Privacy Policy

This Privacy Policy explains how Storytellers Productions Ltd. ("Storytellers", "we", "us") collects, uses, and shares personal information in connection with the website storytellers-productions.com (the "Site"). This page is maintained by Storytellers to answer common privacy questions about the Site and applies to visitors in the United States, the European Economic Area, the United Kingdom, and elsewhere.

1. Who we are

Storytellers Productions Ltd. is the controller of personal information collected through the Site. You can reach us for any privacy request at info@storytellers-productions.com.

2. Information we collect

We only collect information you choose to give us:

• Contact form submissions. When you use the contact form we collect your name, email address, and the message you send.
• Email correspondence. If you email us directly, we receive your email address and the contents of your message.
• Technical data. Standard server logs (IP address, user agent, timestamp) generated by our hosting provider for security and reliability.

We do not use advertising trackers, third-party analytics, or social-media pixels. We do not knowingly collect information from children under 16.

3. How we use information

• To respond to inquiries submitted through the contact form or by email.
• To operate, secure, and maintain the Site.
• To comply with legal obligations.

We do not sell personal information and we do not use it for automated decision-making or profiling.

4. Legal bases (EEA / UK)

For visitors in the EEA and UK, we rely on the following legal bases under the GDPR / UK GDPR:

• Legitimate interests (Art. 6(1)(f)) to respond to business inquiries and to keep the Site secure.
• Consent (Art. 6(1)(a)) where you voluntarily submit information through the contact form.
• Legal obligation (Art. 6(1)(c)) where we must retain records to comply with applicable law.

5. Cookies

The Site does not use advertising, analytics, or tracking cookies. We may use strictly necessary technical storage required for the Site to function (for example, remembering interface preferences). Because we do not set non-essential cookies, no cookie consent banner is required under the EU ePrivacy Directive.

6. Sharing and subprocessors

We share personal information only with vendors that help us operate the Site, under written data-processing terms:

• Lovable Cloud — website hosting and database storage for contact-form submissions.
• Resend — delivery of transactional email notifications for contact-form submissions.

We disclose information to law enforcement or other third parties only where required by law or to protect our legal rights.

7. International transfers

Our subprocessors are based in the United States. When personal information of EEA or UK residents is transferred outside the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with any supplementary measures required under GDPR.

8. Retention

Contact-form submissions and related email correspondence are retained for 12 months and then deleted, unless a longer period is required to comply with a legal obligation, resolve disputes, or enforce our agreements. Server logs are kept for a short rolling window for security purposes.

9. Your rights

EEA / UK residents (GDPR / UK GDPR). You have the right to access, rectify, erase, restrict, or object to processing of your personal information, and to data portability. You may withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.

US residents. Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others), you may have the right to know what personal information we hold about you, to request deletion or correction, to opt out of sale or sharing of personal information, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under US state privacy laws.

To exercise any of these rights, email info@storytellers-productions.com. We will verify your request and respond within the timeframes required by applicable law.

10. Security

We use industry-standard technical and organisational measures, including transport encryption (HTTPS), access controls, and vendor due diligence, to protect personal information. No online service can be guaranteed 100% secure.

11. EU / UK contact

Storytellers does not currently maintain a separately appointed Article 27 representative. EEA and UK data subjects can exercise all rights by contacting us directly at info@storytellers-productions.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective" date above and, where appropriate, by additional notice on the Site.

13. Contact

Storytellers Productions Ltd. — info@storytellers-productions.com