Privacy Policy

This policy explains what personal information Behind the Facade Limited collects through ogston.com, impactstoryteller.org and collective.impactstoryteller.org, why I collect it, and the choices you have.

Last updated 31 October 2026

Who I am

These websites are run by Behind the Facade Limited, which trades as Social Impact Storyteller or Matt Mahmood-Ogston. I am Matt Mahmood-Ogston, and I run the company. Behind the Facade Limited is the data controller for your personal information

This policy covers ogston.com (my storytelling, photography and workshop services), impactstoryteller.org (The Social Impact Storyteller newsletter) and collective.impactstoryteller.org (the Impact Storytelling Collective community).

Company number 09199317. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.

What I collect

Information you give me: your name, email address, organisation and message when you send an enquiry, book a call, sign up to the newsletter or download a free resource.

If you join the Collective or a cohort: your profile, what you post and share in the community, and your booking and payment details. Card details are handled by the payment provider, which is typically Stripe, and never by me.

Information collected automatically: pages visited, device and browser type, approximate location and how you found the website. This comes from cookies and similar tools (see Cookies below).

How I use it

To reply to enquiries and deliver work you ask for. The lawful basis is taking steps at your request or carrying out a contract.

To send the newsletter, free resources and email courses you signed up for. The lawful basis is your consent, and every email has an unsubscribe link.

To run the Collective and cohorts you join. The lawful basis is carrying out a contract.

To understand how the websites are used so I can improve them, and to measure my advertising. To keep financial records the law requires.

I never sell your personal information.

Who I share it with

Only the services that help me run the business, including: Framer (hosts ogston.com), beehiiv (the newsletter and sign-up forms), Heartbeat (the Collective), Cal.com (call bookings), Folk (contact management), Google Analytics (website statistics), Meta and LinkedIn (advertising measurement), payment providers and my accountant.

Some of these services process data outside the UK. Where they do, they rely on UK-approved safeguards such as adequacy regulations or standard contractual clauses.

I will also share information where the law requires it.

How long I keep it

Enquiries: up to six years after we last spoke, unless we work together.

Client and financial records: six years, as UK tax law requires.

Newsletter subscriptions: until you unsubscribe. Note: not all my systems are synced with each other, so unsubscribing from one service may not unsubscribe you from all of them. You can unsubscribe from everything by emailing privacy@ogston.com.

Collective accounts: while your membership is active, then up to six years.

Website analytics: up to six years.

Your rights

Under UK data protection law you can ask to see, correct or delete the information I hold about you, object to or limit how I use it, ask for a copy to take elsewhere, and withdraw your consent at any time.

Email privacy@ogston.com and I will reply within one month.

If you are unhappy with how I have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes and contact

I will update this page if anything changes and show the date at the top.

Questions about this policy: privacy@ogston.com, or write to Behind the Facade Limited, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.