As part of its marketing and copywriting consultancy services, Narratives Work collects and processes personal data relating to clients, prospective clients, collaborators, and other individuals it works with. Narratives Work is committed to being transparent about how it collects and uses that data, and to meeting its data protection obligations under the UK GDPR and the Data Protection Act 2018.
Narratives Work may collect a range of information, including:
Your name, business name, and contact details (including email address and phone number);
Information about your role, organisation, and sector;
Project briefs, background context, and communications history;
Feedback, testimonials, and reference materials you provide;
Any information voluntarily shared via email or meetings relevant to the service provided.
This information may be collected directly from you (e.g. via email, contact forms, or phone calls), or from publicly available sources such as LinkedIn or company websites.
Data is stored securely on email platforms, cloud-based storage systems, and project management tools used by Narratives Work.
Narratives Work processes personal data in order to:
Communicate effectively with clients and collaborators;
Deliver marketing and copywriting services;
Keep accurate records of projects and working relationships;
Market its services to prospective clients (where appropriate and lawful);
Maintain internal business operations and comply with any legal obligations.
Processing is based on the legitimate interests of running and growing a business, unless consent or legal obligation provides a separate lawful basis.
Access to your data is limited to the business owner and trusted service providers (e.g. secure cloud storage and email providers) under strict confidentiality agreements.
Data will not be shared with third parties unless required by law, or with your explicit consent—for example, when collaborating with a subcontractor on a shared project.
International data transfers
If your data is stored in cloud-based systems (e.g. Google Workspace), it may be transferred outside the UK or European Economic Area (EEA). Such transfers will comply with UK GDPR requirements and use only providers with adequate safeguards in place, such as Standard Contractual Clauses or approved certification schemes.
Narratives Work takes the security of your data seriously, using secure password-protected systems and cloud services with appropriate encryption and access controls. Only authorised individuals (currently Joe Brennan) have access to your personal data.
Personal data is retained only for as long as necessary to fulfil its original purpose—typically for the duration of a working relationship and a reasonable period afterwards for record-keeping and follow-up. You may request deletion of your data at any time (see Your Rights below).
Your rights
You have the right to:
Access and obtain a copy of your data on request;
Ask Narratives Work to correct inaccurate or incomplete data;
Request the deletion of your data, or restriction of its processing;
Object to the processing of your data where lawful grounds are based on legitimate interest;
File a complaint with the Information Commissioner’s Office (ICO) if you believe your data rights have been breached.
To exercise any of these rights, please contact Joe Brennan at: joe@narratives.work
You are under no statutory or contractual obligation to provide personal data. However, if you choose not to share relevant information, Narratives Work may not be able to deliver its services effectively.
