security services and Turnstile anti-spam checks.
• Resend, which delivers contact-form enquiries by email when that service is configured.
• Google Fonts, which supplies the Poppins web font and may receive technical request data such as IP address and browser information.
• Creative or production collaborators where an introduction is relevant. We limit the information shared and will normally discuss the introduction first.
• Professional advisers, insurers, payment providers, accountants, public authorities or courts where required for business administration, legal claims or compliance.

StorySolve does not sell personal data.

5. International transfers

Some service providers may process data outside the United Kingdom. Where UK data protection law requires safeguards, we rely on an applicable adequacy regulation, approved contractual clauses or another lawful transfer mechanism made available by the provider.

6. How long we keep data

• Enquiries that do not become active work are normally kept for up to 24 months after the last meaningful contact.
• Client, contract, project and financial records are normally kept for up to six years after the relevant relationship or transaction ends, unless a longer period is required for a legal claim or obligation.
• Security and technical logs are retained for the period configured with the relevant infrastructure provider and only for as long as reasonably necessary for security and troubleshooting.
• Data may be deleted sooner where it is no longer needed and no legal or operational reason requires retention.

7. Security

We use proportionate technical and organisational measures, including encrypted transport, access controls, server-side validation, anti-spam checks and authenticated email delivery. No internet service is completely secure, so please avoid sending unnecessary sensitive information through the form.

8. Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to your personal data;
• ask us to correct inaccurate or incomplete data;
• request erasure or restriction;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent where processing relies on consent; and
• complain to a supervisory authority.

These rights are not absolute. We may need to verify your identity before acting on a request. Send a request through the contact form and identify it as a privacy request.

9. Complaints

Please contact StorySolve first so we can try to resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office. Information about making a complaint is available at ico.org.uk.

10. Cookies and browser storage

The website currently uses browser storage for theme preference and to remember that the cookie notice has been dismissed. Cloudflare security or Turnstile may also use storage strictly for security and bot prevention. We do not currently use advertising or audience-measurement cookies. Details are in the cookie policy.

11. Children and automated decisions

This business website is not directed at children, and we do not knowingly collect data from children through it. We do not use contact-form data for solely automated decisions that produce legal or similarly significant effects.

12. Changes to this policy

We will update this policy when the website, service providers or data practices change. Material changes will be brought to attention where reasonably practicable. The latest version will always show its revision date at the top of this page.