Privacy Policy
Last updated: 30 September 2026
Identity and Role of the Data Controller
storyvaultza acts as the data controller for the purposes of the UK GDPR and the Data Protection Act 2018. We are responsible for determining the purposes and means of processing personal data collected through our storytelling archive and production resource website. Our registered address is 12 King Street, Leeds LS1 2HL, UK and we can be contacted at [email protected].
Scope of This Notice
This privacy policy applies to all visitors and users of the storyvaultza website who access our narrative planning tools, script structure resources, studio segments and organised workflows for media content. It covers data collected from individuals in the United Kingdom and explains how we handle information when you browse, register or interact with our commercial services.
Categories of Personal Data and Sources
We collect personal data directly from you when you submit forms or use our platform. This includes contact details, account registration information, usage data from workflow tools and any content you upload related to storytelling projects. We also receive technical data such as IP addresses and browser information from your device interactions. No data is obtained from third-party sources without your knowledge.
Purpose-by-Purpose Explanation of Processing
We process personal data to provide access to our archive and production resources under the legal basis of contract performance. Analytics data is processed under legitimate interests to improve site functionality. Marketing communications rely on consent where applicable. Each purpose is explained in detail within our service documentation to ensure transparency.
Whether Providing Data Is Required
Providing certain personal data is necessary to create an account and access paid features of the storytelling archive. If you choose not to supply required information such as an email address for registration, you will be unable to use the full range of narrative planning and workflow tools. Optional data fields can be left blank without affecting core access.
Cookies and Similar Technologies
Our website uses cookies and similar tracking technologies to maintain session information and analyse usage patterns. A separate cookie policy is available via the site-wide cookie banner. You can manage preferences through your browser settings or the consent tool provided on first visit.
Processors, Recipients and Disclosures
We engage service providers such as hosting companies, analytics platforms and payment processors who act as data processors under contract. Personal data may be disclosed when required by law or to protect our legal rights. Categories of recipients include IT support firms and professional advisers bound by confidentiality obligations.
International Transfers and Safeguards
Some processors may be located outside the United Kingdom. In such cases we rely on UK adequacy regulations or standard contractual clauses approved by the Information Commissioner’s Office to ensure appropriate safeguards are in place for any transferred data.
Retention Periods and Criteria
Account data is retained for the duration of your active subscription plus an additional six years to meet legal obligations. Usage logs are kept for twelve months. Content you upload is stored until you delete it or close your account. These periods are reviewed regularly against business and regulatory needs.
Security and Data Minimisation
We implement technical and organisational measures including encryption and access controls to protect personal data. Data collection is limited to what is necessary for the stated purposes. While we strive to maintain high standards we cannot guarantee absolute security against all threats.
Data Subject Rights
Under UK GDPR you have the right to access, rectify, erase, restrict processing, port data and object to processing. To exercise these rights please contact us at [email protected] or 12 King Street, Leeds LS1 2HL, UK. We will respond within one month of receiving a verifiable request.
Right to Withdraw Consent and Object to Marketing
Where processing is based on consent you may withdraw it at any time by updating your account preferences or emailing [email protected]. You can also object to direct marketing and profiling activities through the same channels without affecting other services.
Right to Complain to the Supervisory Authority
If you are dissatisfied with our response you may lodge a complaint with the Information Commissioner’s Office at ico.org.uk. We encourage you to contact us first so we can attempt to resolve any concerns directly.
Children and Age Restrictions
Our services are intended for users aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted we will delete it promptly.
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any recommendations within the workflow tools are based on user-selected parameters and remain under your control.
Policy Changes
We may update this privacy policy to reflect changes in law or practice. The effective date will be displayed at the top of the page. Continued use of the site after updates constitutes acceptance of the revised terms.