Terms & Conditions

Introduction

Last updated: 21st February 2025

Welcome to Story Clinic. These Terms and Conditions outline the rules and regulations governing your use of our website and services. By accessing and using this website, you accept and agree to abide by these terms and conditions in full. If you do not agree to all of the terms, you must not use this website.

Definitions

The following terms apply to these Terms and Conditions, Privacy Statement, Disclaimer Notice, and any related agreements:

• Client, Customer, You, Your, and Patients: the individual accessing this website and accepting the company’s terms and conditions.
• The Company, We, Us, and Ourselves: Story Clinic, located at 5th Floor Jasper House, 4-6 Copthall Avenue, London, EC2R 7DA.
• Party and Parties: both the Client and The Company, or either one individually.

Other definitions include:

• Account: A unique account created for you to access our services.
• Affiliate: An entity that controls, is controlled by, or is under common control with a party.
• Cookies: Small files placed on your device by our website containing details of your browsing history.
• Personal Data: Information that identifies or relates to an identifiable individual.
• Service: Our Website/Application and the services provided through it.
• Service Provider: Any third-party company or individual employed by us to process data, provide services, or assist in the operation of our website or services.
• Usage Data: Automatically collected data such as visit duration or page views.
• Website: Story Clinic website accessible from www.storyclinics.com

Privacy Statement

We are committed to protecting your privacy and personal data. Our Privacy Policy and Cookie Policy explain how we collect, use, and protect your personal data when you visit our website. By using the website, you consent to the collection and use of information in accordance with our Privacy Policy. You can manage your cookie preferences through your browser settings. We may share your data with third-party service providers when necessary to operate our services. We comply with applicable data protection laws, including GDPR.

Confidentiality

We are registered under the Data Protection Act 1998 (and applicable data protection regulations, including GDPR). Information related to Clients and their records is confidential. We may disclose information to third parties only when legally required to do so, such as to the General Medical Council. Clients have the right to request access to and copies of their records with reasonable notice.

We will not sell, share, or rent your personal information to third parties. Any communications from us will be related to the services we provide and will not include unsolicited marketing emails.

Availability of Services

Unless stated otherwise, the services offered on our website are only available within the United Kingdom or in relation to postings from the United Kingdom. We do not guarantee uninterrupted or error-free service but will make every effort to provide a reliable service. Redistribution or republication of content from the website is prohibited without our express written consent. You are solely responsible for evaluating the fitness of any downloads or services available through this site.

Medical Terms

We provide detailed explanations regarding the use and indications of products and treatments. Patients have the opportunity to ask questions about procedures and are encouraged to seek further clarification before treatment. It is the patient’s responsibility to ask any questions regarding the treatment before the procedure commences.

Intellectual Property

The content, design, data, and graphics on our website are protected by UK and international copyright laws. You may not adapt, alter, or create derivative works from any material contained on the website for commercial purposes. Unauthorized copying or incorporation into other websites or publications is prohibited. Framing of any part of the website is not permitted without express written consent.

All content on the website, including training materials, is protected by copyright and intellectual property laws. We reserve the right to take legal action for any unauthorized use of our intellectual property.

Requests for permission to use our images or any other intellectual property not authorized by these Terms and Conditions should be directed to info@storyclinics.com

Trademarks

The trademarks and logos displayed on our website are the property of Story Clinic. Use of these trademarks without prior written consent is strictly prohibited. No use of our trademarks is allowed for any purpose other than personal, non-commercial use without our express written permission.

Links to Other Websites

We do not monitor or endorse the content of third-party websites linked to our website. We are not responsible for the content, privacy practices, or security of these sites. By clicking on such links, you consent to third-party websites collecting or sharing data about you. We encourage users to read the privacy policies of any third-party websites they visit.

We are not liable for any loss or damage resulting from disclosing personal information to third-party websites.

Copyright Notice

Copyright and other intellectual property rights exist in all text relating to the Company’s services and the full content of this website. The Company’s logo is a registered trademark in the United Kingdom and other countries. Unauthorized use of our intellectual property may result in legal action.

Disclaimers and Limitation of Liability

The website and services are provided “as is” without warranties of any kind. We do not guarantee the accuracy, reliability, or availability of the website. We are not liable for any direct, indirect, incidental, consequential, or punitive damages arising from the use of the website or services.

You agree to indemnify Story Clinic against any claims arising from your use of the website or services. We recommend that you independently verify medical information before making decisions based on the content of the website.

To the fullest extent permitted by law, Story Clinic is not responsible for any loss, injury, or damage caused to persons or property resulting from the application of information found on this website.

Waiver

If we do not immediately take action against a violation of these terms, it does not waive our right to take action in the future. We are entitled to use our rights and remedies at any time, even if we previously chose not to enforce them.

Complaints Policy

At Story Clinic, we are committed to giving our clients the highest possible standards of care and service at all times. If our performance does not meet expectations, we welcome feedback to enable us to review how we might have done things differently and how we can use the feedback to improve the quality of our services.

In the unlikely event that a client is unhappy with the service they have received, we have created the following complaints procedure to ensure we can resolve the issues as quickly and efficiently as possible. Clients are encouraged to contact us directly at info@storyclinics.com to allow us the opportunity to address and resolve the complaint to their satisfaction.

If you are not happy with our final response, or if we have been unable to resolve your complaint within eight weeks, you may have the right to refer the matter to the Cosmetic Redress Scheme:

• Website: https://www.cosmeticredress.co.uk
• Phone: 0203 907 1853
• Email: info@cosmeticredress.co.uk

Please be aware that complaints must be referred to the Cosmetic Redress Scheme within a maximum of 12 months of our final response to you.

Governing Law

These terms and conditions are governed by the laws of England and Wales. Disputes arising in connection with these terms shall be subject to the exclusive jurisdiction of the English courts.

Animals in the Clinic

For hygiene and safety reasons, animals are not permitted within the clinic premises unless required for assistance purposes (e.g. guide dogs). We kindly request that clients notify us in advance if they require an assistance animal during their appointment.

Use of the Website

You agree to use our website for lawful purposes only. You must not misuse the website by knowingly introducing viruses, trojans, or other malicious material. Unauthorized access attempts will be reported to the relevant authorities.

Termination

We may terminate or suspend access to our website or services immediately, without prior notice, if you breach these terms and conditions. Upon termination, your right to use our website and services will cease immediately.

Purpose and Legal Basis of Data Processing

Purpose / Activity	Type of Data	Lawful Basis for Processing
To register You as a new client	Identity Contact	Performance of a contract with You Legitimate interests (running our business, providing services)
To perform the contract and provide services: – Manage payments, fees and charges – Collect and recover money owed	Identity Contact Financial Transaction Technical Marketing & Communications	Performance of a contract with You Legitimate interests (to recover debts due)
To operate our platform and provide services	Identity Profile Health Information	Performance of a contract with You Legitimate interests (running our business, providing services) Explicit consent (where applicable)
To manage our relationship with You: – Notify You about changes to terms or policy – Request feedback	Identity Contact Profile Marketing & Communications	Performance of a contract with You Legal obligation Legitimate interests (keeping records updated, studying use of services)
To administer and protect the business and website	Identity Contact Technical	Legitimate interests (business operation, IT services, network security, fraud prevention, restructuring) Legal obligation
To deliver content and advertisements, measure effectiveness	Identity Contact Profile Usage Marketing & Communications Technical	Legitimate interests (study usage, develop services, grow business, marketing strategy) Consent (for cookies)
To use analytics to improve services and user experience	Technical Usage	Legitimate interests (define customers, keep website updated, develop business and marketing)

Special Category Data

We may need to process health-related data to provide our services. This includes medical history, allergies, lifestyle factors, or treatments. Such data will only be processed with explicit consent or when necessary for healthcare provision. We do not collect other special categories of data (e.g. political opinions, religious beliefs, genetic data, sexual orientation) unless legally required.

Data Sharing and Storage

Your data may be shared with sister brands (The Academy Clinic, Harley Academy Limited) and service providers (Cliniko, Design MC, Adyen, Stripe). Data may be stored on secure servers within the UK/EEA, with appropriate safeguards for transfers outside this region (e.g. adequacy decisions, contractual clauses).

Your Rights

You have rights under data protection laws to:

• Access your data
• Request correction or erasure
• Restrict or object to processing
• Request data portability
• Withdraw consent (where applicable)

To exercise these rights, contact us at privacy@storyclinics.com

Security

We use robust technical and organizational measures to secure your data. In case of a breach, affected individuals and regulators will be notified as required by law.

Children’s Privacy

We do not knowingly collect personal data from individuals under 18. If such data is found, it will be deleted immediately.

Updates to These Terms

We may update these Terms & Conditions periodically. The latest version will always be available on our website. Please review regularly.

Contact Us

If you have any questions, you can reach us at:

• Email: info@storyclinics.com
• Mail: Story Clinics, 5th Floor Jasper House, 4-6 Copthall Avenue, London, EC2R 7DA

Booking T&C’s

Introduction

Last updated: 3rd January 2025

Welcome to Story Clinic. By booking an appointment, you confirm that you have read, understood, and agreed to abide by the terms and conditions outlined in this document. These terms govern the relationship between you and Story Clinic and are legally binding.

1. Definitions

• Client/Customer/You/Your/Patients: The individual booking and attending the appointment.
• The Company/We/Us: Refers to Story Clinic, its employees, agents, and representatives.
• Party/Parties: Refers collectively or individually to the Client and The Company.
• These terms shall be interpreted in accordance with prevailing English Law.

2. Consultations and Appointments

Timeliness:

• Clients must arrive 10 minutes prior to the appointment start time to complete all necessary paperwork and consultations. Late arrivals may result in reduced treatment time or forfeiture of the appointment.
• Clients arriving more than 15 minutes late will forfeit the appointment and any deposits or fees paid.
• Story Clinic will endeavour to ensure that your appointment runs to time; however, should we need to cancel or postpone your appointment at short notice, we will make every effort to contact you in advance.

Preparatory Requirements:

• Clients will be informed of any preparation required before their appointment. Failure to adhere to these guidelines may result in cancellation, reduced treatment time, or additional charges.

Children:

• Clients bringing children to the clinic must also bring an adult chaperone. Children must not be left unattended, and failure to comply will result in immediate cancellation without refund.

Practitioner Assignment:

• The requested practitioner at the time of booking is subject to change. Clients may not hold Story Clinic liable for practitioner availability.

Suitability for Treatment:

• As with any medical procedure, a full medical history and facial assessment is required before treatment. If our practitioners feel that on the day of treatment the client is not suitable or would not benefit from the treatment being delivered, the treatment will not go ahead. We strongly encourage all clients to consider all treatments prior to undergoing them and not rush into any decisions. Clients are encouraged to ask as many questions as they need both prior to, and on the treatment day.

3. Age Restrictions

• Injectable treatments are restricted to clients aged 21 and above, while skin treatments require a minimum age of 18. Story Clinic reserves the right to refuse treatment to anyone below the stipulated age, even with parental or guardian consent.

4. Payment Terms

4.1 Payment Obligations:

• A non-refundable deposit of up to 50% of the treatment cost is required to secure the appointment.
• The remaining balance must be paid in full on or before the appointment date.
• Failure to make the payment in full prior to the appointment will result in cancellation and forfeiture of any deposits or advance payments.

4.2 Accepted Payment Methods:

• Payments can be made via credit card, debit card, or any other method approved by Story Clinic.
• All payments are processed securely through Adyen, our third-party payment provider. Story Clinic does not store payment information.

4.3 Late or Failed Payments:

• In the event of a failed payment, the appointment will be cancelled, and the outstanding balance must be settled within 7 days.
• The Company reserves the right to charge interest at a rate of 4% above the Bank of England base rate on overdue amounts, calculated daily from the due date until payment is received.

5. Cancellations & No-Shows

5.1 Client Cancellations:

• Clients must provide at least seven (7) days’ written notice to cancel or reschedule an appointment. This can be done via email or phone during normal working hours.
• Cancellations made less than seven days before the appointment will incur a 100% charge of the appointment fee. Any prepaid deposits are non-refundable.

5.2 No-Shows:

• Clients who fail to attend their appointment without notice will be charged the full appointment fee using the payment details provided at the time of booking.

5.3 Company Cancellations:

• Story Clinic reserves the right to cancel or reschedule appointments due to unforeseen circumstances, practitioner availability, or force majeure events.
• Where possible, the Company will notify clients at least 24 hours in advance. However, no liability shall arise for cancellations made without notice.

6. Limitation of Liability

6.1 General Limitation:

• Story Clinic’s liability for claims arising from the provision of services is strictly limited to the total fees paid for the treatment.
• The Company will not be liable for:
  • Indirect, consequential, or incidental damages.
  • Loss of earnings, business disruption, or other financial losses incurred by the client.

6.2 Force Majeure:

• Story Clinic shall not be held liable for cancellations, delays, or failures caused by events beyond its reasonable control, including pandemics, natural disasters, or government restrictions.

6.3 Adverse Outcomes:

• The Company is not responsible for adverse reactions or outcomes where risks were communicated before treatment.

7. Client Consultation Forms

• All clients must complete a consultation form before treatment. Failure to complete the form or disclose relevant medical history will result in cancellation without refund.
• Clients are responsible for updating Story Clinic on any changes in health or circumstances.

8. Medical Disclaimer

• The use of and indications for the products that patients will be treated with will be explained by the practitioner and patients will have the opportunity to have all questions answered to their satisfaction prior to treatment. It is the patient’s responsibility to seek further clarification from their practitioner if questions about the procedure remain, this must be done prior to treatment.
• Clients will be specifically informed of the following common injection-related reactions: redness, swelling, pain, itching, bruising and tenderness at the treatment site. These reactions are generally described as mild to moderate and typically resolve spontaneously a few days after treatment. These reactions are normal and are to be expected. Again, clients must clarify any doubts with their practitioner prior to treatment.
• For muscle relaxation injections with Botulinum toxin Type A: Patients will be advised by their practitioner of the expected outcomes and risks associated with this treatment based on the current product Summary of Product Characteristics (SmPC). In particular, practitioner and patient have discussed realistic outcomes regarding the onset of action and the duration of effect, together with the potential side effects including those relating to the site of injection and the generalised common and uncommon side effects including headaches, muscle activity disorders (raised eyebrows), feeling of heaviness in the upper part of the face, eyelid oedema, eyelid ptosis, eye pain, blurred vision, fainting, tinnitus, nausea, dizziness, muscle twitching, muscle cramps, localised muscle weakness in the face (drooping eyebrow), dry mouth, flu symptoms, influenza, bronchitis, throat infection, and in rare cases, excessive muscle weakness and difficulties in swallowing.
• Depending on the product used, area treated, skin type and the injection technique, the effect of anti-wrinkle treatment typically lasts between 2 and 4 months. In some cases the duration may be shorter or longer. Story Clinic accepts no responsibility for the effects of treatment lasting longer or shorter than the expected timeframes, and any follow-up treatments will be regarded as a new treatment requiring payment.
• Other types of reaction are rare, but approximately one in every 10,000 patients treated with a dermal filler has experienced localised allergic reactions after one or more injection treatments. These have usually consisted of swelling and firmness at the treatment site, sometimes affecting the surrounding tissues. Redness, tenderness and rarely acne-like formations have also been reported. These reactions have either started a few days after injection or after a delay of several weeks. They have been described as mild to moderate and self-limiting, with an average duration of two weeks. In rare instances such reactions or lump formations like granulomas have persisted for a number of months. Our practitioners will ensure that clients have been made aware of this before treatment begins, and it is the clients’ responsibility to raise any concerns with their practitioner before treatment commences.
• Story Clinic will not be held liable for any side effects caused as a result of safe and proper treatment if prior explanation about the associated risks has been given.
• On very rare occasions (less than one in 15,000) prolonged firmness, abscess formation or greyish discolouration at the implant site has occurred. These reactions can develop weeks to months following the injections and may persist for several months but normally resolve with time. Even more rarely, the formation of a scab and sloughing (shedding) of tissue at the treatment site has been noted, which could result in a shallow scar.
• A report published in 2012 discussed 32 reported incidents of blindness following dermal filler treatment in areas including the glabellar frown lines, under eye area, and temple. In a separate study published in 2013, of the 6 visual disturbance cases reported, 3 were following glabellar frown line treatment with dermal fillers. Should any of these side effects occur after treatment, Story Clinic cannot be held responsible.
• Depending on the product used, area treated, skin type and the injection technique, the effect of dermal filler treatment can last 4–12 months. In some cases the duration may be shorter or longer. Follow-up treatment will help to maintain the desired correction. All follow-up treatments are treated as a new, separate procedure and will therefore incur further costs in line with those on the Story Clinic website.
• In the event of an adverse reaction clients will be advised by their practitioner to seek further help/consultation immediately. Story Clinic will not be held liable for adverse reactions to treatments.

9. Aftercare

• Aftercare instructions are provided post-treatment. Failure to follow these instructions may impact treatment results, for which Story Clinic cannot be held liable.

10. Transaction Data

• Payments are processed through Adyen. Story Clinic does not store payment data. Adyen’s data retention and privacy policies apply, which can be found here: www.adyen.com/privacy-policy

Privacy Policy

Last updated: 21st February 2025

This Privacy Policy outlines our policies and procedures on the collection, use, and disclosure of your information when you use our service (www.storyclinics.com). It explains your privacy rights and how the law protects you. By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Definitions

For the purposes of this Privacy Policy:

• Account: A unique account created for you to access our services.
• Affiliate: Entities under common control, sharing 50% or more ownership.
• Cookies: Small files stored on your device to track your browsing activity.
• Device: Any device capable of accessing the Service, such as a phone or tablet.
• Personal Data: Information that identifies or can identify an individual.
• Service Provider: Third parties processing data on behalf of The Academy Clinic.
• Usage Data: Automatically collected data about your interactions with our Service.
• Website: The Academy Clinic website, accessible at www.storyclinics.com
• You: The individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Who are we?

We are Story Clinics, a sister brand of Harley Academy Limited.

• Address: 5th Floor, Jasper House, 4-6 Copthall Avenue, London, EC2R 7DA
• Contact Email: privacy@storyclinics.com

Data We Collect

1. Information You Provide

• Identity Data: Name, email, gender
• Contact Data: Phone numbers, billing and email addresses.
• Financial Data: Payment card and bank details.
• Transaction Data: Details of payments to/from you.
• Profile Data: Username, password, preferences, and feedback.
• Health Data: Medical history, allergies, lifestyle factors (only with explicit consent).

2. Information Collected Automatically

• Usage Data: Pages viewed, session durations, and interaction metrics.
• Device Data: Browser type, operating system, IP address, and device details.
• Cookies: Collected for analytics and service improvement purposes.

3. Aggregated Data

Aggregated data (statistical or demographic) that cannot identify you.

How We Collect Your Data

• Direct Interactions: Through inquiries, sign-ups, and forms.
• Automated Technologies: Using cookies and similar technologies.
• Third Parties: Analytics tools like Google Analytics.

How We Use Your Data

Purpose	Data Types	Legal Basis
To register you as a client	Identity, Contact	Performance of a contract
To provide our services	Identity, Financial, Profile, Health	Performance of a contract, Consent
To manage payments	Identity, Financial	Performance of a contract, Legitimate interests
To send marketing communications	Identity, Contact	Consent
To improve services	Usage, Technical	Legitimate interests

Special Category Data

In light of the services which we provide to You, it will often be necessary for us to use information about your health. Even in the broadest sense of the word, ‘health’ information is a special category of personal data which requires us to have an additional lawful basis for using this information. Where we use information about your health for the purpose of providing our services to you (or in preparation for us to provide services to you), the additional lawful basis on which we shall rely will be that such use is necessary in order for us to provide you with health care or treatment.

You may be asked to provide details that impact potential treatments and products. Including medications, medical history, allergies, lifestyle factors such as occupation and travel plans, medical treatments and ongoing concerns. This data is stored securely and only used when advising you on suitable treatments.

With the exception of Health Data, we do not collect any other Special Categories of Personal Data about you (this includes details about religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, genetic or biometric data). Nor do we collect any information about criminal convictions and offences.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

If the information we have stored needs updating, please inform us by email info@storyclinics.com

We may process data for more than one lawful ground depending on the specific purpose for which we are using data. Please contact us if You want further details about the specific legal ground we are relying on to process your data.

Where we need to collect data by law, or under the terms of a contract and You do not provide that data when requested, we may not be able to fulfil the contract. In this case, we may have to cancel a service you have with us.

Data Sharing

We share data as necessary with:

• Affiliates: The Academy Clinic and Harley Academy Limited
• Service Providers: Cliniko (clinic management), Design MC (website hosting), Zettle (payment collection)
• Legal Obligations: Regulatory authorities when required by law.

Appropriate safeguards are in place for any data transfers outside the UK/EEA.

Data Retention

We retain your data only for as long as necessary:

• Personal Data: For service provision or as required by law.
• Usage Data: For a shorter duration unless needed for security purposes.

Your Legal Rights

You have the right to:

• Access: Request copies of your data.
• Rectification: Correct inaccuracies in your data.
• Erasure: Request deletion of your data (subject to legal exceptions).
• Restriction: Limit processing of your data.
• Data Portability: Receive your data in a structured format.
• Withdraw Consent: Opt-out of marketing or data collection activities.

To exercise these rights, email us at info@storyclinics.com

Data Security

We implement robust security measures to protect your data. If a breach occurs, affected parties and regulators will be notified promptly.

Cookies and Third-Party Tools

We use cookies to improve functionality and gather analytics. You can manage or disable cookies in your browser settings. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some of our Service features may not work properly without cookies. Most browsers accept cookies automatically but allow You to disable them. For more information about cookies visit https://www.allaboutcookies.org.

Information About Your Location

From your IP address, we can tell generally where You are when You are accessing our Service, such as which city. We start by choosing a location for You based on the IP address of your internet connection. You can update or remove this location at any time by logging in to your account on the Service.

Personal Data and Information Third Parties Collect Automatically

Third-Party Cookies for Site Use Analysis

We use third parties such as Google to help us analyse how people are using our Service. We also use the Google Analytics service to provide us with demographic data about our Hosts and Members, such as age and gender. Google uses a cookie that can be recognised by Google or its affiliate DoubleClick when You visit other websites. For more information about how Google collects, uses, and shares your information, please visit the Google Privacy Policy-Partners website at https://www.google.com/policies/privacy/partners/.

Third-Party Cookies Used to Target Ads on Other Websites

“Beacons” are transparent pixel images that are used in collecting information about website usage across websites and over time. Our Hosts may use their own or third-party cookies or beacons to target Host ads to You when You visit other websites. Our Hosts may also work with other companies who use their cookies or beacons to target third-party ads to You on other websites based on your prior visits to the Host’s Network on our website Service. This is called online behavioural advertising (“OBA”) because You receive ads based on your prior online behaviour. We do not have access to these cookies; it is third parties who engage in OBA.

Data Protection Legislation

Our use of your personal data is subject to the data protection laws applicable in the United Kingdom, including the UK GDPR; the Data Protection Act 2018 (and regulations made thereunder) (DPA 2018); the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426) and the ePrivacy Directive (2002/58/EC) as amended and all other legislation and regulatory requirements in force from time to time which apply to a party relating to the use of Personal Data (including, without limitation, the privacy of electronic communications) and the guidance and codes of practice issued by the Commissioner or other relevant regulatory authority which are applicable to a party.

Who Do We Share Your Data With?

We may share your data within Story Clinics sister brands, The Academy Clinic and Harley Academy Limited (i.e. our officers, staff and contractors) and with our service providers; for example, to service your requests or provide You with information. We may also share your data if a change happens in our business such as a merger or acquisition. If that happens, the new owners may use your data in the same way as set out in this Privacy Policy.

We may also share your data with service providers whom we engage to help us run our business or deliver our services to you.

We may also share any data you place on our platform with other users of our platform.

We may also share your data with other organisations or individuals when it is reasonably necessary to:

• Meet any applicable law, regulation, legal process or request of a suitable governmental body or public authority e.g. under a relevant court production order
• Enforce applicable legal terms and conditions or our other legal rights, including investigation of potential violations
• Protect against or prevent harm to the rights, property or safety of Story Clinics as required or permitted by law.

When we share personal data with third parties, we will ensure that we only share the minimum necessary, that appropriate safeguards are in place and that such recipients are bound by appropriate confidentiality obligations.

Your activity on Our Service in accordance with their Privacy Policies:

• Cliniko (Clinic management software)
• Design MC (Website platform host)
• Adyen (Payment processing)
• Stripe (Payment processing)

Where Is Your Data Stored And Processed?

We will process and store your data on the Website/Application servers, email and other servers and equipment that are needed to provide the services and platform as applicable.

We do not ordinarily transfer your data outside of the country or region from which You access our services. That is either the UK or European Economic Area. However, we may transfer your data outside of your country or region as follows:

Analytics Providers

Our service providers, such as Google Analytics (Google Inc. and its affiliates), may process your data in the course of providing analytical information to us about the use of the Website. These service providers may collect and/or transfer your data outside of the UK or European Economic Area. For more information on how Google Analytics processes your data, You can visit here: https://support.google.com/analytics/answer/6004245?hl=en-GB

Service Providers

Sometimes our service providers are based outside of the EEA or UK. Whenever we transfer data out of the EEA or UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer data to countries that have been deemed to provide an adequate level of protection for data; or
• Where we use certain service providers, we may use specific contracts approved by the UK Information Commissioner which give personal data the same protection it has in the UK.

What Direct Marketing Do We Conduct?

If You provide your contact details, we might contact You individually in the future if we think that our services may be of interest to you. If we think it appropriate, we might also add You to our regular email marketing list.

You can ask us to remove your personal details from our marketing lists using the contact details listed at the top of this Privacy Policy.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of Your data and other personal information.

Your Legal Rights

Under certain circumstances, You have rights under data protection laws in relation to your personal data.

• Request access to your personal data (commonly known as a “data subject access request”).
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data in certain circumstances.
• Object to processing of your personal data where we are relying on a legitimate interest.
• Request restriction of processing of your personal data in certain circumstances.
• Request the transfer of your personal data to You or a third party in a machine-readable format.
• Withdraw consent at any time where we are relying on consent to process your personal data.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns in the first instance.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us. We have put in place appropriate security measures to prevent data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to data to those of our staff and other third parties who have a business need to know. They will only process data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data breach and will notify You and any applicable regulator of any breach where we are legally required to do so.

Children’s Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 18 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent’s consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third-party’s site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If You have any questions about this Privacy Policy, You can contact us:

• By email: privacy@storyclinics.com
• By mail: Story Clinics of 5th Floor Jasper House, 4-6 Copthall Avenue, London, EC2R 7DA.

Purpose / Activity	Type of Data	Lawful Basis for Processing (including basis of legitimate interest)
To register You as a new client	Identity Contact	Performance of a contract with You Necessary for our legitimate interest (for running our business and providing You with services)
To perform the contract and provide You with services: – Manage payments, fees and charges – Collect and recover money owed to us	Identity Contact Financial Transaction Technical Marketing and Communications	Performance of a contract with You Necessary for our legitimate interests (to recover debts due to us)
To operate our platform and provide our platform services	Identity Profile Health Information	Performance of a contract with You Necessary for our legitimate interest (for running our business and providing You with services) Where You have given your explicit consent Necessary for our legitimate interest (for identifying trends and patterns in the data)
To manage our relationship with You which will include: – Notifying You about changes to our terms or privacy policy – Asking You to provide feedback on our services	Identity Contact Profile Marketing and Communications	Performance of a contract with You Necessary to comply with a legal obligation Necessary for our legitimate interests (to keep our records updated and to study how customers use our Services and Applications)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	Identity Contact Technical	Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to You and measure or understand the effectiveness of the advertising we serve to You	Identity Contact Profile Usage Marketing and Communications Technical	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) Consent obtained for use of relevant cookies
To use data analytics to improve the Website, services, platform, marketing, customer relationships and experiences	Technical Usage	Necessary for our legitimate interests (to define types of customers for our products and services, to keep the Website and platform updated and relevant, to develop our business and application and to inform our marketing strategy)