Privacy Policy

Last updated: 25 June 2026

Upperstory (“we”, “our” or “us”) is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights you have regarding your personal data.

1. Who We Are

Upperstory is an independent creative studio providing branding, strategy, web design and related creative services.

If you have any questions about this Privacy Policy or how we process your data, please contact us via the contact form on this website.

2. Information We Collect

When you submit an enquiry through our contact form, we may collect:

• Your name

• Your email address

• Your company name (if provided)

• Any information you choose to include within your message

We only collect information that you voluntarily provide.

3. How We Use Your Information

We use your information to:

• Respond to your enquiry

• Communicate about potential projects

• Provide information you have requested

• Keep records of our business communications

We do not sell or rent your personal information to third parties.

4. Legal Basis for Processing

Under UK GDPR, our lawful basis for processing your information is legitimate interests.

This allows us to respond to enquiries and communicate with prospective clients who have contacted us.

5. How Long We Keep Your Information

We retain enquiry information only for as long as reasonably necessary to respond to your enquiry, maintain business records, or comply with legal obligations.

If no project proceeds, we will periodically review and remove outdated enquiry information where appropriate.

6. Sharing Your Information

We only share your information where necessary to operate our business.

This may include trusted service providers who help us host our website or manage communications.

These providers are required to protect your information and only process it on our behalf.

We will never sell your personal information.

7. Website Security

We take reasonable technical and organisational measures to help protect the information you submit through this website.

However, no method of transmitting information over the internet is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under UK data protection law, you have the right to:

• Request access to the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your personal information where appropriate

• Object to certain types of processing

• Request restriction of processing in certain circumstances

• Lodge a complaint with the UK Information Commissioner’s Office (ICO)

9. Cookies

This website may use essential cookies required for the website to function correctly.

If we introduce analytics or other non-essential cookies in the future, this Privacy Policy will be updated and, where required, you will be asked for your consent.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page with an updated revision date.

Contact

If you have any questions about this Privacy Policy or your personal information, please contact us through the contact form on this website.