Privacy Policy

Last updated: March 2025

1. Who we are

SimplyStories Ltd is the data controller of your data. We are a UK-based marketing strategy and AI architecture firm.

Contact: Claire Jones, Simply Stories Ltd
Email: claire@simplystories.ai

2. What data we collect and why

When you use our StoryStarter tools, we collect:

• Your name and email address — to deliver your results and, with your consent, to send related communications
• Your company name — to personalise your assessment and report
• Your questionnaire responses — to calculate your voice resonance score and generate your summary

We collect this data on the legal basis of contract performance (to deliver the service you have requested) and, where you have given explicit consent, on the basis of consent for marketing communications.

3. Marketing communications

We will only send you marketing emails if you have explicitly checked the consent box when registering. You can withdraw consent and unsubscribe at any time by emailing claire@simplystories.ai or clicking the unsubscribe link in any email we send.

We record when consent was given and will not send marketing communications without it.

4. How we store and protect your data

Your data is stored securely in Supabase, a cloud database provider with servers based in the European Economic Area. Access is restricted to authorised personnel only, using encrypted connections and service-role authentication.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Third-party processors

We use the following third-party services to operate our diagnostic tools:

• Supabase — secure data storage
• Vercel — application hosting
• Resend — transactional email delivery
• Stripe — payment processing (paid tiers only)

Each processor operates under appropriate data processing agreements and complies with UK GDPR requirements.

6. How long we keep your data

We retain your assessment responses and contact details for up to one year from the date of your last interaction with SimplyStories. After this period, your data will be deleted or anonymised unless we are required by law to retain it longer.

7. Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your personal data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, for any processing based on consent
• Object — to processing based on legitimate interests

To exercise any of these rights, email claire@simplystories.ai. We will respond within 30 days.

8. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• ICO website: ico.org.uk
• ICO helpline: 0303 123 1113

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our services after any update constitutes acceptance of the revised policy.

Questions about this policy? Email us at claire@simplystories.ai