Effective Date: July 22, 2026 Last Updated: July 22, 2026

StoryWorks Website Design & Marketing ("StoryWorks," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit storyworks.marketing (the "Site"), download our free resources, book a call, or work with us — and what we do with it.

If you have questions about anything here, email us at [email protected] or call (515) 305-3096.

1. Who We Are

StoryWorks Website Design & Marketing 160 SE Dogwood Ln Waukee, IA 50263 [email protected] (515) 305-3096

StoryWorks is a marketing agency serving small and service-based businesses. We are the controller of the personal information described in this policy.

2. What This Policy Covers

This policy covers information collected through the Site, our forms, our email and text communications, and our marketing and sales process.

It does not cover information we process on behalf of our clients as part of a paid engagement — for example, data inside a client's own CRM, website, or Google Business Profile. In those cases we act as a service provider or processor, and the client's own privacy policy governs. Our handling of that data is set out in our client services agreement.

3. Information We Collect

Information you give us

Contact and lead information. Name, email address, phone number, business name, and website URL when you fill out a form, download the StoryBrand Website Wireframe, request an AI Readiness Report, or subscribe to our emails.

Scheduling information. Name, email, phone, time zone, and whatever you tell us about your business when you book a call through our scheduler.

Consultation and project information. Notes, documents, access credentials, brand materials, and other information you share with us during a discovery call, audit, or engagement.

Order and payment information. When you purchase a product such as the Web Presence Snapshot, you provide your name, email, phone number, business website URL, and payment details. Payment card details go directly to our payment processor and are not stored by StoryWorks — we retain only the transaction record, amount, date, and last four digits.

Correspondence. The content of emails, text messages, form messages, and calls with us.

Information collected automatically

When you visit the Site, we and our providers may automatically collect:

IP address and approximate location (city/region level)

Browser type, device type, and operating system

Pages viewed, time on page, referring URL, and exit pages

Date and time of your visit

Cookie and similar identifiers

Information from third parties

Public business data and research tools. When we prepare a Web Presence Snapshot, an AI Readiness Report, or an audit, we review publicly available information about the business you submit — its website, search results, AI assistant responses, Google Business Profile, reviews, directory listings, and similar public sources. We also query third-party SEO and competitive research platforms, including Semrush, for traffic, keyword, and competitor data about the domain you provide. These queries concern the business domain, not you personally.

Referral sources. If someone refers you to us, we may receive your name and contact information from them.

Advertising and analytics platforms. Aggregate or pseudonymous data about how visitors reach and use the Site.

We do not intentionally collect sensitive personal information (such as government ID numbers, health data, or financial account numbers) through the Site.

4. How We Use Your Information

We use personal information to:

Deliver the free resource, report, or download you requested

Process your order, take payment, deliver a purchased report, and schedule the strategy call included with it

Respond to your inquiry and schedule and conduct consultations

Prepare proposals, audits, and reports

Provide, manage, and invoice for our services

Send marketing emails and, where you have consented, text messages about our services, resources, and content

Measure and improve the performance of our Site, content, and marketing

Maintain records, enforce our terms, and comply with legal obligations

Detect and prevent fraud, spam, and abuse

We do not sell your personal information. We do not share your personal information with third parties for their own independent marketing purposes.

5. Text Messaging (SMS)

We ask for text message consent in two separate ways, and you can agree to either, both, or neither:

Transactional (non-marketing) texts — about your order, your report, or your scheduled call.

Marketing texts — offers, new services, and promotional content.

Agreeing to one does not agree you to the other, and you can withdraw either at any time.

Message frequency varies. Message and data rates may apply.

Reply STOP to opt out at any time. Reply HELP for help, or contact us at (515) 305-3096.

Consent to receive marketing texts is not a condition of purchasing any product or service.

No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service or our messaging platform, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to keep the Site working properly, remember your preferences, understand how visitors use the Site, and measure the effectiveness of our marketing.

We use the following categories:

Strictly necessary — required for the Site, forms, and scheduling to function.

Analytics — help us understand traffic and page performance.

Advertising and retargeting — may allow us or our advertising partners to show you relevant ads on other platforms.

You can control cookies through your browser settings. Blocking some cookies may affect how parts of the Site work. Most browsers also transmit a Global Privacy Control (GPC) signal if you enable one; where required by law, we treat a GPC signal as a valid opt-out of sharing for targeted advertising.

[CONFIRM: list the specific tools you run — e.g. Google Analytics 4, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag. If you run none beyond GoHighLevel's built-in analytics, delete the "Advertising and retargeting" bullet.]

7. When We Share Information

We share personal information only in these situations:

Service providers. We use trusted vendors to operate our business. They may access personal information only to perform services for us, and are contractually restricted from using it for anything else. These include:

HighLevel, Inc. (GoHighLevel / LeadConnector) — our website hosting, CRM, forms, scheduling, email, and text messaging platform

Cloudflare, Inc. — content delivery, security, and email address protection

Google LLC — analytics, embedded maps, and business email

Payment processor — [CONFIRM: name it, e.g. Stripe, Inc.] — to process payments for products purchased on the Site

Semrush Inc. — SEO and competitive research data used to prepare reports

[CONFIRM: add any others — e.g. Zoom, Semrush, QuickBooks, Stripe]

Professional advisors. Attorneys, accountants, and insurers, where necessary.

Legal and safety. When required by law, subpoena, or legal process, or to protect our rights, property, or safety, or that of others.

Business transfer. If StoryWorks is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

With your direction. For example, when you ask us to work with your existing web host, ad platform, or another vendor on your behalf.

8. How Long We Keep Information

We keep personal information only as long as we need it:

Marketing contacts and leads — until you unsubscribe or ask us to delete your information, plus a short suppression record so we honor your opt-out

Client and order records — for the duration of the engagement and for up to seven years afterward, for tax, accounting, and legal purposes

Delivered reports — retained so we can reissue or reference them, unless you ask us to delete yours

Website analytics — per the retention settings of our analytics provider, typically 14 months or less

9. Your Privacy Rights

Depending on where you live, you may have the right to:

Know and access the personal information we hold about you

Correct inaccurate personal information

Delete your personal information

Obtain a copy of your information in a portable format

Opt out of targeted advertising, the sale of personal information, or profiling with legal effects

Withdraw consent at any time, where processing is based on consent

Be free from discrimination for exercising any of these rights

These rights are available to residents of states with comprehensive privacy laws — including California, Colorado, Connecticut, Iowa, Montana, Oregon, Texas, Utah, and Virginia, among others — and to individuals in the EEA and UK under the GDPR.

To exercise a right, email [email protected] with the subject line "Privacy Request," or call (515) 305-3096. We will verify your identity — usually by confirming information we already have on file — and respond within 45 days, or sooner where required by law. We may extend that period once where the request is complex, and will tell you if we do.

Authorized agents. You may use an authorized agent to submit a request. We may ask the agent for proof of authorization and may ask you to verify your identity directly.

Appeals. If we decline your request, you may appeal by replying to our decision with the subject line "Privacy Appeal." We will respond within 60 days. If your appeal is denied, you may contact your state Attorney General.

Marketing opt-out. Every marketing email includes an unsubscribe link. Reply STOP to any text message. You can also email us and we will remove you.

10. Legal Bases for Processing (EEA and UK Visitors)

Where the GDPR applies, we process personal information on these legal bases:

Consent — for marketing emails and texts, and non-essential cookies

Contract — to deliver services you have requested or engaged us for

Legitimate interests — to operate, secure, and improve our business and Site, where those interests are not overridden by your rights

Legal obligation — to meet tax, accounting, and regulatory requirements

You have the right to lodge a complaint with your local supervisory authority.

11. International Transfers

We are based in the United States, and our service providers store and process information in the United States. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism.

12. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted connections (HTTPS), access controls, and vetted service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send passwords, account credentials, or other sensitive information by unencrypted email.

13. Children's Privacy

The Site is intended for business owners and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

14. Third-Party Websites and Embedded Content

The Site links to and embeds content from third parties, including Google Maps, video players, and our scheduling tool. These third parties may collect information about you according to their own privacy policies, which we do not control. We encourage you to read them.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. Material changes will be posted prominently on this page. Your continued use of the Site after an update means you accept the revised policy.

16. Contact Us

StoryWorks Website Design & Marketing 160 SE Dogwood Ln Waukee, IA 50263 [email protected] (515) 305-3096