Privacy Policy.

Pre-Launch Notice

Please note that, at the time of this policy's publication, Our Story Haven is operating in a pre-launch phase.

Customers purchasing during this period are securing early access to the platform and supporting its development prior to launch.

The full Our Story Haven experience, including user accounts and story preservation features, is expected to become available from 1 July 2026.

This Privacy Policy may be updated as additional features become available.

1. Who we are (Data Controller)

OurStoryHaven is operated by WESTBRIDGE SYSTEMS LTD (Company number 16944743), registered at 65 London Wall, London, United Kingdom, EC2M 5TU ("we", "us", "our"). We are the data controller for personal data processed through the OurStoryHaven platform.

For any privacy-related question or to exercise your rights, contact us at privacy@ourstoryhaven.com.

2. What data we collect

During the pre-launch period, we collect limited personal data necessary to process purchases, communicate with customers, and provide updates regarding the launch of Our Story Haven.

This may include:

• Name
• Email address
• Billing information processed by our payment provider
• Communications sent through contact forms or customer support channels
• Basic technical information required for security and website functionality

We do not currently collect stories, voice recordings, photographs, family relationship information, or other content intended for use within the Our Story Haven platform.

Once the platform launches, this Privacy Policy will be updated to reflect the additional features and services available, including user accounts and story preservation tools.

3. How we use your data and our legal basis

We process personal data on the following legal grounds:

• Performance of a contract (Art. 6(1)(b) UK GDPR): to create your account, deliver the service, store your stories, process payments and provide customer support.
• Legitimate interests (Art. 6(1)(f)): to keep the platform secure, prevent fraud and abuse, monitor performance, and improve the product. We balance these interests against your rights.
• Consent (Art. 6(1)(a)): for optional marketing emails and non-essential cookies. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): to comply with tax, accounting and other legal requirements.

We do not sell your personal data, and we do not use the content of your stories for advertising or to train third-party AI models.

4. Who we share data with (sub-processors)

We use a small number of trusted service providers to operate the platform. Each is bound by a Data Processing Agreement and may only process your data on our instructions:

• Hosting & database: Supabase / Cloudflare (EU region).
• Email delivery: our transactional email provider.
• Payment processing: Stripe or equivalent PCI-compliant provider.
• Analytics: privacy-friendly analytics for aggregate usage.

We will share data with law enforcement or regulators only where legally required to do so.

5. International transfers

We aim to keep your data within the UK and EEA. Where a sub-processor transfers data outside these regions, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision.

6. How long we keep your data

During the pre-launch phase, we retain personal data only for as long as necessary to:

• fulfil purchases,
• communicate regarding the launch of the platform,
• provide customer support, and
• comply with legal, tax, and accounting obligations.

Where required by law, certain records (such as invoices and transaction information) may be retained for up to seven (7) years.

Once the platform launches, this Privacy Policy may be updated to reflect the retention periods applicable to user-generated content and active accounts.

7. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction.

No system can be guaranteed 100% secure. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify you and the Information Commissioner's Office (ICO) without undue delay and within 72 hours where required.

8. Your rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, email privacy@ourstoryhaven.com. We will respond within one month.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or your local EU data protection authority.

9. Cookies

At present, Our Story Haven uses only strictly necessary cookies required for the operation and security of the website.

Should we introduce analytics, advertising technologies, or other non-essential cookies in the future, this Privacy Policy will be updated and any required consent mechanisms will be implemented.

10. Children

Our Story Haven is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. The "Last updated" date at the top of this page shows when it was last revised.

12. Contact us

For privacy questions or to exercise your rights:

WESTBRIDGE SYSTEMS LTD
65 London Wall
London, United Kingdom
EC2M 5TU
Email: privacy@ourstoryhaven.com