At Story Bay, your privacy and trust are of the utmost importance to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website storybay.org, make a purchase, or interact with us in any other way. Story Bay operates from 32 Ilchester Rd, Liverpool L16 3NQ, United Kingdom, and complies fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We collect different types of information to provide you with a smooth, secure, and personalised shopping experience.
1.1. Information You Provide Directly
When you:
Create an account or place an order;
Subscribe to our newsletter;
Contact us via email, phone, or our website form;
Leave a review or comment;
We may collect the following details:
Full name
Billing and shipping address
Email address
Phone number
Payment details (processed securely through our payment partners — we do not store full card information)
Any additional information you provide voluntarily
1.2. Information We Collect Automatically
When you visit storybay.org, we automatically collect certain information about your device and browsing activity, including:
IP address and approximate location
Browser type and version
Device type and operating system
Pages viewed, time spent, and referring URLs
Cookies and similar tracking technologies (see Section 6)
2. How We Use Your Information
We use your data to:
Process and deliver your orders efficiently
Provide customer support and respond to your enquiries
Send order confirmations, shipping updates, and receipts
Improve our website, services, and user experience
Send marketing communications (only with your consent)
Prevent fraud, maintain website security, and comply with legal obligations
3. Legal Basis for Processing
We process your personal information based on one or more of the following legal grounds:
Contractual necessity: To fulfil your purchase or provide requested services.
Legitimate interest: To enhance and secure our website and services.
Consent: When you sign up for marketing communications.
Legal obligation: When required to comply with UK laws and regulations.
4. Sharing Your Information
We respect your privacy and will never sell your personal data. However, we may share limited information with trusted third parties to help us operate effectively, such as:
Payment processors (for secure transactions)
Delivery and logistics partners (to deliver your orders)
IT and analytics providers (for site maintenance and improvement)
Legal authorities, if required by law or to protect our rights
All third-party partners are required to comply with strict data protection standards under UK GDPR.
5. Data Retention
We retain your personal data only as long as necessary for the purposes outlined above or as required by law. Typically, order and transaction records are stored for up to 6 years for accounting and legal purposes.
When your data is no longer needed, we securely delete or anonymise it.
6. Cookies and Tracking Technologies
Our website uses cookies to improve your experience, analyse site traffic, and personalise content.
You can control or delete cookies at any time via your browser settings. Please note that disabling cookies may affect certain website functions, including checkout and login features.
For more information, please refer to our Cookie Policy (available on our website).
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right to access – Request a copy of the personal data we hold about you.
Right to rectification – Request correction of inaccurate or incomplete information.
Right to erasure – Request deletion of your personal data under certain conditions.
Right to restrict processing – Request limited use of your data.
Right to data portability – Receive your data in a structured, machine-readable format.
Right to object – Object to certain types of processing, such as direct marketing.
Right to withdraw consent – Withdraw your consent to marketing emails at any time.
To exercise these rights, please contact us using the details below.
8. Data Security
We take data protection seriously. Story Bay uses SSL encryption, secure servers, and industry-standard safety measures to protect your information against unauthorised access, loss, or misuse.
However, please note that no online transmission is 100% secure, and we cannot guarantee absolute data security.
9. International Data Transfers
All data collected is primarily processed within the United Kingdom. If we transfer your data outside the UK (for example, through third-party service providers), we ensure it is protected under legally approved safeguards, such as Standard Contractual Clauses or equivalent measures.
10. Children’s Privacy
Story Bay does not knowingly collect or process information from individuals under the age of 16. If you believe we have inadvertently collected data from a child, please contact us immediately to request its deletion.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be published on this page with the revised “Last Updated” date.
12. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:
📞 Phone: +44 077 3821 8933 📧 Email:[email protected] 🏠 Address: 32 Ilchester Rd, Liverpool L16 3NQ, United Kingdom
