Legal
Privacy policy
Last updated 7 August 2026
Story Arc Media keeps this simple. We collect the details you send us so we can reply and do the work, we store them carefully, and we never sell them. Below is exactly what that means in practice.
Who we are
STORY ARC MEDIA LIMITED (trading as Story Arc Media) is the data controller for personal data collected through this website. Company number 10118419, registered in england and wales. Registered office: 19/21 Hatchett Street, Birmingham, United Kingdom, B19 3NX. For any privacy question, email sab@storyarcmedia.co.uk.
What this policy covers
This policy covers personal data we collect through storyarcmedia.co.uk, including enquiries sent through our contact form and any interactive features on the site. It does not cover third party websites we link to, such as Instagram or YouTube, which have their own policies.
What we collect
When you submit the contact form we collect the details you provide: your name, email address, company, the service you need, budget range, project timeline, project details and any discount code you enter. We also record which page the enquiry came from and the date and time it was received. Interactive features on the site, such as photo voting, store an anonymous key on your device so a vote is only counted once; that key is not linked to your identity. We do not ask for special category data, so please do not include any in your message.
Why we collect it, and our lawful basis
We use enquiry data to reply to you, to scope and quote work, and to keep ordinary business records. Our lawful basis is legitimate interests (responding to a business enquiry you have chosen to send us) and, where a project proceeds, performance of a contract. Where we are required to keep records for tax or accounting purposes, our basis is legal obligation. Anonymous interaction data is processed on the basis of legitimate interests in understanding which work resonates.
Where your data is stored
Contact form submissions are stored in a managed PostgreSQL database hosted by our backend provider on our behalf, protected by access rules that allow submissions to be created from this website but read only by us. Enquiries are also sent to our business email inbox so we can reply. Our hosting, database and email providers may process data on servers inside and outside the UK; where data leaves the UK it is protected by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
How we keep it secure
The site is served over HTTPS. Access to the database and inbox is restricted to Sab and protected by strong authentication, and database access rules prevent enquiries from being read by anyone else. No system is perfectly secure, but if a breach ever affected your rights we would notify you and the Information Commissioner's Office as required.
How long we keep it
Enquiries that do not become projects are kept for up to 24 months, then deleted. Where a project goes ahead, records are kept for the length of the engagement plus the period required for tax and accounting purposes, currently six years. You can ask us to delete your enquiry sooner.
Sharing your data
We do not sell your data, share it with data brokers, or use it for advertising or automated decision making. We share it only with the service providers who help us run the business, currently website and database hosting, email delivery, and our accountant, each acting under our instructions and appropriate agreements. We may also disclose data where the law requires it.
Cookies and analytics
This website does not set advertising or tracking cookies. We use a small amount of local storage on your device to remember interface preferences and to stop repeat votes on interactive features. Embedded video from third party platforms may set their own cookies when you press play. If analytics or marketing tools are added in future, this section will be updated and a cookie notice provided before they are used.
Marketing
We only email you about the enquiry you sent, or about a project we are working on together. We do not add enquirers to a mailing list. If we ever start one, it will be opt in and every message will carry a one click unsubscribe.
Children
This website and our services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us data, email us and we will delete it.
Your rights
Under UK GDPR you can request access to your personal data, ask us to correct or delete it, object to or restrict processing, withdraw consent where we rely on it, and request portability. Email sab@storyarcmedia.co.uk and we will respond within one month. Exercising your rights is free.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk.
Changes to this policy
We may update this policy from time to time. Any change takes effect when it is published on this page, and the date at the top of the policy will be updated.
Questions about your data? sab@storyarcmedia.co.uk or get in touch.