Privacy policy

1. OVERVIEW

  • 1.1 This Privacy Policy describes how Story Reflection (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, purchase, register, apply, or enrol from storyreflection.com (the "Our Website", “Website”) or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy. Please read this Privacy Policy carefully. By using and accessing any of the services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. For the purposes of applicable data protection law (in particular, the General Data Protection Regulation (EU) 2016/679 (the “GDPR”), the UK Data Protection Act 2018, Australia Privacy Act 1988, and/or any other Data Protection and Privacy Act based on respective countries or jurisdictions, your data will be controlled by us. If you do not agree to this Privacy Policy, please do not use or access any of the services.
  • 1.2 You can review the most current version of the Privacy Policy at any time at this page. We reserve the right, at our sole discretion, to update, change or replace any part of these Privacy Policy by posting updates and changes to our website at any time without any prior written notice, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. You agree that all modifications to this Privacy Policy are in full force and effect immediately upon posting on the website and that any modifications or variations will replace any prior version of this Privacy Policy unless prior versions are specifically referred to or incorporated into the latest modification or variation of this Privacy Policy. It is your responsibility to check this page periodically for changes. Your continued use of or access to our website or the service following the posting of any changes to these Privacy Policy constitutes acceptance of those changes and represent an agreement by you to be bound by the Privacy Policy as amended.
  • 1.3 This Privacy Policy applies whenever we collect your personal information and/or personal data. This includes when you, the visitor of this website and the user of the service (whether directly as our customer or as the representative of our customer or entity), and us, the owner and provider of this website and service contained within, and also where we are directed by a third party to process your personal data. This privacy policy applies to our use of any and all data collected by us or provided by you in relation to your use of the website and the provision of our services to you. We take our privacy obligations seriously. Please read this Privacy Policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal information or data in connection with your use of our website or service. It also explains your rights in relation to your personal data and how to contact us or a relevant regulator in the event you have a complaint.
  • 1.4 We reserve the right, but have no obligation to review, monitor, record, change, update, remove, and/or disclose any personal information or data, including children’s data and/or any sensitive personal information from our website and/or service at any time without any prior written notice based on our sole and absolute discretion.
  • 1.5 We endeavour to ensure that information we collect is complete, accurate, accessible, and not subject to unauthorised access. However, sometimes the information may not be accurate, and some matters are out of our control.
  • 1.6 We cannot guarantee that the information we collect is complete, accurate, accessible, and not subject to unauthorised access. We shall have no liability or responsibility of any loss, damage, or disruptions incurred to you or any third-party as a result of any errors, defects, inaccuracies, omissions, or security of the personal information or data we collect whether such errors result from negligence, accident, or any other reasons, except to the extent that it is not excluded by the law.


2. HOW WE COLLECT YOUR PERSONAL INFORMATION

  • 2.1 To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out in clause 3, 4, and 5. The information that we collect, and use varies depending on how you interact with our website, services and/or other related platforms.


3. INFORMATION WE COLLECT FROM YOU

  • 3.1 The types of personal information we obtain about you depends on how you interact with our website and use our services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.
  • 3.2 Types of personal information we collect from you through our website, service, and/or other related platforms may include:
  • (a) Basic contact details, including your name, address, mobile number, and/or email address.
  • (b) Other personal information, including your age, date of birth, information about your education and employment experience, qualifications, and history.
  • (c) Order information, including your name, billing address, postal or shipping address, payment confirmation, email address, mobile number, and/or credit card or other payment information.
  • (d) Account information, including your username, password, and/or security questions.
  • (e) Shopping information including the items you view, put in your cart, or add to your wish list.
  • (f) Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.
  • (g) Business, Company, or Entity Information, including your business or company name, your business and/or company identification number, business billing and/or postal address, business email address, and/or business phone or mobile number.
  • (h) Other related information, including your social media information, information about your business or personal circumstances, information in connection with any client surveys, questionnaires and promotions you participate in, information about any third-parties, and any other information provided by you to us via this website, in the course of us providing services to you, or otherwise required by us or provided by you.
  • 3.3 We may collect your personal information and data when you submit an application to any of our services (including our course and/or program), communicate with us via any digital platforms or website, when you engage us to perform services to you, when you or your organisation offer to provide, or provide services to us, when you interact with our website, social media channel, services, content, and/or advertisement, when you invest or sponsor our business or enquire about our business and/or any other occasions when we need to collect your personal information or data as required by law.
  • 3.4 Some features of the services or website may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.


4. INFORMATION WE COLLECT THROUGH COOKIES

  • 4.1 We may automatically collect certain information about your interaction with the services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, device identity and type, browser information, information about your network connection, your IP address, geo-location information, page view statistics, advertising data and standard web log information and other information regarding your interaction with the services.


5. INFORMATION WE OBTAIN FROM THIRD PARTIES

  • 5.1 We may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:
  • (a) Companies who support our website and services, such as Shopify.
  • (b) Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfil your orders and provide you with products or services you have requested, in order to perform our contract with you.
  • (c) When you visit our website, open, or click on emails we send you, or interact with our services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.
  • 5.2 Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We shall have no liability or responsibility for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third Party Websites and Links.



6. HOW WE USE YOUR PERSONAL INFORMATION

  • 6.1 We may use the personal information or data we collect about you to communicate with you, provide the services, comply with any applicable legal obligations, enforce any applicable terms and conditions, or Terms of Service, and to protect or defend our services, website, rights, and the rights of our users and any related third-party.
  • (a) Consider your eligibility of any of our services. We use your personal information to consider your eligibility of any of our services, including, but not limited to course application, program application, and/or any other services where we require to consider your eligibility.
  • (b) Providing Products and Services. We use your personal information to provide you with the services in order to perform our contract with you, including to process your payments, fulfil your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges, to enable you to submit user contributions, and/or any other purpose related to the product and/or services.
  • (c) Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services. This may include using your personal information to better tailor the services and advertising on our website and other related platforms. If you are not interested with any marketing or promotional communications, you may unsubscribe at any time.
  • (d) Communicating with you. We use your personal information to provide you with customer support, send you administrative messages, reminders, notices, updates, and/or other information requested by you; and improve our services and/or customer experience. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.
  • (e) Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity as long as it is within our control to the maximum extent that is not excluded by the law.
  • (f) For any other purpose, including but not limited to record keeping and administrative purposes; comply with our legal obligations, resolve disputes or enforce our agreements with third parties; to develop and carry out marketing activities and to conduct market research and analysis and develop statistics; to consider your application and/or proposal for business collaboration; and/or to consider an application of employment from you.


7. HOW WE DISCLOSE PERSONAL INFORMATION

  • 7.1 We may disclose your personal information to third-parties in certain circumstances for legitimate purposes, such as:
  • (a) In connection with a business transaction, or if there is a change in control in our business or a sale or transfer of business assets, such as a merger and acquisition, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), we reserve the right to transfer to the extent permissible by law of our user databases, including any personal data and non-personal data contained in our databases. This information may be disclosed to a potential purchaser under an agreement to maintain confidentiality. We would seek to only disclose information in good faith where it is required in these circumstances, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
  • (b) With vendors or other third parties who perform services on our behalf to enable us to provide our services to you, such as IT management, payment processing, data analytics, customer support, data analytics service providers, or cloud storage.
  • (c) When you direct, request us, or otherwise consent to our disclosure of certain information to third parties, such as through your use of social media widgets or login integrations, with your consent.
  • (d) With business and marketing partners, including Shopify, to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
  • (e) With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
  • (f) When the disclosures are required by other parties, such as credit-checking agencies for credit control reasons, disclosures required by law or regulation, and other professional advisers, such as accountants, auditors, disaster recovery service providers and/or overseas advisors.
  • 7.2 We will disclose identifiers, such as basic contact details, order, or account information; commercial information, such as order information, shopping information, customer support information; and/or internet or similar network activity, such as usage data. We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.
  • 7.3 When you post or submit user generated contents to any public areas of the services or website, or for the purpose of publishing the content in our service, website or social media platforms, this content will be public and accessible by anyone. We do not control who will have access to the information that you choose to make available and cannot ensure that the parties who have access to such information will respect your privacy or keep it secure. We shall have no liability or responsibility for the privacy or security of any information that you make publicly available, or for the accuracy, use, or misuse of any information that you disclose or receive from third-parties.


8. THIRD PARTY WEBSITES AND LINKS

  • 8.1 Our service or website may contain links to other websites or online platforms operated by third-parties. We shall have no liability or responsibility for the privacy practices, security, accuracy, completeness, or reliability of those linked websites or other online platforms that is not affiliated or controlled by us, and we recommend you reviewing their privacy policies and other terms and conditions before using them or accessing the links. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the services or website.
  • 8.2 The information you provide, post, or submitted on public or semi-public venues, including information you share on third-party social media platforms may also be viewable by other users of the services and/or users of those third-party platforms without limitation as to its use by us or by a third party.


9. CHILDREN’S DATA

  • 9.1 The services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details or form on our website to request that it be deleted.
  • 9.2 We shall have no liability or responsibility of any loss incurred due to the submission of the children’s data by you or any third-party, and/or any collection of children data whether it is on purpose, accidental, and/or incidental.
  • 9.3 As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

 

10. COOKIES AND COOKIE POLICY

  • 10.1 Cookie is a small amount of information downloaded to or from your device when you visit certain website, which includes strictly necessary, performance, advertising, social media, or content cookies. Cookies enable the website to remember your actions and preferences to provide a better user experience (for example, region selection) and provide information on how people use the website (for example, whether you are a frequent visitor). 
  • 10.2 We use cookies on our site to power and improve our website and our services (including to remember your actions and preferences), to run analytics and better understand user interaction with the services (in our legitimate interests to administer, improve and optimise the services), including to estimate the number of unique visitors, to detect the most searched words in search engines that lead to our website. Reporting and analytics cookies are performance cookies, which includes the first-party analytics cookies and third-party analytics cookies we use to gather information for statistical purposes that do not directly identify you. 
  • 10.3 We may also permit third parties and service providers, such as Shopify Analytics, Google Analytics, and/or other third-party analytics providers to use cookies on our website to better tailor the services, measure how users interact with our website content, remember what users have done on previous pages, how they interacted with our website, products and advertising on our website and other websites. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. For more information on Google Analytics please check Google’s information page. 
  • 10.4 Some cookies are strictly necessary to allow you to browse our website and use its features, and some cookies are functional to tailor your website experience specifically to your preferences and remember choices you have made or information you have provided. For example, authentication cookies are functional cookies that are used for the duration of a session (or persistent, if you agree to the “remember me” function) to allow users to authenticate themselves on subsequent visits or to gain access to authorised content across pages. Functional cookies we use include the user-centric security cookies to detect authentication abuses for a limited persistent duration, multimedia content player session cookies or flash cookies to store technical data necessary to play back video or audio content, load balancing session cookies to identify the same server in the pool in order for the load balancer to redirect user requests appropriately, and user interface customisation persistent cookies to store user’s preference across web pages.
  • 10.5 Advertising cookies on our website is used to tailor marketing based on your preference and provide you with a more personalised service by tracking device visits on our website and other websites. However, they typically cannot personally identify you. Without these cookies the advertisement may be less relevant to you. If you would like to find our more how companies use cookies to conduct targeted or retargeted advertising, you may read the information here.
  • 10.6 Social and content cookies are placed by many social media plugins (for example the Instagram ‘heart’ button) and other tools meant to improve or provide the content on a website (for example, services that allow the playing of video or audio files, or that create comments sections). We integrate these modules into our platform to improve the user experience and interaction with our website. Please note that some of these third-party services place cookies that also used for things like behavioural advertising, analytics, and/or market research. 
  • 10.7 The majority of browsers will automatically accept cookies by default, and you may choose to update or change the setting of your browsers to remove or reject cookies through your browser controls, often found in your browser’s “tools” or “preferences” menu. However, removing and blocking cookies may negatively impact your user experiences, cause some of the services, websites, certain features or general functionality to work incorrectly or no longer available, and may not completely prevent how we share information with third-parties, such as our advertising partners. For more information about how to modify your browser controls or settings, or how to block, manage, or filter cookies, please refer to the browser’s help files or through this link www.allaboutcookies.org. Many of third-party advertising and other tracking services offer you the opportunity to opt out of their tracking systems, and you may read more about the information they collect and how to opt out through the respective third-party’s privacy policy. 
  • 10.8 Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted, and the duration that a cookie remains on your device depends on whether it is a “persistent” or “session” cookie. Most of the cookies we use are persistent and will expire between 30 (thirty) minutes and 2 (two) years from the date they are downloaded to your device. 

 

11. SECURITY AND RETENTION OF YOUR INFORMATION

  • 11.1 We take reasonable steps to ensure your personal information or data is secure and protected from misuse or unauthorised access. Our information technology systems are password protected, and we use a range of administrative and technical measures to protect these systems. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security” and/or the security of your personal information or date. In addition, any information you send to us may not be secure while in transit. We shall have no liability or responsibility for the breach due to attack, force majeure, and/or any other reasons outside of our control.
  • 11.2 We will retain your personal data for as long as necessary to fulfil the purposes we collected it for, for example, when we need the information to maintain your account, to provide the services, comply with any legal, accounting and reporting obligations, resolve disputes, or enforce other applicable contracts and policies. We will securely remove, delete, or destroy your personal data in accordance with applicable laws and regulations when it is no longer necessary to fulfil the purposes that we collected it for.

 

12. YOUR RIGHTS AND CHOICES

  • 12.1 Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
  • (a) Access and Be Informed: You have the right to request access to your personal information that we collected and processed about you and certain other information, including the details relating to the ways in which we use and share your personal information, and your rights to your personal information, so you may aware and assured that we are using your information in accordance with the data protection law.
  • (b) Correct or Rectification: You have the right to request that we correct inaccurate personal information we maintained about you to keep your personal data accurate, current, and complete. We encourage you to contact us if any of your personal information changed or not accurate.
  • (c) Portability: You have the right to request that some of your personal data we collected and processed about you is provided to you, another data controller, or other third-party, in a commonly used machine-readable format in certain circumstances and with certain exceptions.
  • (d) Objection or Restriction of Processing: You have the right to request us to stop, restrict, or object processing your personal information in certain circumstances, including processing for direct marketing.
  • (e) Restriction of Further Use of Personal Information: You have the right to request us to restrict, block, or suppress further use of your personal information. When you request us to restrict further use of your personal information, we can still store your personal information, but we may not use it further.
  • (f) Restriction to Limit the Use or Disclosure of Sensitive Personal Information: You have the right to request us to limit the use or disclosure of sensitive personal information about you to only what is necessary as applicable by law to perform the services reasonably expected by an average individual.
  • (g) Delete or Erasure: You have the right to request that we delete or erase your personal information we collected or processed about you when the personal data is no longer necessary for the purpose for which it was collected, or when, among other things, your personal data have been unlawfully processed.
  • (h) Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to contact us to withdraw this consent.
  • (i) Appeal: If we decline to process your request about your personal information, you have the right to appeal our decision by replying directly to our email which notify you about the decline of your request.
  • (j) Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
  • 12.2 You may exercise any of these rights as indicated on our website by contacting us through our contact form. We will not discriminate against you for exercising any of these rights and we will review your requests according to applicable laws. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.


13. YOUR RESPONSIBILITIES

  • 13.1 Prior to disclosing any personal information, you shall ensure that it has a lawful basis to do so for processing personal information, including obtaining any necessary consents in order to enable the lawful processing of personal information, and for ensuring that a record of such consents is maintained. For corporate or business clients, you, as a business representative shall ensure that all the related parties consent to the collection, submission, and/or processing of their personal information, and if any of the related parties withdraw or revoke their consent, you, as a business representative shall ensure that you communicated this to us promptly. We shall have no liability or responsibility for any costs, claims, or expenses arising from any disruption or delay to any service performed as a result of the error, inaccuracy, incomplete personal information, or withdrawal of consent of personal information by any parties.
  • 13.2 You, and any related parties you represent shall be responsible to comply with applicable data protection laws in relation to any personal information and assist us to comply with our responsibilities under applicable data protection laws.
  • 13.3 You, and any related parties you represent shall be responsible to ensure that any information you provide to us will always be current, correct, complete, and accurate, including purchase, billing, and account information for all transactions made at our website or service. You, and any related parties you represent shall be responsible to promptly update your account and other information, including your email address and credit card numbers and expiration dates.
  • 13.4 You, and any related parties you represent acknowledge and agree not to provide false, unlawful, or inaccurate information or using the service or the website. We shall have no liability or responsibility of any loss incurred to you or any third-party due to your decision to provide false, unlawful, or inaccurate information, materials, and/or documents.
  • 13.5 You, and any related parties you represent shall be responsible for keeping your account credentials and personal information secure, and not use unsecured channels to communicate sensitive or confidential information. You, and any related parties you represent shall be responsible for all activities related to your account and personal information. If you believe your account has been compromised, you, and any related parties you represent shall be responsible to notify us immediately in writing.


14. INTERNATIONAL USERS

  • 14.1 We may transfer, store, and/or process your personal information outside of your country of residence or jurisdictions. Your personal information is also processed by staff and/or any third-party service providers and partners in the respective countries and may be outside of your country of residence or jurisdictions.
  • 14.2 If we transfer your personal information outside of the UK or Europe, which do not provide the same level of data protection as the country in which you reside and are not recognised by the European Commission as providing an adequate level of data protection, we will ensure that is protected to the same extent as in the UK or Europe as we will put in place appropriate safeguards to protect your personal data, which may include standard contractual clauses, or we will rely on recognised transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.



15. COMPLAINS AND HOW TO CONTACT US

  • 15.1 If you have complaints about how we process your personal information, please contact us using the contact details or form provided on our website. If you are not satisfied with our response to your complaint, depending on where you live you have the right to appeal our decision by contacting us using the contact details or form on our website, or lodge your complaint with your local data protection authority.