PRIVACY POLICY
Last Updated: 23 October 2025
1. INTRODUCTION
StoryQuest Ltd ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use my-storyquest.com ("the Website").
Data Controller:
- Company Name: StoryQuest Ltd
- Registered Address: StoryQuest Ltd, Empress Business Centre, 380 Chester Rd, Old Trafford, Stretford, Manchester M16 9EA
- Contact: [email protected]Â
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
When you use our Website, you may provide:
- Contact forms: Name, email address, phone number, school/company name, message content
- Newsletter sign-ups: Name, email address
- Programme bookings: School name, contact person, billing information, student numbers
- Sponsorship enquiries: Company name, contact details, sponsorship tier interest
- Payment information: Billing address, payment method (processed securely via Stripe—we do not store credit card details)
2.2 Information Collected Automatically
When you visit our Website, we automatically collect:
- Technical data: IP address, browser type, operating system, device type
- Usage data: Pages visited, time spent on pages, links clicked, referral sources
- Cookies: See Section 5 (Cookies) below
2.3 Information About Children
When schools participate in StoryQuest™ programmes:
- Student first names only (for publication purposes)
- Student stories (creative fiction written during the programme)
- Parental consent forms (obtained and stored by schools, not by us)
We do not collect:
- Full names of students
- Addresses or contact details of students
- Photographs of students (without explicit consent)
- Any sensitive personal data about students
3. HOW WE USE YOUR INFORMATION
3.1 Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Consent: When you sign up for newsletters or download resources
- Contract: When you book programmes or sponsorships
- Legitimate interests: To improve our Website, send relevant information, and promote our services
3.2 Purposes
We use your information to:
- Provide services: Deliver StoryQuest™ programmes, process bookings, manage sponsorships
- Communicate: Respond to enquiries, send confirmations, provide updates
- Marketing: Send newsletters, programme updates, and promotional content (with your consent—you can opt out anytime)
- Improve our Website: Analyze usage patterns, fix technical issues, enhance user experience
- Legal compliance: Maintain records for accounting, tax, and legal purposes
3.3 Student Stories
Student stories published on Stories Without Borders are used to:
- Showcase programme impact
- Provide reading material for families and communities
- Demonstrate educational outcomes to prospective schools and sponsors
Schools obtain parental consent before student work is published. Only first names are used.
4. HOW WE SHARE YOUR INFORMATION
4.1 We Do Not Sell Your Data
We will never sell, rent, or trade your personal information to third parties.
4.2 Service Providers
We share information with trusted third-party service providers who help us operate our Website and deliver services:
- Email marketing: ConvertKit / Mailchimp (for newsletters and email sequences)
- Payment processing: Stripe (for secure payment transactions)
- Website hosting: [Your hosting provider] (for Website infrastructure)
- Analytics: Google Analytics (for Website usage insights—anonymized data)
- Booking system: Calendly (for scheduling calls with Kate)
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
4.3 Legal Requirements
We may disclose your information if required by law, court order, or regulatory authority, or to:
- Protect our legal rights
- Prevent fraud or security threats
- Comply with legal obligations
4.4 Business Transfers
If StoryQuest Ltd is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the new owner. We will notify you of any such change.
5. COOKIES
5.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our Website. They help us improve your experience and understand how you use our site.
5.2 Types of Cookies We Use
Essential Cookies (Required)
- Enable basic Website functionality (e.g., remembering form inputs)
- Cannot be disabled
Analytics Cookies (Optional)
- Google Analytics: Track page views, user behavior, traffic sources (anonymized)
- Help us understand which content is most useful
Marketing Cookies (Optional)
- Track conversions from ads or email campaigns
- Allow us to show relevant ads on other platforms
5.3 Managing Cookies
You can control cookies through your browser settings:
- Accept all cookies (recommended for best experience)
- Reject non-essential cookies (Website will still function)
- Delete cookies (via browser settings)
For more information: All About Cookies
5.4 Cookie Consent
When you first visit our Website, a cookie banner will ask for your consent to use non-essential cookies. You can change your preferences at any time via the cookie settings link in the footer.
6. DATA RETENTION
6.1 How Long We Keep Your Data
- Contact enquiries: 2 years from last contact
- Newsletter subscribers: Until you unsubscribe
- Programme bookings: 7 years (for accounting and legal compliance)
- Sponsorship records: 7 years (for accounting and legal compliance)
- Student stories: Indefinitely (as published educational content—removal available on request)
6.2 Requesting Deletion
You can request deletion of your personal data at any time by emailing [email protected]. We will comply within 30 days unless we have a legal obligation to retain the data.
7. YOUR RIGHTS UNDER UK GDPR
You have the following rights regarding your personal data:
7.1 Right to Access
You can request a copy of the personal data we hold about you.
7.2 Right to Rectification
You can request that we correct inaccurate or incomplete data.
7.3 Right to Erasure
You can request deletion of your data (subject to legal retention requirements).
7.4 Right to Restrict Processing
You can request that we limit how we use your data.
7.5 Right to Data Portability
You can request your data in a machine-readable format.
7.6 Right to Object
You can object to processing based on legitimate interests (e.g., marketing).
7.7 Right to Withdraw Consent
You can withdraw consent for marketing emails or cookies at any time.
7.8 How to Exercise Your Rights
Email: [email protected]
Response time: Within 30 days
8. DATA SECURITY
8.1 How We Protect Your Data
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption: SSL/TLS encryption for data transmitted via the Website
- Secure servers: Hosting with reputable providers with strong security practices
- Access controls: Limited access to personal data (only authorized personnel)
- Regular backups: To prevent data loss
8.2 No Absolute Security
While we take data security seriously, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we will notify you of any data breaches as required by law.
9. INTERNATIONAL DATA TRANSFERS
9.1 Where We Store Data
Your data may be stored and processed in:
- United Kingdom (primary)
- European Economic Area (EEA)
- United States (for certain service providers, e.g., email marketing platforms)
9.2 Safeguards
When data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- Privacy Shield certification (where applicable)
- Adequacy decisions by the UK/EU
10. CHILDREN'S PRIVACY
10.1 Parental Consent
StoryQuest™ programmes involve children (ages 8-14). Schools are responsible for obtaining parental consent before students participate and before any student work is published.
10.2 Data Minimization
We collect minimal information about students:
- First names only (for publication)
- Stories (creative fiction, not personal information)
We do not collect email addresses, phone numbers, or other contact details from children.
10.3 Parents' Rights
Parents/guardians can request:
- Removal of their child's story from Stories Without Borders
- Information about how their child's data is used
- Deletion of their child's data
Contact: [email protected]
11. THIRD-PARTY WEBSITES
Our Website may contain links to external websites (e.g., social media, partner organizations). We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing personal information.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated "Last Updated" date.
Significant changes: We will notify you via email or a prominent notice on the Website.
Continued use: Using the Website after changes constitutes acceptance of the updated Privacy Policy.
13. CONTACT & COMPLAINTS
13.1 Questions or Concerns
If you have questions about this Privacy Policy or how we handle your data, contact:
Kate Markland
Email: [email protected]
Address: StoryQuest Ltd, Empress Business Centre, 380 Chester Rd, Old Trafford, Stretford, Manchester M16 9EA
13.2 Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
ICO Contact:
Website: https://ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF