Privacy Notice

2. What This Notice Covers

This Privacy Notice applies only to your use of Our Site and services.

Our Site may contain links to other websites. We are not responsible for how those websites collect or use your data. We recommend reviewing their privacy policies before providing any information.

3. What Personal Data We Collect

Depending on how you use Our Site, we may collect the following:

Data you provide directly

• Name

• Email address

• Telephone number (if provided)

• Any information you include in enquiries or messages

Data collected automatically

• IP address

• Browser type and version

• Operating system

• Pages visited and navigation paths

• Referring URLs

Cookies and analytics data

• Information collected via cookies and similar technologies (see Section 12)

We do not collect or store payment card details directly. Any payments are processed securely by third-party providers.

4. How We Use Your Data (and Lawful Bases)

We only use your data where we have a lawful basis to do so:

• Responding to enquiries — Legitimate interests

• Providing services — Contract

• Sending marketing emails — Consent

• Improving website performance — Consent (via cookies)

• Website security and administration — Legitimate interests

Our legitimate interests include operating and improving our services, responding to enquiries, and maintaining website security.

5. Marketing Communications

If you choose to receive emails from us, we will only send you content you have opted into.

You can unsubscribe at any time using the link in our emails.

We do not send unsolicited marketing messages.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary:

• Enquiry data: up to 12 months after last contact

• Client data: for the duration of the contract and up to 6 years after (for legal/accounting purposes)

• Marketing data: until you unsubscribe or after 24 months of inactivity

• Analytics data: in line with cookie durations

7. How and Where Your Data Is Stored

We take appropriate security measures to protect your data.

Your data may be stored using trusted third-party services (such as website hosting, analytics and email platforms).

Some of these providers may be located outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses. You can request further details of these safeguards.

8. Sharing Your Data

We do not sell your data.

We may share your data with trusted third parties where necessary, including:

• Website hosting providers (e.g. Squarespace)

• Analytics providers (e.g. Google Analytics)

• Email marketing platforms

• Payment processors (if applicable)

All third parties are required to handle your data securely and in accordance with data protection law.

We may also share data where required by law.

9. Business Transfers

If Stories of Design is sold or restructured, personal data may be transferred as part of that process.

Any new owner will continue to use your data only in line with this Privacy Notice.

10. Your Rights

Under UK GDPR, you have the right to:

• Be informed about how your data is used

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data

• Restrict processing of your data

• Object to processing (including marketing)

• Request transfer of your data (data portability)

• Withdraw consent at any time (where applicable)

To exercise any of these rights, contact: sarah@storiesofdesign.com

You also have the right to lodge a complaint with the
Information Commissioner’s Office (ICO)
www.ico.org.uk

Where processing is based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

We do not carry out automated decision-making or profiling.

11. Providing Your Data

You are not required to provide personal data to browse Our Site.

However, if you wish to contact us or use our services, certain information (such as your name and email address) is necessary. Without it, we may not be able to respond or provide services.

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been used unlawfully.

12. Cookies and Analytics

Our Site uses cookies to improve your experience and understand how the site is used.

Types of cookies we use

Strictly necessary cookies
Required for the website to function properly.

Analytics cookies (e.g. Google Analytics, Squarespace)
Help us understand how visitors use the site so we can improve it. These cookies may collect information such as IP address and usage behaviour.

These cookies are only set with your consent via our cookie banner.

You can:

• Accept or reject non-essential cookies when you visit the site

• Change your preferences at any time via the cookie settings

You can also control cookies through your browser settings.

For more detailed information about the cookies we use, including their names and duration, please refer to our cookie banner or contact us.

13. Contacting Us

If you have any questions about this Privacy Notice or how your data is used:

📧 sarah@storiesofdesign.com

14. Changes to This Notice

We may update this Privacy Notice from time to time.

The latest version will always be available on Our Site, with the updated date shown at the top.