Skip to main content

Privacy policy

How we handle your data.

Last updated: 17 April 2026

This notice explains what personal data we collect when you use visualisingstories.com, why we collect it, how long we keep it, and the rights you have over it. If anything here is unclear, email us and we will explain it plainly.

Who we are

Controller details

Visualising Stories Ltd is the controller of personal data collected through this website. We are a London design studio registered in England and Wales.

Legal name
Visualising Stories Ltd
Companies House registration
16026210
ICO registration reference
ZB973975
Registered office
86-90 Paul Street, London, EC2A 4NE, United Kingdom

What we collect and why

What personal data we collect

We only collect personal data when you actively interact with the site. We do not track you across the web or build profiles.

  • Website analytics

    We use Cloudflare Web Analytics to understand how the site performs. It records anonymous, aggregated pageview data — URL visited, referrer, country, browser type and screen size. It sets no cookies, performs no individual tracking, and collects no personal data.

  • Contact form submissions

    When you submit the contact form we receive your name, email address and message. We collect this only because you chose to send it.

  • Meeting bookings

    When you book a call via the Cal.com widget embedded on our contact page we receive your name, email address, the meeting date and time, calendar details and any optional notes you add. We collect this only when you actively book a call.

Legal bases under UK GDPR

We rely on the following legal bases under Article 6 of the UK GDPR:

  • Analytics

    Legitimate interests (Article 6(1)(f)) — we need to understand how the site performs, and the processing is low-risk because no personal data is collected.

  • Contact form

    Pre-contractual steps at your request (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)) — responding to an enquiry you have sent us.

  • Meeting bookings

    Contract performance (Article 6(1)(b)) — delivering the meeting you booked.

Who we share your data with

Subprocessors

We only share personal data with the subprocessors who make the website function. Each one is bound by a data processing agreement.

  • Vercel Inc.

    United States. Hosts the website.

  • Cloudflare Inc.

    United States / global edge. DNS and privacy-friendly analytics.

  • Zoho Corporation

    European Union region (smtppro.zoho.eu). Email delivery for the contact form; data stored in the EU.

  • Cal.com Inc.

    United States. Meeting booking system.

International transfers to the United States are covered by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

How long we keep your data

Retention periods

We only keep personal data for as long as we need it. Specifically:

  • Contact form enquiries

    Two years from the last contact, then deleted.

  • Cal.com booking records

    One year after the meeting date, then deleted.

  • Cloudflare analytics

    Row-level data is retained by Cloudflare for approximately six months; only aggregate statistics remain after that. We do not control this retention period — it is set by Cloudflare.

We review our retention periods annually.

Your rights under UK GDPR

Your rights

You have the following rights over the personal data we hold about you:

  • Right of access

    Ask us what data we hold about you.

  • Right to rectification

    Ask us to correct data that is wrong or incomplete.

  • Right to erasure

    Ask us to delete data we no longer need to hold.

  • Right to restrict processing

    Ask us to pause processing while we resolve a concern.

  • Right to data portability

    Ask for a copy of your data in a common format.

  • Right to object to processing

    Object to processing we base on legitimate interests.

  • Rights related to automated decision-making

    Not applicable — we do not make automated decisions about you.

  • Right to withdraw consent

    Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email hello@visualisingstories.com. We will respond within one month as required by UK GDPR.

Right to complain

Complaints to the ICO

You can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to address your concern first, so please contact us before approaching the ICO.

Cookies and tracking

Cookies

This website does not set any tracking cookies. Cloudflare Web Analytics is cookie-free by design. Cloudflare Turnstile (used on the contact form to prevent spam) uses strictly-necessary browser storage classified as exempt from consent requirements under PECR. Cal.com's booking widget, which loads only when you actively click to book a meeting, may set functional cookies; these are activated by your interaction and are limited to providing the booking service.

Changes to this notice

Updates to this notice

We will update this notice if our data practices change. The “last updated” date at the top reflects the most recent revision.