Privacy Policy

1. Who We Are

The Business of Storytelling ("we," "us," or "our") is operated by Master Storytelling. We provide storytelling masterclasses, workshops, and educational resources designed to help leaders communicate more effectively.

If you have any questions about this policy, you can reach us at: hello@businessofstorytelling.com

2. What Information We Collect

We collect personal information in the following situations:

• Workshop registrations — when you reserve a spot at a masterclass, we collect your full name, email address, phone number, and city.
• Newsletter sign-ups — when you subscribe to updates, we collect your email address.
• Cookies and usage data — if you consent, we collect anonymised data about how you interact with our website via analytics cookies (see Section 5).

We do not collect payment card details directly. Any payment processing is handled by third-party providers subject to their own privacy policies.

3. How We Use Your Information

We use the information we collect to:

• Confirm and manage your workshop reservation
• Send you event details and updates relevant to your booking
• Deliver newsletters and storytelling resources you have opted into
• Respond to enquiries you send us
• Improve our website and content using anonymised analytics data

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Legal Basis for Processing (GDPR)

Where the EU or UK General Data Protection Regulation applies, we rely on the following lawful bases:

• Contract — processing your reservation details to fulfil your workshop booking.
• Consent — sending marketing emails and placing analytics cookies. You may withdraw consent at any time.
• Legitimate interests — improving our services and detecting fraud, where these interests are not overridden by your rights.

5. Cookies

We use two categories of cookies:

• Strictly Necessary Cookies — these are essential for the website to operate and cannot be turned off. They include cookies that remember your privacy preferences.
• Analytics Cookies — with your consent, we use Google Tag Manager to collect anonymised data about how visitors navigate the site. This helps us understand which content is most useful and improve the overall experience.

You can update your cookie preferences at any time using the Cookie Settings link in the footer of this website.

6. Third-Party Services

We use the following third-party services to operate this website:

• Resend — transactional email delivery. Your email address is stored securely in Resend's systems to send booking confirmations and newsletters. Resend is GDPR-compliant and processes data on servers in the EU/US under Standard Contractual Clauses. Resend Privacy Policy
• Google Tag Manager / Google Analytics — analytics (only loaded with your explicit consent). Google may transfer data outside the EEA under Standard Contractual Clauses. Google Privacy Policy

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purpose for which it was collected:

• Workshop registration data — 3 years from the date of the event.
• Newsletter subscribers — until you unsubscribe.
• Cookie consent records — 1 year from the date of consent.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request that we delete your data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, email us at hello@businessofstorytelling.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. All data is transmitted over encrypted HTTPS connections. Access to personal data is restricted to personnel who need it to carry out their responsibilities.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your data rights, please contact us at: