Privacy policy

The User Story Limited ( "We", "Us" and "Our" in this LAB Privacy Notice) is committed to protecting and respecting Your privacy.

This LAB Privacy Notice sets out the basis on which any personal data We collect from You, or that You provide to Us, will be processed by Us.  

Please read the following carefully to understand Our views and practices regarding Your personal data so that You are fully aware of how and why We are using Your data.  By signing up to a LAB account, You are accepting and consenting to the practices described in this LAB Privacy Notice.  By providing any personal information to Us, You fully understand and clearly consent to such use and transfers set out in this LAB Privacy Notice. 

For the purpose of the Data Protection Legislation (which includes the Data Protection Act 1998 or, from the date it comes into force, the General Data Protection Regulation (Regulation (EU) 2016/679))("GDPR"), We are a controller with respect to any personal data We collect from You and You can contact Us in writing at St George's Works, Colegate, Norwich, NR3 1DD, by email at or by telephone at 01603856444. 

We will only process Your personal data in accordance with this LAB Privacy Notice and in accordance with the Data Protection Legislation.  

It is important that the personal data We hold about You is accurate and current.  Please keep Us informed if Your personal data changes during Your relationship with Us. 

What information do We collect and why?

We collect Your name, date of birth and address ("Lab Data") and store this Lab Data in Our database so that We may invite You to take part in research sessions for Our clients ("Sessions"). Please understand that You will never be obliged to attend or participate in any Sessions.

Who do We share Your data with?

We will only share Your personal data with third parties if We are under a duty to disclose or share Your personal data in order to comply with a legal obligation.

How long do We keep Your data?

We only keep Your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.  We hold Your Lab Data for as long as You may wish to be considered for any Sessions.  If You require further information regarding Our retention of data please contact Us at

Do We protect Your personal information and where is it stored?

We will: 

  • do our utmost to protect user privacy through the appropriate use of the security technology; 
  • ensure that We have appropriate physical and technological security measures in place to protect Your information; 
  • We will not transfer Your personal data outside of the European Economic Area except, as the case may be, to Our service providers in the United States and if any such transfers occur We will ensure that Our service providers are compliant with the Data Processing Legislation; 
  • take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this LAB Privacy Notice; 
  • store all the information You provide to Us on secure servers; and 
  • once We have collected Your information, use strict procedures and security features to try to prevent unauthorised access.

Changes to this LAB Privacy Notice

This LAB Privacy Notice may be updated from time to time, so You may wish to check it from time to time. If You do not agree to any changes made, please let Us know before You take part in the relevant Session.  

Your rights

Under the Data Processing Legislation: 

  • You have the right to request Us to stop processing Your personal data in accordance with this LAB Privacy Notice at any time.  If You make such a request, Your ability to take part in Sessions will cease. 
  • If You become aware of any inaccuracies in Your personal data which We process on Your behalf or such personal data is incomplete, You have a right to request that such inaccuracies are rectified.  On receiving Your request We will either action such request or explain why We have decided not to action such request. 
  • If it is no longer necessary for Us to retain Your personal data (e.g. You no longer wish to take part in Sessions), or where it is established that We did not have the right to process Your personal data, in accordance with the GDPR, You may have Your personal data erased.  As explained above, if Your personal data is erased, Your ability to take part in any Sessions will end. 
  • You may also have a right under the GDPR to object to Us processing Your personal data or to request a restriction on the ways in which We may process Your personal data in certain circumstances. 
  • You have the right to complain to the Information Commissioner ( if You have any concerns in respect of the handling of Your personal data by the Us. We would, however, appreciate the chance to deal with Your concerns before You approach the ICO so please contact Us in the first instance. 

If You would like to exercise any of the above rights, please contact Us at