Privacy Policy – STEPS Academy
Last Updated: 18 March 2026
Effective Date: 18 March 2026
1. Introduction
STEPS Academy (“we”, “us”, “our”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, services, or interact with us.
2. Who We Are (Data Controller)
STEPS Academy is the data controller responsible for your personal data.
If you have any questions about this Privacy Policy or your data, you can contact us at:
info@stepsacademy.co.uk
3. Scope of This Policy
This Privacy Policy applies to:
-
Your use of our website and services
-
Any communication with us (email, phone, forms, or social media)
-
Any data you provide when registering, booking courses, or making enquiries
4. Personal Data We Collect
We collect and process the following categories of personal data:
A. Information You Provide
-
Full name
-
Email address
-
Phone number
-
Address (if required)
-
Account login details
-
Course enrolment information
-
Payment details (processed securely via third-party providers)
-
Communications with us (emails, messages, feedback)
B. Information We Automatically Collect
-
IP address
-
Device and browser information
-
Website usage data (pages visited, time spent)
-
Cookies and tracking technologies
-
Location data (approximate)
5. How We Use Your Data (Legal Basis)
We process your personal data under the following legal bases:
a) Contractual Necessity
To:
-
Register you as a student
-
Process course bookings and payments
-
Provide training services
b) Legitimate Interests
To:
-
Improve our services and website
-
Respond to enquiries
-
Prevent fraud and ensure security
c) Legal Obligation
To:
-
Comply with tax, accounting, and legal requirements
d) Consent
To:
-
Send marketing communications (you can withdraw consent at any time)
6. How We Use Your Information
We use your data to:
-
Provide and manage our training services
-
Process payments and issue invoices
-
Communicate with you about your bookings
-
Improve user experience and website performance
-
Send relevant updates or marketing (if consent is given)
-
Ensure security and prevent fraud
7. Sharing Your Data
We may share your data with:
-
Payment providers (e.g. Stripe, PayPal)
-
IT and software providers (hosting, CRM systems)
-
Professional advisors (accountants, legal advisors)
-
Government authorities where legally required
We do not sell your personal data.
8. International Data Transfers
If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as:
-
UK-approved Standard Contractual Clauses
-
Transfers to countries with adequate protection levels
9. Data Security
We implement appropriate technical and organisational measures, including:
-
Secure servers and encryption
-
Restricted access to personal data
-
PCI-compliant payment processing
10. Data Retention
We retain your data only as long as necessary:
-
For the duration of your relationship with us
-
To comply with legal obligations (e.g. tax records)
-
For resolving disputes or enforcing agreements
When no longer required, your data will be securely deleted or anonymised.
11. Your Rights Under UK GDPR
You have the right to:
-
Access your personal data
-
Correct inaccurate data
-
Request deletion (“right to be forgotten”)
-
Restrict processing
-
Object to processing
-
Data portability
-
Withdraw consent at any time
To exercise your rights, contact us at:
info@stepsacademy.co.uk
12. Complaints
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with:
Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk
13. Cookies
We use cookies and similar technologies to:
-
Improve website functionality
-
Analyse traffic
-
Personalise user experience
You can control cookies via your browser settings.
(You may also include a separate Cookie Policy page.)
14. Children’s Data
Our services are not directed at children under 16.
We do not knowingly collect personal data from children.
15. Changes to This Policy
We may update this Privacy Policy from time to time.
Any updates will be posted on this page with a revised “Last Updated” date.
16. Contact Us
For any privacy-related queries, please contact:
STEPS Academy
Email : info@stepsacademy.co.uk