Corporate Privacy Policy & Data Processing Notice

1. Data Controller Information

This Privacy Policy governs the processing of personal information collected by Reelpock Storyporch Business Solutions Ltd (Company Number: 14892019), having its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("we", "us", or "our"). We act as the Data Controller under the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and applicable statutory privacy frameworks including the California Consumer Privacy Act as amended by the CPRA.

2. Scope & Categories of Data Collected

We collect personal information necessary to deliver technical evaluations, handle corporate inquiries, and ensure web service availability. The categories of data we process comprise:

• Directly Provided Identity Data: Full name, professional email address, corporate telephone number, job title, and organization name submitted via contact and consultation inquiry forms.
• Technical and Network Telemetry: Anonymized or pseudonymous IP addresses, browser user-agent tokens, operating system identifiers, referral URLs, and timestamped page request logs collected automatically during server transactions.
• Consent and Preference Records: Client-side records of cookie choices submitted via our consent banner stored within your local web storage.

3. Legal Grounds for Processing

We process your personal information strictly under established lawful bases defined in Article 6 of the GDPR:

• Legitimate Interests: To maintain network resilience, troubleshoot server runtime bugs, and prevent denial-of-service disruptions.
• Contractual Necessity: To respond to enterprise advisory inquiries, architectural audit requests, and commercial procurement communications initiated by you.
• Legal Obligation: To maintain financial accounting, corporate taxation records, and regulatory compliance filings under UK company law.
• Consent: For non-essential analytics and tracking technologies where explicit prior opt-in is provided.

4. Third-Party Processors and Subprocessors

We engage vetted commercial infrastructure vendors to operate our static distribution platform and corporate email infrastructure. These vendors process data exclusively under strict Data Processing Agreements (DPAs) incorporating standard contractual clauses (SCCs) to guarantee data security:

• Cloud hosting providers and distributed Edge content delivery networks (CDNs).
• Enterprise transactional email transmission gateways.
• Security filtering and web application firewalls (WAF) to detect malicious crawling.

We do not sell, rent, monetize, or trade visitor identities or consultation submissions to third-party data brokers, advertisers, or programmatic advertising exchanges.

5. Data Retention Periods

Personal data is retained only for the minimum duration required to fulfill the stated purposes:

• Contact Submissions: Retained for 24 months following the last recorded communication to facilitate ongoing enterprise dialogue.
• Technical Server Access Logs: Automatically purged or rotated every 30 to 90 days.
• Cookie Preference Settings: Stored locally on your browser for up to 365 days unless cleared manually.

6. Your Statutory Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you are entitled to exercise enforceable rights regarding your personal records:

• Right of Access: You may request a verified copy of all personal records we hold concerning your identity.
• Right to Rectification: You may request corrections to inaccurate or incomplete corporate contact data.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal records where no overriding legal obligation applies.
• Right to Restriction and Objection: You may object to data processing carried out under our legitimate interest grounds.
• Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.
• Non-Discrimination: We do not discriminate in service availability or pricing against consumers who exercise statutory rights.

7. Data Protection Officer (DPO) Contact

To exercise your privacy rights, lodge an inquiry, or submit a formal deletion notice, contact our Data Protection Officer directly:

UK residents possess the right to submit complaints to the Information Commissioner's Office (ICO) at ico.org.uk if dissatisfied with our response.