Privacy Policy

Story Sport Limited – Privacy Policy

Introduction

At Story Sport Limited, we take your privacy seriously. This Privacy Policy explains what personal data we collect from you and from visitors to our website, and how we use it.

For questions regarding this Privacy Policy or our practices, please contact us by email: hello@storysport.co.uk.

Who are we?

Story Sport Limited is a company registered in England, number 16164398. Registered office: Marsland Chambers 1a, Marsland Road, Sale, United Kingdom, M33 3HP. Story Sport is a data controller.

Personal Data We Collect

We may collect:

  • Name, address, email address, IP address
  • Information about your website usage
  • Information from enquiries about our products or services, job applications, franchise opportunities, or newsletter registrations

How We Collect Data

  • Directly from you via our website or communications
  • Through enquiries about services, job applications, or franchise opportunities
  • When you register for emails/newsletters

How We Use Your Information

We use personal data to operate our business and provide the best services. This includes:

  • Fulfilling contractual obligations
  • Responding to enquiries
  • Processing orders and after-sales service
  • Discussing franchise opportunities or services
  • Processing job applications
  • Sending communications (e.g., newsletters)
  • Maintaining class registers

Data Processing Details

1. Prospective Customers

  • Data: Name, contact information, service-related communications
  • Retention: Duration of enquiry + 5 years
  • Storage: Secure EEA and non-EEA servers (Canada)

2. Customers

  • Data: Parent name, contact info, child details, service communications, billing info (excluding card details)
  • Retention: Contract duration + 4 years; financial records: 6 years
  • Storage: Secure EEA and non-EEA servers; transactions via PayPal, CyberSource, WorldPay

3. Job Applicants

  • Data: Name, contact, CV, application, interview notes
  • Retention: Recruitment campaign + 1 year
  • Storage: Secure EEA and non-EEA servers

4. Current and Former Employees

  • Data: Personal, tax, qualifications, performance reviews
  • Retention: Contract duration + 3 years
  • Storage: Secure EEA servers

5. Prospective Franchisees and Franchisees

  • Data: Contact info, DOB, spousal info, income/assets, personality tests
  • Retention: Successful franchisees: contract duration + 4 years; unsuccessful: max 12 months
  • Storage: Secure EEA and non-EEA servers

Who Has Access?

We do not sell or share personal data for marketing purposes. Data may be shared with third-party service providers for operational purposes only, under contracts requiring security and confidentiality.

Third-Party Providers (Data Processors)

  • NetGuides (IT/website services)
  • SkyPrep (online training platform)
  • Salesforce (administration services)
  • PayPal, WorldPay, CyberSource (payments)
  • Groe Global (franchise brokerage)
  • Algoworks (Salesforce support)
  • Synergy (fulfilment/merchandise)
  • Shopify (e-commerce/affiliate services)

Transfers Outside the EEA

Some providers may store data outside the EEA (e.g., Canada). Hotjar is used to understand user behavior, using pseudonymized data.

Your Choices & Rights

  • Verify, update, and correct your personal information
  • Unsubscribe from marketing emails
  • Request a copy of data held
  • Lodge complaints with the UK Information Commissioner’s Office: https://ico.org.uk/

Data Security

  • We implement safeguards to protect personal data on our internal systems
  • Emails use TLS encryption; monitor for viruses/malware

Changes to This Policy

We review this Privacy Policy regularly. Last updated: 29/06/2025.