Privacy policy

Last updated: 2026-04-12

Story Seeds Somerset CIC ("we", "us", "our") takes your privacy seriously. This policy explains what data we collect, what we do with it, and what rights you have over it. Questions at any time: [email protected].

Who we are

Story Seeds Somerset CIC, Companies House No. 15451729, registered in England and Wales. Registered office address is on our Companies House listing.

What we collect

We only collect data you send us directly. That means the information you put into our contact form or our school registration form. Typically a name, an email address, optionally a phone number, and whatever you choose to write in the message field. Schools also share their school name, pupil numbers, year groups, and the role of the person registering.

We do not use analytics, tracking pixels, advertising cookies, or fingerprinting. We do not buy or enrich data about visitors. The only cookies we set are essential ones used by our content management system to keep editors logged in when they sign in to /studio. Visitors who never log in to the studio do not get cookies from us.

Why we collect it

We use what you send us to respond to you. If you register your school, we use the information to decide whether and how we can support you, and to get in touch. If you email us as a company or an individual, we use your message to reply.

Our legal basis under UK GDPR is a mixture of legitimate interest (responding to enquiries is core to running the charity) and, where the enquiry is part of considering a support arrangement with your school or business, the steps taken before entering into a relationship.

Where your data goes

Form submissions are sent to us by email via Resend, a transactional email provider. Resend delivers the message and stores it for a short processing window before purging. We do not paste your submission into any other system. Once the email reaches our inbox, it sits there with our other correspondence.

Content on this website is managed in Sanity, a content platform. Sanity hosts our text and images. Sanity does not receive any information about visitors. For reference, Sanity's privacy statement covers their role as a data processor for us.

Resend acts as a data processor for delivering form submission emails to us. Resend's privacy policy describes their handling in detail.

The site is hosted on our own infrastructure. Access logs are kept briefly for operational and security purposes and are not used for analytics or profiling.

How long we keep it

Contact form enquiries and school registrations live in our email inbox. We keep them as long as the conversation is active, and for a reasonable period afterwards in case you get back in touch or to maintain a record of who we supported and when.

As a rule of thumb, school registration records are kept for up to seven years (to preserve a history of the schools we have supported); general enquiries that do not lead to any engagement are deleted when we tidy up the inbox, usually within twelve months.

Who we share it with

Nobody, except the processors listed above (Resend and Sanity) who act on our instructions. We do not sell, trade, or pass your information to marketing lists or third parties. If a school registers, the fact that the school has registered may appear in an aggregate published statistic (e.g. "20 Somerset primaries supported"), but the individual names and contact details of people who registered are never published.

We may publish a blog post describing a donation to a specific school, including the school name and sometimes a quote provided by the school. We only do this when we have the school's permission.

Children

Story Seeds does not ask children to submit information through this website. Our forms are designed for teachers, parents, and businesses. If a child has sent us data by mistake, email [email protected] and we will delete it.

Your rights

Under UK GDPR you have the right to see what we hold about you, correct it if it is wrong, ask us to delete it, ask us to stop using it, or receive a copy of it in a portable format. Email [email protected] and we will respond within one month.

If you are not satisfied with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Transmission of data to this website is over HTTPS. Email delivery from our forms is over TLS. Our content management system requires authentication to edit anything. No system is perfect, but we apply reasonable technical and organisational measures to protect the limited data we hold.

Changes to this policy

We will update this page if we change the way we handle data. The last-updated date at the top of the page reflects when the current version was published. Material changes will be announced on this page before they take effect.

Contact

Questions, corrections, or requests: [email protected].