Privacy Policy

1. Who We Are

Storified is a digital business and professional profile platform. We create and manage profile listings, category pages, business visibility features, media-based profile content, and related digital services.

2. The Personal Data We Collect

We may collect and process the following categories of personal data:

• name, business name, job title, and contact details
• email address, phone number, and postal address
• billing and payment-related information
• profile content you submit, including logos, images, videos, social links, and business descriptions
• account, registration, onboarding, and support information
• affiliate registration details and payout-related information
• technical data such as IP address, browser type, device data, pages viewed, and website usage information
• communications sent to us by email, contact forms, WhatsApp, or other channels
• review, verification, moderation, fraud-prevention, and dispute-related records

3. How We Collect Data

We collect personal data when:

• you complete a form on our website
• you apply for a listing, subscription, or profile
• you communicate with us by email, phone, WhatsApp, or social media
• you make a payment or request an invoice
• you join or use our affiliate programme
• you browse our website and interact with cookies or analytics tools
• you provide materials for publication or profile management
• we receive information from payment providers, marketing tools, or referral tracking systems

4. How We Use Personal Data

• to provide, manage, activate, and renew subscriptions and listings
• to create, edit, publish, and maintain business and professional profiles
• to process payments, invoices, refunds, and account administration
• to review applications and verify submitted information
• to provide customer support and respond to enquiries
• to manage affiliate referrals, commissions, fraud checks, and performance records
• to improve website performance, security, and user experience
• to send service messages, account notices, and important policy updates
• to send marketing communications where permitted by law or where consent has been given
• to keep records, prevent misuse, and protect our legal rights

5. Lawful Bases for Processing

Under the UK GDPR, the Data Protection Act 2018, and related UK privacy laws, we rely on one or more lawful bases where required, including:

• Contract — where processing is necessary to provide our services, manage subscriptions, process registrations, or take steps before entering into a contract.
• Legitimate interests — where processing is necessary for running, improving, securing, and promoting our business, provided those interests are not overridden by your rights.
• Legal obligation — where processing is necessary to comply with tax, accounting, legal, regulatory, anti-fraud, or law-enforcement requirements.
• Consent — where consent is required, such as for certain marketing activities or non-essential cookies.

6. Marketing Communications

We may send service-related communications that are necessary for your account, subscription, payments, renewals, policy changes, or support enquiries.

We may also send promotional communications where permitted by law or where you have given consent. You can opt out of marketing communications at any time using the unsubscribe method provided or by contacting us directly.

7. Cookies & Similar Technologies

Our website may use cookies and similar technologies for core website functionality, performance, analytics, security, and user experience. Where required under the Privacy and Electronic Communications Regulations (PECR), we ask for consent before placing non-essential cookies on your device.

You can control cookies through your browser settings and any cookie controls provided on our website. Disabling some cookies may affect site functionality.

8. Data Sharing

We may share personal data where necessary with:

• payment processors and billing providers
• website hosting, security, and analytics providers
• email, communication, CRM, and customer support providers
• affiliate tracking, accounting, and fraud-prevention service providers
• professional advisers including legal, compliance, or accounting advisers
• public authorities, regulators, courts, or law-enforcement bodies where required

We do not sell personal data. We only share data where there is a valid business reason, legal basis, or legal requirement.

9. Public Profile Content

Information submitted for publication on a public business or professional profile may become publicly visible. This can include names, business details, contact information, logos, descriptions, media, links, ratings, reviews, and other content intended for public display.

You are responsible for ensuring that materials you submit for publication are accurate and that you have the right to share them.

10. International Transfers

Depending on the services and providers we use, personal data may be processed in countries outside your own jurisdiction. Where required, we take reasonable steps to ensure appropriate safeguards are used for international transfers.

11. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including for service delivery, record-keeping, account management, legal compliance, dispute handling, fraud prevention, and enforcement of our rights. Retention periods may vary depending on the type of data, the purpose for which it was collected, and legal or operational requirements.

12. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, alteration, or destruction. No internet-based system is completely secure, and we cannot guarantee absolute security.

13. Your Rights

If UK data protection law applies, you may have rights including the right to:

• be informed about how your personal data is used
• request access to your personal data
• request correction of inaccurate or incomplete data
• request deletion of data in certain circumstances
• request restriction of processing in certain circumstances
• object to certain types of processing
• withdraw consent where processing relies on consent
• complain to the UK Information Commissioner’s Office (ICO)

14. Third-Party Links

Our website or profiles may contain links to third-party websites, platforms, booking services, social media channels, or review services. We are not responsible for the privacy practices of third-party websites or services.

15. Children

Our services are intended for businesses, professionals, and adults acting for commercial purposes. We do not knowingly collect personal data from children in connection with commercial registrations.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version published on our website will apply from the stated effective date.

17. Contact Us

If you have any questions about this Privacy Policy or the way your personal data is handled, contact us at info@storified.io. If you are based in the United Kingdom and believe your data has been handled unlawfully, you may also complain to the UK Information Commissioner’s Office (ICO).