← The House of Stories

Legal

Privacy Policy

Last updated: 12 June 2026 · ICO Reg. ZC112514 (valid to March 2027)

1. Data Controller

Savhfresh Ltd (trading as SavhLabs) is the data controller for personal data collected through this website. We are registered with the UK Information Commissioner's Office under reference ZC112514.

Registered address: 25 Pendragon Apartments, 57–60 Clarence Parade, Southsea, PO5 2HR, United Kingdom.

2. What Data We Collect

  • Quiz and archetype data: Your answers to our story quiz, chosen archetype, and creative preferences.
  • Order and payment data: Your email address, billing address, and order history. Payment card details are processed directly by Stripe and are never stored on our servers.
  • Content you submit: Photographs, voice recordings, written memories, or other material you upload for heirloom creation.
  • Usage data: Pages visited, time on site, device type, and approximate location (country/city). Collected via privacy-respecting analytics.
  • Communications: Any messages you send us via email or contact forms.

3. How We Use Your Data

  • To create and deliver your personalised Heirloom.
  • To process payment and send order confirmations.
  • To respond to your enquiries and support requests.
  • To improve our service and understand how people use The House of Stories.
  • To comply with our legal obligations.

We do not sell your data to third parties, use your submitted content to train AI models, or send marketing emails without your consent.

4. Legal Bases for Processing

We process your data under the following lawful bases (UK GDPR):

  • Contract: Processing necessary to fulfil your order.
  • Legitimate interests: Improving our service, fraud prevention, site analytics.
  • Legal obligation: Retaining financial records for HMRC compliance.
  • Consent: Marketing communications (where you have opted in).

5. Data Sharing

We share data only with trusted processors necessary to operate the service:

  • Stripe, Inc. — Payment processing. Stripe is PCI DSS compliant.
  • Cloudflare, Inc. — Hosting and content delivery.
  • AI generation services — Your content is passed to AI providers solely for Heirloom creation and is not retained by those providers for training.

6. Retention

We retain your data for as long as necessary to fulfil your order and comply with legal obligations. Order records are retained for 7 years (HMRC requirement). Submitted creative content (photographs, recordings) is deleted 90 days after your Heirloom is delivered, unless you request earlier deletion.

7. Your Rights (UK GDPR)

You have the right to: access your data, correct inaccurate data, request erasure, restrict processing, data portability, and object to processing based on legitimate interests.

To exercise these rights, submit a Data Request or email privacy@savhlabs.com. We will respond within 30 days.

You also have the right to lodge a complaint with the ICO at ico.org.uk.

8. Cookies

We use essential cookies for site functionality and optional analytics cookies. See our Cookie Policy for full details.

9. Contact

Data protection queries: privacy@savhlabs.com or write to our registered address.