GDPR Notice

Lawful basis for processing

• Consent (Art. 6(1)(a)) — for marketing emails and optional photo uploads.
• Contract / pre-contract steps (Art. 6(1)(b)) — to produce your assessment report and respond to a consultation request.
• Legal obligation (Art. 6(1)(c)) — where we must keep records for tax or accounting.
• Legitimate interests (Art. 6(1)(f)) — to follow up genuine enquiries and keep our records accurate.

Special category data

We do not knowingly collect special category data (health, ethnicity, etc.). If you tell us something of this kind in free-text notes, we will only use it to respond to your enquiry and will not use it for any other purpose.

International transfers

Some of our processors (cloud hosting, AI services) may process data outside the UK. We rely on UK adequacy decisions or standard contractual clauses, and require the same level of protection as within the UK.

Data subject rights

You have the rights listed in our Privacy Policy. There is no charge in most cases. We respond within one month, or tell you why we need longer. To make a request, email hello@storyboard-design.co.uk.

Data protection contact

Questions about data protection go to hello@storyboard-design.co.uk (mark them “Data Protection”). We have not appointed a formal DPO; the directors are responsible for compliance. You can complain to the ICO at ico.org.uk if we cannot resolve your concern.

Data breaches

If a personal data breach is likely to risk your rights or freedoms, we notify the ICO within 72 hours and tell you without undue delay where the risk is high.