Last updated: 4 September 2026
WorkStory Limited, trading as WorkStory, respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit workstory.group, contact us, enquire about our services, book a consultation, subscribe to communications or otherwise interact with WorkStory.
WorkStory Limited is the data controller responsible for the personal data described in this Privacy Policy.
WorkStory Limited
Company Number: 784398
Workhub, 6 Fern Road
Sandyford Business Park
Dublin 18
D18 FP98
Ireland
Website: workstory.group
Email: [email protected]
1. What personal data do we collect?
Depending on how you interact with WorkStory, we may collect the following types of personal data:
Contact and identification information
- Your name
- Email address
- Telephone number
- Job title
- Company or organisation
- Other contact information you choose to provide
Enquiry and communication information
- Information contained in contact forms
- Questions or enquiries you send to us
- Information provided when arranging a consultation, meeting or service
- Email correspondence and other communications with WorkStory
Business and client information
- Information needed to prepare proposals, provide services or manage a client relationship
- Project-related contact details
- Records of meetings, communications and agreed work
- Billing and administrative information where relevant
Marketing information
- Your marketing preferences
- Records of consent where consent is required
- Information about whether you have opened, interacted with or unsubscribed from communications, where such functionality is used
Website and technical information
When you visit our website, certain information may be collected automatically, including:
- IP address
- Browser type
- Device type
- Operating system
- Pages viewed
- Date and time of visits
- Referral source
- Cookie preferences
- Website usage information
Further information about cookies and similar technologies is available in our Cookie Policy.
We do not normally seek to collect special category personal data, such as information relating to health, political opinions, religious beliefs, trade union membership or sexual orientation, through our website. Please avoid providing this information unless it is genuinely necessary for your interaction with us.
2. How do we collect your personal data?
Most of the personal data we process is provided directly by you.
For example, we may collect personal data when you:
- Complete a contact or enquiry form
- Contact us by email, telephone or another communication channel
- Book or request a consultation
- Request information about our services
- Become a client or prospective client
- Attend a meeting, workshop, training session or event involving WorkStory
- Subscribe to marketing or other communications
- Provide feedback
- Interact with our website
- Set or change your cookie preferences
We may also receive business contact information indirectly where appropriate, for example:
- From another person within your organisation
- From a business partner or professional contact
- From publicly available professional or corporate sources
- Through professional networking platforms
- From service providers acting on our behalf
Where we receive personal data from another source, we will only use it where we have an appropriate lawful basis to do so.
3. How do we use your personal data?
We only process personal data where we have a lawful basis under applicable data protection law.
We may use your information for the following purposes:
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries and consultation requests | Legitimate interests and/or steps taken before entering into a contract |
| Preparing proposals or discussing potential projects | Steps taken before entering into a contract |
| Delivering services to clients | Performance of a contract |
| Managing client and business relationships | Contract and/or legitimate interests |
| Maintaining business and financial records | Legal obligation and legitimate interests |
| Managing meetings, training, workshops and events | Contract and/or legitimate interests |
| Improving our website and understanding how it is used | Consent where required and legitimate interests where applicable |
| Maintaining website security and preventing misuse | Legitimate interests |
| Sending marketing communications | Consent and/or legitimate interests where permitted by law |
| Managing marketing preferences and unsubscribe requests | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests and/or legal obligation |
| Complying with regulatory, tax, accounting or legal requirements | Legal obligation |
The lawful bases available under Article 6 GDPR include consent, contractual necessity, legal obligation and legitimate interests, among others. (Homepage | Data Protection Commission)
Where we rely on legitimate interests, those interests may include operating and developing our business, responding to prospective clients, maintaining relationships with organisations we work with, protecting our systems and website, and improving our services. We consider whether our interests are outweighed by your rights and interests before relying on this basis.
Where we rely on consent, you may withdraw that consent at any time.
4. Who do we share your personal data with?
We do not sell your personal data.
We may share personal data with trusted third parties where reasonably necessary to operate our business or provide our services. These may include:
- Website hosting and technical service providers
- Email and business communication providers
- Cloud storage and productivity platforms
- Customer relationship management or project management systems
- Meeting and scheduling providers
- Analytics providers
- Professional advisers, including accountants, solicitors and insurers
- Consultants, associates or subcontractors working with WorkStory where they need the information to perform agreed services
- Regulators, public authorities or law enforcement bodies where required by law
Third parties processing personal data on our behalf are expected to process it only for the agreed purpose and to provide appropriate data protection and security safeguards.
If a particular WorkStory service involves additional processing of client or employee data, including through an AI-powered service, additional data protection terms, contractual provisions or privacy information may apply.
5. International transfers
Some technology providers used by businesses may process or store information outside Ireland or the European Economic Area.
Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer complies with applicable data protection law.
Depending on the circumstances, these safeguards may include:
- An adequacy decision of the European Commission
- Approved Standard Contractual Clauses
- Other legally recognised safeguards
6. How long do we keep your data?
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, contractual, accounting and regulatory requirements.
The exact retention period will depend on the type of information involved.
For example:
- General enquiries may be retained for a reasonable period after our last communication in case you contact us again.
- Prospective client information may be retained while there remains a reasonable possibility of working together.
- Client and contractual records may be retained for the duration of the relationship and afterwards where required for legal, financial or business record-keeping purposes.
- Marketing information may be retained until you unsubscribe or object to receiving further communications.
- Cookie information is retained according to the periods described in our Cookie Policy.
When information is no longer required, we will delete it, anonymise it or otherwise securely dispose of it where appropriate.
7. Marketing
We may occasionally contact existing clients, prospective clients and professional contacts with information about WorkStory services, insights, events or other information that we reasonably believe may be relevant.
Where consent is legally required before sending a marketing communication, we will request that consent.
You can ask us to stop sending marketing communications at any time by:
- Using the unsubscribe option contained in a marketing email, where available
- Contacting us at [email protected]
Opting out of marketing does not prevent us from contacting you where necessary for an existing client relationship, contract, enquiry or other non-marketing purpose.
8. Your data protection rights
Under the GDPR and Irish data protection law, you may have a number of rights in relation to your personal data.
These include:
The right of access
You may request confirmation that we process your personal data and obtain a copy of the personal data we hold about you.
The right to rectification
You may ask us to correct personal data that is inaccurate or complete information that is incomplete.
The right to erasure
In certain circumstances, you may ask us to delete your personal data.
The right to restrict processing
In certain circumstances, you may ask us to limit how we use your personal data.
The right to object
You may object to certain processing, including processing based on legitimate interests and processing for direct marketing purposes.
The right to data portability
Where applicable, you may request that personal data you have provided to us be supplied in a structured, commonly used and machine-readable format or transferred to another organisation.
The right to withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
These rights are subject to certain conditions and exemptions under data protection law.
Requests are normally free of charge and we will respond without undue delay and generally within one month, as required by the GDPR. (Homepage | Data Protection Commission)
We may need to request additional information to verify your identity before responding to a request.
To exercise any of these rights, contact:
or write to:
WorkStory Limited
Workhub, 6 Fern Road
Sandyford Business Park
Dublin 18
D18 FP98
Ireland
9. Cookies
Our website uses cookies and similar technologies.
Cookies may be used to:
- Enable essential website functionality
- Remember your preferences
- Understand how visitors use our website
- Improve website performance
- Support analytics
- Support marketing or tracking functionality where you have consented
Our current cookie consent system distinguishes between functional, preference, statistics and marketing purposes, with consent controls available to website visitors. (Workstory)
Non-essential cookies will be used in accordance with the choices you make through our cookie consent tool.
For details about the cookies used on our website, their purposes and retention periods, please see our Cookie Policy.
You can change your cookie preferences through the consent settings available on our website.
10. Links to other websites
The WorkStory website may contain links to websites, platforms or services operated by third parties.
This Privacy Policy applies only to WorkStory’s processing of personal data.
If you follow a link to another website or service, that organisation will normally be responsible for its own processing of your information. We recommend reviewing its privacy policy before providing personal data.
11. Security
We take reasonable technical and organisational measures to protect personal data against:
- Unauthorised access
- Accidental loss
- Misuse
- Alteration
- Disclosure
- Destruction
Access to personal data is restricted to people and service providers who reasonably require it for legitimate business purposes.
However, no internet-based system can be guaranteed to be completely secure.
12. Automated decision-making and AI
WorkStory provides services which may involve the use of artificial intelligence and AI-supported technologies.
Personal data collected through the WorkStory website is not intended to be used to make solely automated decisions about individuals that produce legal or similarly significant effects.
Where an AI-powered WorkStory service involves processing personal data on behalf of a client, the applicable contractual and data protection arrangements will determine the respective responsibilities of WorkStory and the client.
Additional privacy information may be provided where required for a particular service.
13. Children’s privacy
Our website and services are primarily intended for organisations and professionals.
We do not knowingly use the website to collect personal data directly from children.
If you believe a child has provided personal information to us inappropriately, please contact us.
14. Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes to:
- Our services
- The technology we use
- Our data processing activities
- Legal or regulatory requirements
The latest version will be published on workstory.group and the “Last updated” date at the top of this page will be changed accordingly.
We encourage you to review this page occasionally.
15. How to contact us
If you have any questions about this Privacy Policy, how we use your personal data or your data protection rights, please contact:
WorkStory Limited
Workhub, 6 Fern Road
Sandyford Business Park
Dublin 18
D18 FP98
Ireland
Email: [email protected]
Website: workstory.group
16. How to contact the Data Protection Commission
If you have concerns about how we process your personal data, we would encourage you to contact us first so that we have an opportunity to address them.
You also have the right to make a complaint to the Irish supervisory authority:
Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland
Telephone: 01 765 0100 / 1800 437 737
Email: [email protected]
The Data Protection Commission also provides an online contact and complaints facility. (Homepage | Data Protection Commission)