Privacy Policy

1. Data Controller

The data controller responsible for personal information processed on this website is:

Story Porch Scene Coastal Media Ltd
Company Registration No: SC-784920-B
44 Harbor Strand, Suite 3B, EH6 7BD, Edinburgh, United Kingdom
Email: [email protected]

2. Principles of Data Collection

We believe in strict data minimization. We only collect personal data when directly provided by you (such as when submitting a query through our contact form) or when technically necessary to ensure website performance and security.

3. Information We Collect

A. Information You Voluntarily Provide

When you contact us via our website form or direct email, we collect your name, email address, message subject, and the contents of your communication. This information is used exclusively to respond to your inquiry.

B. Technical & Operational Log Data

When accessing our web pages, our hosting servers automatically record standard HTTP transmission logs. This data may include your anonymized IP address, browser user-agent, operating system, requested URL, and timestamps. This log data is retained solely for security diagnostics, preventing malicious scraping, and server load balancing.

4. Legal Grounds for Processing (GDPR & UK-GDPR)

We process your personal information under the following legal bases:

• Legitimate Interests: To maintain secure server operations, deliver web content reliably, and communicate with individuals who reach out to our editorial desk.
• Consent: Where you voluntarily choose to submit contact details or accept optional functional browser storage tokens.
• Legal Compliance: Where processing is required to fulfill statutory reporting or legal record-keeping obligations.

5. Data Sharing and Third Parties

We do not sell, rent, monetize, or trade your personal data. We only share information with trusted infrastructure providers (such as secure web hosts and email transport gateways) bound by strict data protection agreements. We will not disclose personal information to authorities unless mandated by valid legal court orders.

6. International Data Transfers

Where technical infrastructure involves servers located outside the UK or European Economic Area (EEA), transfers are conducted under recognized adequacy decisions or Standard Contractual Clauses (SCCs) to guarantee equivalent data protection levels.

7. Data Retention

Contact messages and editorial inquiries are retained for up to 12 months following resolution to facilitate ongoing correspondence, after which they are securely deleted. Server access logs are rotated and deleted automatically within 30 days.

8. Your Legal Rights

Under applicable data privacy legislation (including GDPR and UK-GDPR), you possess rights including:

• Right of Access: Request a copy of the personal information we hold regarding you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure: Request deletion of your personal data when no longer required for processing.
• Right to Restriction: Request limitation of processing under specific circumstances.
• Right to Object: Object to processing based on legitimate interests.

To exercise any of these rights, please email us at [email protected]. We reply to all verified requests within 30 days.

9. Cookie & Storage Controls

Please refer to our dedicated Cookie Policy for detailed explanations of the minimal local storage tokens utilized on this website and instructions on how to manage or reset them.

10. Updates to This Policy

We may update this policy periodically to reflect operational, legal, or regulatory adjustments. Any updates will be published on this page with a revised "Last updated" date.