Storyshelveswinksy Workspace Media Ltd ("Storyshelveswinksy", "we", "our", or "us") is dedicated to upholding transparent data handling standards in accordance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU GDPR (Regulation 2016/679), and the California Consumer Privacy Act (CCPA/CPRA). This Privacy Policy explains our practices regarding the collection, storage, transfer, and processing of personal information when you access our website at storyshelveswinksy.cfd.

1. Data Controller Information

The legal data controller responsible for personal information processed through this website is:

Storyshelveswinksy Workspace Media Ltd
Company Registration Number: 14892015
Registered Office: 74 Great Hampton Street, Jewellery Quarter, Birmingham, B18 6EW, United Kingdom
Designated Data Protection Contact: [email protected]

2. Information We Collect

We strictly adhere to data minimization principles. Depending on your interactions with our platform, we may process:

  • Directly Provided Information: When communicating via our contact portal or email, we collect your name, email address, corporate affiliation, and the contents of your message.
  • Technical and Device Telemetry: Log files automatically recorded by web servers, including your Internet Protocol (IP) address (anonymized prior to persistent analytical storage), user-agent string, browser version, operating system, referencing URL, and timestamp headers.
  • Cookie Data: Text markers stored locally on your device to retain interface preferences and measure visitor interaction volume, as detailed in our Cookie Policy.

3. Legal Grounds for Processing (GDPR Article 6)

We only process your personal data where lawful grounds exist:

  • Consent (Art. 6(1)(a)): Where you explicitly approve analytics tracking via our cookie management interface.
  • Contractual / Pre-Contractual Measures (Art. 6(1)(b)): To review, process, and address editorial proposals, partnership inquiries, or commercial queries sent to our desk.
  • Legitimate Interests (Art. 6(1)(f)): To maintain web infrastructure security, prevent automated denial-of-service attempts, diagnose server faults, and preserve architectural integrity across devices.
  • Legal Obligation (Art. 6(1)(c)): Where statutory financial or regulatory compliance demands record retention under English company law.

4. Third-Party Processors and International Transfers

We do not sell, rent, or trade your personal information. Data may be shared with trusted technical sub-processors under strict Data Processing Agreements (DPAs) with Standard Contractual Clauses (SCCs):

  • Cloud Infrastructure Providers: ISO/IEC 27001 certified edge networks and data center hosts responsible for content distribution and server hosting.
  • Email Routing Services: Encrypted mail relay infrastructure handling correspondence directed to [email protected].

5. Data Retention Periods

Personal information is retained only as long as necessary to fulfill the operational purpose for which it was gathered. General inquiry correspondence is retained for 24 months before routine deletion. Server access logs are maintained in rolling rotating buffers for a maximum period of 90 days for network diagnostic and cybersecurity analysis, after which they are expunged.

6. Your Statutory Rights (GDPR & CCPA)

Under relevant data protection jurisdictions, you possess enforceable rights concerning your personal information:

  • Right of Access (Art. 15): Request a copy of personal information we maintain regarding your identity.
  • Right to Rectification (Art. 16): Demand correction of incomplete or erroneous records.
  • Right to Erasure / Right to be Forgotten (Art. 17): Request deletion of your data where no overriding legal basis for retention persists.
  • Right to Restriction (Art. 18) and Portability (Art. 20): Restrict ongoing processing or request transfer of records in a structured, machine-readable format.
  • Right to Object (Art. 21): Challenge processing grounded in legitimate interests.
  • California Consumer Rights: CCPA consumers have the right to know what personal categories are collected, request deletion, and remain free from discrimination for exercising statutory privacy options.

To exercise any of these entitlements, please contact our Data Protection Officer at [email protected]. We respond to verified requests within thirty (30) calendar days without fee. You also have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Security Safeguards

We employ robust administrative, operational, and technological safeguards, including Transport Layer Security (TLS 1.3 encryption), strictly segmented server firewall barriers, and principle-of-least-privilege access keys, to protect personal data against unauthorized disclosure, alteration, or unlawful destruction.