Operated by Amy Elizabeth Ltd
Effective date: 6 March 2026
This Privacy Policy explains how we collect, use and protect personal data when you visit our website, use our services or interact with The StoryBank.
The StoryBank provides storytelling, communication, public speaking, coaching, narrative development, workshops and educational services to individuals, organisations, schools, children and young people.
Data Controller:
Amy Elizabeth Ltd, trading as The StoryBank
Contact:
amy@thestorybank.co.uk
Some StoryBank services are specifically designed for children and young people. Where we process children's personal data, we take particular care to collect and use only the information reasonably necessary to administer, safely deliver and evaluate the relevant service.
Where appropriate, information about a child may be provided by their parent or carer, school or another organisation commissioning the service.
Data Controller:
Amy Elizabeth Ltd, trading as The StoryBank
A) Communication Data
Includes emails, form submissions, and social media messages.
Contact:
amy@thestorybank.co.uk
Why:
To respond to enquiries and maintain communication records.
By providing us with your personal data, you confirm you are over the age of 13 and accept the terms of this policy.
Legal basis:
Legitimate interest.
Our services are not directed to children under 13 and we do not knowingly collect personal data from minors.
B) Customer and Transaction Data
Includes name, email address, billing address, Stripe payment details, and purchase history.
“Personal data” means any information that can identify you. We may collect and process the following categories of data:
Why:To deliver services and fulfil contractual obligations.
Legal basis:Contract performance and legal obligation.
C) Marketing Data
Includes marketing opt ins, email preferences, and campaign interactions.
Why:To send relevant updates, offers, and content.
Legal basis:Consent or legitimate interest.
D) Technical and Website Data
Includes IP address, browser type, time zone, pages visited, and cookies.
This may be collected through tools such as Meta Pixel or other analytics services.
Why:To protect the website, analyse traffic, and improve advertising relevance.
Legal basis:Legitimate interest.
In some circumstances we may process limited special-category personal data.
Adult Clients and Participants
Adult clients may voluntarily share information during coaching, workshops or related services concerning matters such as health, emotional wellbeing, personal history or trauma.
The StoryBank does not require participants to disclose sensitive personal experiences in order to participate in storytelling, communication or professional development work.
Where special-category information is provided, it will be handled sensitively, accessed only where necessary and retained only for as long as reasonably required.
Where we rely on explicit consent to process special-category data, that consent will be obtained appropriately and may be withdrawn.
Children and Young People
We may receive limited health, SEND, accessibility or other special-category information about a child where it is necessary to support their safe and appropriate participation.
Safeguarding information may also be processed where necessary to protect a child.
We will only process such information where there is an appropriate lawful basis and additional condition under UK data protection law.
We may collect personal data:
These may include:
Where a school or organisation provides personal data to us, each party remains responsible for complying with its own obligations under applicable data protection law.
We may use personal data to:
We only use personal data for the purposes for which it was collected or for another compatible purpose where permitted by law.
We do not use automated decision-making that produces legal or similarly significant effects.
As part of StoryBank workshops, clubs and programmes, children and young people may create and collaboratively develop speeches, stories, written exercises, presentations or other creative work.
The StoryBank may provide coaching, feedback, suggestions and editorial input as part of this process.
We may temporarily collect, photograph, receive or retain copies of children's creative work where reasonably necessary to deliver the programme, provide feedback, demonstrate progress or support the child's participation.
Children's creative work may itself contain personal information, including personal stories or experiences, and will be handled with appropriate care.
The StoryBank will not publicly publish, reproduce or use an identifiable child's creative work for promotional or commercial purposes without appropriate permission from the child and/or their parent or carer.
Genuinely anonymised examples or extracts may be used for teaching and educational purposes where the child cannot reasonably be identified.
Ownership and intellectual property relating to participant-created work and The StoryBank's own frameworks and materials are addressed separately in The StoryBank's Terms and Conditions.
The StoryBank may take photographs or video during workshops, clubs and other activities for use in promoting and communicating The StoryBank's work. This may include use on The StoryBank website, social media, presentations, proposals and other promotional materials.
Children and Young People
Where identifiable children or young people may appear in photographs or video, parents or carers will be informed that photography or filming may take place, what the images may be used for, and how they can indicate that their child should not be included.
Where a school or other organisation manages photography permissions on behalf of participating families, The StoryBank may work with that organisation to identify which children may and may not be photographed or filmed.
Where The StoryBank manages permissions directly, parents or carers will be given a clear choice about whether their child may be included in photographs or video used for promotional purposes.
The StoryBank will:
Permission for photography or filming is separate from participation in a StoryBank activity. A child will not be disadvantaged or excluded from the activity because permission has not been given.
Adults
Photographs, video or recordings in which an adult client or participant is identifiable will only be used publicly where The StoryBank has an appropriate lawful basis and the individual has been informed about the intended use.
Where an identifiable image, video, testimonial or other material is being used specifically to promote The StoryBank, we will normally seek the individual's permission before publication.
Changing Your Mind
Parents, carers and adult participants may contact The StoryBank if they no longer want an image or recording to be used.
Where reasonably possible, The StoryBank will stop using the image in future promotional activity and remove it from digital channels under its control. We may not be able to recall material that has already been published, shared by others or produced in printed form.
You will only receive marketing communications from us where permitted by law, for example where:
You can unsubscribe at any time using the unsubscribe link in a marketing email or by contacting:
amy@thestorybank.com
We do not sell personal data or share it with third parties for their own marketing purposes.
Participation by a child in a StoryBank workshop, club or programme will not itself result in the child being sent marketing communications.
We use cookies and similar technologies to:
Non-essential cookies such as analytics or advertising cookies will only be activated after the appropriate consent has been obtained through our website cookie arrangements.
You can also manage or disable cookies through your browser settings.
We may share personal data with trusted third parties where necessary to operate our services, including:
Where we have a safeguarding concern about a child, information may be shared with the relevant school's Designated Safeguarding Lead, children's social care, police or another appropriate safeguarding body where necessary to protect the child.
We may also disclose personal data where required by law or if our business is restructured, sold or merged with another organisation.
Where third parties process personal data on our behalf, appropriate data-protection arrangements will be put in place.
Some of our service providers may process personal data outside the United Kingdom.
Where this occurs, we will ensure that appropriate safeguards are in place as required by UK data protection law.
We implement appropriate technical and organisational measures to protect personal data, including:
Particular care will be taken with safeguarding information and sensitive information concerning children.
If a personal data breach occurs, we will assess the risk and notify the Information Commissioner's Office and/or affected individuals where legally required.
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, safeguarding or reporting requirements.
Typical retention arrangements may include:
Information that is no longer required will be securely deleted or anonymised where appropriate.
Under UK data protection law, depending on the circumstances, you may have the right to:
Parents or carers may also contact us regarding personal data we hold about their child, subject to the child's own data-protection rights where applicable.
To exercise a data-protection right, please contact:
amy@thestorybank.co.uk
We may request appropriate proof of identity before processing certain requests.
If you have concerns about how we handle personal data, please contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
Our website may contain links to third party websites.
We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before submitting personal data.
During coaching, workshops, programmes or other StoryBank services, participants may share personal stories, experiences or reflections as part of the learning process.
We treat such material with care and confidentiality, subject to safeguarding responsibilities and any legal obligation to disclose information.
From time to time, genuinely anonymised insights or examples from this work may be used for teaching, training or educational purposes. Identifying details will be removed so that the individual or organisation cannot reasonably be identified.
Where a testimonial, identifiable story or case study is used publicly, we will obtain appropriate permission before publication.
Additional care will be taken with any material relating to children and young people.
The StoryBank has a separate Safeguarding & Child Protection Policy governing its work with children and young people.
Nothing in this Privacy Policy prevents The StoryBank from sharing information where it is necessary and lawful to safeguard a child or another person from harm.
We may update this Privacy Policy from time to time.
The most current version will always be published on our website with the updated effective date.
If you have questions about this Privacy Policy or about how your personal data is handled, please contact:
Amy Elizabeth Ltd
Trading as The StoryBank
amy@thestorybank.co.uk
