Step8Up Privacy Policy
1. Who We Are
Step8Up Ltd is a UK-based training, upskilling, and consulting organisation working with individuals, businesses, schools, and public-sector partners. We are committed to handling personal data responsibly and transparently.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, engage with our services, or communicate with us.
By using our website or services, you acknowledge this Privacy Policy.
2. Our Approach to Privacy
We take privacy and data protection seriously and aim to follow UK GDPR, Data Protection Act 2018, and ICO guidance, applying standards consistent with those used by larger organisations and regulated providers.
We collect only what is necessary, use it for clear purposes, and retain it only for as long as required.
3. Information We Collect
a) Information You Provide Directly
We may collect personal data when you:
-
Register interest in courses, training, or events
-
Book consultations, discovery calls, or support sessions
-
Register for workshops, bootcamps, or programmes
-
Make purchases or provide billing information
-
Contact us via forms, email, phone, or messaging platforms
-
Participate in surveys, feedback, or discussions
This may include:
-
Name
-
Email address
-
Telephone number
-
Organisation and role
-
Billing and payment details (processed securely by third-party providers)
b) Information Collected Automatically
When you use our website, we may automatically collect limited technical information, including:
-
IP address
-
Browser type and version
-
Device and operating system information
-
Pages visited and time spent on the site
-
Referral sources and click paths
-
Basic interaction data (e.g. scrolling, clicks)
This data helps us understand website performance and improve user experience.
4. How We Use Your Information
We use personal data for legitimate and proportionate purposes, including to:
-
Deliver training, services, and support you request
-
Manage enquiries, bookings, and accounts
-
Process payments and administer contracts
-
Communicate important updates or service information
-
Share relevant information about programmes or events (where appropriate)
-
Improve our website, services, and content
-
Maintain security, prevent misuse, and meet legal obligations
We do not sell personal data.
5. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
-
Contractual necessity – to deliver services you request
-
Legitimate interests – to operate, improve, and secure our services
-
Consent – where you have opted in (e.g. marketing communications)
-
Legal obligation – where required by law or regulation
You may withdraw consent at any time where consent is the lawful basis.
6. Third-Party Systems and Data Sources
Step8Up uses trusted third-party platforms to support learning delivery, CRM, communications, analytics, video conferencing, and marketing.
We may also receive limited data from:
-
Event partners or collaborators
-
Analytics or advertising platforms
-
Publicly available sources (e.g. professional social media)
These providers operate under their own privacy policies and data protection obligations.
7. Sharing Your Information
We may share personal data with:
-
Service providers and subcontractors supporting delivery
-
Learning, CRM, payment, and communications platforms
-
Professional advisers (e.g. legal, financial)
-
Regulatory or legal authorities where required
All third parties are expected to handle data in line with applicable data protection laws and contractual safeguards.
Where possible, data shared for analytics or reporting is aggregated or anonymised.
8. International Data Transfers
Some third-party systems we use may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as:
-
UK or EU Standard Contractual Clauses
-
Adequacy decisions
-
Equivalent data protection measures
9. Data Security
We apply reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure.
However, no internet-based system can be guaranteed as fully secure. Users are responsible for maintaining the confidentiality of any login credentials provided to them.
10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal requirements, or meet contractual obligations.
Data is securely deleted or anonymised when no longer required.
11. Your Rights
Under UK GDPR, you have the right to:
-
Access the personal data we hold about you
-
Request correction of inaccurate or incomplete data
-
Request deletion of your data (subject to legal limits)
-
Restrict or object to certain processing
-
Withdraw consent where applicable
-
Request data portability in certain circumstances
To exercise your rights, contact us at:
📧 team@step8up.co.uk
12. External Links
Our website may contain links to third-party websites or platforms. We are not responsible for their content or privacy practices. Please review their policies before providing personal data.
13. Limitation of Liability
While we take reasonable steps to protect personal data, Step8Up Ltd accepts no liability for data loss or issues arising from third-party systems, external websites, or factors beyond our direct control.
14. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation, or how we operate. The latest version will always be published on this page.
Continued use of our website or services indicates awareness of the updated policy.
15. Contact Us
If you have questions about this Policy, please contact:
