Privacy Policy

1. Introduction

Story Marketing platform is a whitelabeled GoHighLevel SaaS platform operated by Story Marketing Group, LLC (trading as "Story Marketing" in the United Kingdom) ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use the Story Marketing platform platform. This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller & ICO Registration

We are the data controller for your personal data. We are registered with the Information Commissioner's Office (ICO) under registration number ZC060558.

3. Information We Collect

4. Lawful Basis for Processing

Under UK GDPR, we process your personal data based on the following lawful bases:

• Consent: For marketing communications and optional analytics and advertising cookies (including Google Analytics and the Meta Pixel)
• Contract: To provide our services and manage your account
• Legitimate Interests: For security, fraud prevention, and service improvement

5. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and maintaining the Story Marketing platform platform and services
• Processing transactions and managing your account
• Communicating with you about our services
• Sending marketing and promotional materials (with your consent)
• Improving our website and platform
• Analyzing usage patterns and trends
• Complying with legal obligations

6. Information Sharing

We may share your information in the following circumstances:

• With service providers who help us operate our business and the Story Marketing platform platform
• With GoHighLevel as the underlying platform provider
• With analytics and advertising partners — Google (Google Analytics) and Meta Platforms (Meta Pixel) — who receive cookie-based identifiers and website usage data, such as pages viewed and whether an appointment was booked
• When required by law or to protect our rights
• In connection with a business transfer or merger
• With your explicit consent

We do not sell, trade, or otherwise transfer your personal information to third parties for their marketing purposes without your consent.

7. International Transfers

Our platform is built on GoHighLevel, which is based in the United States, and our analytics and advertising partners (Google and Meta) may also process data in the United States. When we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the ICO.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. The Story Marketing platform platform utilizes industry-standard security protocols. However, no method of transmission over the internet is 100% secure.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

• Right of Access: Request a copy of your personal data (Subject Access Request)
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ('right to be forgotten')
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Complain: Lodge a complaint with the ICO (ico.org.uk) if you're not satisfied

To exercise any of your rights, please contact our Data Protection Officer at kyle@storymarketing.group. We will respond within one month.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Account data is retained for the duration of your account plus 6 years for legal compliance. Transaction data is retained for 7 years for tax purposes.

11. Cookies

Our website and the Story Marketing platform platform use cookies and similar tracking technologies to enhance your browsing experience. Essential cookies are necessary for our platform to function. Optional cookies for analytics and marketing require your consent and include Google Analytics and the Meta (Facebook) Pixel, which measures the performance of our advertising — including page views and when an appointment is booked through our calendar. The Meta Pixel shares cookie-based identifiers and usage data with Meta Platforms Ireland Limited; it does not share the contents of your booking. You can learn how Meta uses this data at facebook.com/privacy/policy. You can manage your cookie preferences through our cookie settings or your browser settings.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this privacy policy, wish to exercise your data protection rights, or have concerns about how we handle your data, please contact our Data Protection Officer: