Privacy Policy
Five Valleys Storytellers
Last updated: 16 October 2026
1. Introduction
Five Valleys Storytellers is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us or participate in our events and activities.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Website: https://fivevalleysstorytellers.co.uk/
2. Who We Are
Five Valleys Storytellers is a storytelling initiative operated by Sarah Deco, based in Gloucestershire, England.
For the purposes of applicable data protection legislation, Sarah Deco is the data controller responsible for personal information collected and processed through Five Valleys Storytellers, where she determines the purposes and means of that processing.
References to “we”, “us” and “our” in this Privacy Policy mean Sarah Deco, operating as Five Valleys Storytellers.
Data Controller: Sarah Deco
Organisation: Five Valleys Storytellers
Location: Gloucestershire, England
Website: https://fivevalleysstorytellers.co.uk/
Privacy contact: info@fivevalleysstorytellers.co.uk
3. Information We Collect
We may collect and process the following types of personal information, depending on how you interact with us.
3.1 Information You Provide
When you contact us, make an enquiry, book an event or participate in our activities, we may collect:
Your name.
Your email address.
Your telephone number, where provided.
Information included in messages or enquiries.
Event booking and attendance information.
Accessibility requirements or other information you choose to share with us.
Your communication preferences.
We only collect information that is reasonably necessary for the relevant purpose.
3.2 Website Usage Information
When you visit our website, certain technical information may be collected automatically, including:
Your IP address.
Browser type and version.
Device type and operating system.
Pages visited and interactions with the website.
Referring website addresses.
Dates and times of visits.
Cookie information, where applicable.
This information may be collected through website hosting systems, security tools, cookies or analytics services.
3.3 Event Booking Information
Where event bookings or ticket purchases are available, we may collect information necessary to manage those bookings, including:
Booking names and contact details.
Event dates and ticket quantities.
Booking confirmations.
Payment status and transaction references.
Information required to administer attendance.
Where payments are handled by an external payment provider, payment card information will normally be processed directly by that provider rather than stored by us.
4. How We Use Your Information
We may use personal information to:
Respond to enquiries and messages.
Provide information about our storytelling activities.
Manage event registrations, bookings and attendance.
Communicate important changes to events.
Process payments and maintain appropriate financial records.
Send newsletters or promotional communications where permitted.
Improve the functionality and performance of our website.
Maintain website security and prevent misuse.
Comply with applicable legal and regulatory obligations.
We do not sell your personal information to third parties.
5. Legal Bases for Processing
Under UK GDPR, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on the following legal bases.
Consent: Where you have given clear permission for a particular purpose, such as receiving certain marketing communications or using non-essential cookies.
Contract: Where processing is necessary to fulfil a booking or agreement with you, or to take steps at your request before entering into a contract.
Legal Obligation: Where we must process or retain information to comply with applicable law, including certain financial and tax recordkeeping requirements.
Legitimate Interests: Where processing is necessary for our legitimate interests, such as responding to enquiries, maintaining website security or administering our activities, provided those interests are not overridden by your rights and freedoms.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
We will only rely on a lawful basis where it is appropriate for the particular processing activity.
6. Marketing Communications
We may occasionally share news about storytelling events, workshops and related activities.
Where required by law, we will obtain your consent before sending electronic marketing communications.
If you subscribe to a newsletter or mailing list, you can unsubscribe at any time using the unsubscribe link provided or by contacting us directly.
We will not add you to a marketing mailing list simply because you have made an enquiry or attended an event, unless another lawful basis and applicable marketing rules permit it.
7. Cookies and Website Analytics
Our website may use cookies and similar technologies to support its functionality, improve security and understand how visitors use the website.
Cookies are small text files stored on your device when you visit a website.
Cookies may include:
Strictly necessary cookies: Required for essential website functionality or security.
Analytics cookies: Used to understand website traffic and visitor interactions.
Functional cookies: Used to remember preferences or support additional features.
Third-party cookies: Which may be set by embedded content or external services.
Where required under the Privacy and Electronic Communications Regulations 2003 (PECR), we will obtain your consent before storing or accessing non-essential cookies or similar technologies.
You can manage cookies through your browser settings and, where available, our website’s cookie preference controls.
Further information about the specific cookies used should be provided through our cookie information or cookie management system.
8. Sharing Your Information
We may share personal information with trusted third-party service providers where reasonably necessary to operate our website and activities.
These may include:
Website hosting and maintenance providers.
Email and communication services.
Event booking and ticketing platforms.
Payment processing providers.
Website security and analytics providers.
Professional advisers, where necessary.
Public authorities, where disclosure is legally required.
We only share information where there is an appropriate lawful basis and, where required, suitable contractual and security safeguards.
We do not sell or rent personal information to third parties for their independent marketing purposes.
9. International Data Transfers
Some third-party service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that appropriate safeguards are in place as required by UK data protection legislation.
These may include UK adequacy regulations or approved contractual safeguards, where applicable.
10. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including any applicable legal, accounting or reporting requirements.
Retention periods may vary depending on the type of information.
For example:
General enquiries: Retained for as long as reasonably necessary to respond and manage any related correspondence.
Event booking records: Retained as necessary for event administration, accounting and any relevant legal obligations.
Financial records: Retained for applicable statutory accounting and tax periods.
Mailing list information: Retained until you unsubscribe or we no longer have a valid reason to retain it.
Website security logs: Retained for an appropriate period necessary for security and troubleshooting.
When information is no longer required, we will securely delete or anonymise it.
11. Keeping Your Information Secure
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.
These measures may include:
Secure website hosting.
HTTPS encryption.
Access controls and password protection.
Regular website maintenance and security updates.
Appropriate restrictions on access to personal information.
Secure third-party service providers.
Although we take reasonable precautions, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
12. Your Data Protection Rights
Under UK GDPR, you may have the following rights in relation to your personal information:
Right of Access: To request a copy of the personal information we hold about you.
Right to Rectification: To request correction of inaccurate or incomplete information.
Right to Erasure: To request deletion of your personal information in certain circumstances.
Right to Restrict Processing: To request that we limit how your information is processed in certain circumstances.
Right to Data Portability: To receive certain personal information in a structured, commonly used and machine-readable format, where applicable.
Right to Object: To object to certain types of processing, including direct marketing.
Rights Relating to Automated Decision-Making: To receive applicable protections concerning certain decisions made solely through automated processing.
Right to Withdraw Consent: Where processing relies on your consent, you can withdraw it at any time.
These rights are subject to applicable legal conditions and exemptions.
To exercise your rights, please contact us using the details provided in this Privacy Policy.
We will respond to valid requests within the time limits required by applicable law, normally within one month.
13. Children’s Privacy
Some of our storytelling activities may involve children and families.
We take the privacy of children and young people seriously.
Where we collect personal information relating to children, we will ensure that an appropriate lawful basis applies and provide suitable privacy information.
Where parental or guardian consent is legally required, we will seek it.
We will not knowingly use children’s personal information for unrelated marketing purposes without an appropriate lawful basis.
14. Photography and Video at Events
Photographs, audio recordings or video recordings may occasionally be taken during storytelling events for documentation or promotional purposes.
Where we organise such recording, we will provide appropriate information about how recordings may be used.
We will identify a suitable lawful basis for processing identifiable images or recordings and obtain consent where required.
Additional safeguards will be considered where recordings involve children or individuals who may require greater privacy protection.
If you have concerns about photography or recording at an event, please contact us.
15. Links to External Websites
Our website may contain links to external websites operated by third parties.
We are not responsible for the privacy practices or content of those websites.
We encourage visitors to read the privacy policies of external websites before providing personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our activities, website functionality, data processing practices or applicable legislation.
Any changes will be published on this page with an updated revision date.
Where significant changes affect how personal information is processed, we will take appropriate steps to inform affected individuals where required.
17. Complaints
If you have concerns about how we handle your personal information, please contact us in the first instance so that we can investigate and respond.
You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information Commissioner’s Office
Website: https://ico.org.uk/
Telephone: 0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO, although you are not required to contact us first.
18. Contact Us
If you have any questions about this Privacy Policy, how we handle personal information or wish to exercise your data protection rights, please contact:
Five Valleys Storytellers
Operated by Sarah Deco
Gloucestershire, England
Website: https://fivevalleysstorytellers.co.uk/
Email: info@fivevalleysstorytellers.co.uk