Privacy Policy & Data Protection Framework

1. Identification of the Data Controller

The data controller responsible for personal information collected through this website and associated consultancy services is:

Storyporchscenefd Analytics Ltd
Company Registration Number: 14983021 (Incorporated under the laws of England and Wales)
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Designated Data Protection Officer (DPO): Data Governance Unit
DPO Direct Inquiries: [email protected]

2. Scope and Categories of Data Collected

We gather personal and corporate technical metadata only to the extent necessary to deliver technical evaluations, maintain platform security, and respond to commercial queries:

• Direct Contact Data: When you complete our contact forms or send email inquiries, we collect your full name, business email address, company affiliation, telephone number, and the descriptive content of your inquiry.
• Technical Session Telemetry: When accessing our static documentation and web endpoints, our servers automatically log internet protocol (IP) addresses, browser type, operating system version, referring URL, time spent per page, and network diagnostic handshakes.
• Client Architectural Payloads (Non-Web): For clients engaging in private benchmark engagements, customer documents, sample PDFs, and multimodal assets are governed by dedicated Non-Disclosure Agreements (NDAs) and separated enterprise contracts; they are never processed through this public website.

3. Legal Bases for Processing Under GDPR & UK Data Protection Act 2018

We rely upon distinct lawful grounds set out in Article 6(1) of the UK General Data Protection Regulation (UK GDPR):

• Legitimate Interests (Art. 6(1)(f)): Processing network logs to detect denial-of-service vectors, safeguard infrastructure integrity, and optimize user experience across modern browsers.
• Contractual Pre-steps (Art. 6(1)(b)): Responding to formal technical inquiries, generating pilot architecture estimates, and coordinating sandbox access.
• Consent (Art. 6(1)(a)): Executing non-essential operational analytics cookies as configured through our on-site cookie preference interface.
• Legal Obligation (Art. 6(1)(c)): Retaining fiscal, tax, and company audit records in accordance with UK corporate statutes.

4. Third-Party Sub-Processors and Data Infrastructure

Storyporchscenefd does not sell, rent, or lease customer records to data brokers or advertising exchanges. We engage carefully vetted cloud infrastructure providers under strict Data Processing Addenda (DPAs):

• Hosting & Content Delivery: Enterprise tier content delivery networks and edge cache providers operating data centers within the UK and European Economic Area (EEA).
• DNS & Security Services: Distributed edge security networks mitigating DDoS vectors and enforcing TLS 1.3 encryption.
• Corporate Email Systems: Enterprise email routing services providing end-to-end encryption for incoming and outgoing communications.

5. Cross-Border Data Transfers

Where personal data is transferred outside the United Kingdom or the EEA, we ensure that an adequate level of protection is maintained. Transfers are executed in reliance upon UK International Data Transfer Agreements (IDTAs), European Commission Standard Contractual Clauses (SCCs), or to countries formally recognized as providing adequate data protection by the UK Secretary of State.

6. Data Retention Protocols

We adhere to strict data minimization timelines:

• Inquiry Records: Communications submitted via our contact forms are retained for twelve (12) months following the conclusion of correspondence, unless converted into active commercial client records.
• Web Access Logs: Server connection logs and IP records are overwritten or securely expunged within ninety (90) days.
• Commercial Accounting Records: Financial and transaction logs are preserved for seven (7) years in compliance with HMRC statutory obligations.

7. Your Rights Under GDPR, UK Data Protection, and CCPA

Depending on your jurisdiction of residence (including the UK, EEA, and California), you hold specific statutory entitlements regarding your personal data:

• Right of Access: Requesting confirmation of whether we hold personal data concerning you and obtaining a copy thereof.
• Right to Rectification: Requiring the correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Requesting the permanent deletion of personal information where no overriding legal obligation exists.
• Right to Restriction and Objection: Objecting to processing predicated upon legitimate interests, or demanding temporary suspension of processing.
• Right to Data Portability: Receiving structured, machine-readable copies of data supplied under consent or contract.
• California Consumer Privacy Act (CCPA/CPRA): We confirm that Storyporchscenefd does not sell personal information or share personal data for cross-context behavioral advertising. You possess the right to non-discrimination for exercising privacy rights.

To exercise any statutory privacy entitlement, submit your verified request in writing to [email protected]. We respond to all authentic requests within thirty (30) calendar days.

8. Supervisory Authority Contact

If you are situated within the United Kingdom and believe your data rights have been infringed, you retain the statutory right to lodge a formal complaint with the UK supervisory authority: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (ico.org.uk).