Skip to content
Step3 Logo

Privacy Policy


Last updated: 27/10/2025

 

This Privacy Policy explains how Step3 Digital Ltd (“we”, “our”, “us”) collects, uses, and protects your personal data when you visit our website or interact with us.

We take your privacy seriously and handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Step3 Digital Ltd is a UK-based website design and development agency specialising in WordPress websites, hosting, maintenance, and support.

Registered office: Lonsdale Gate, Lonsdale Gardens, Tunbridge Wells, Kent TN1 1NU
Trading address: Lonsdale Gate, Lonsdale Gardens, Tunbridge Wells, Kent TN1 1NU
Company number: 10068529
Email: info@step3.digital
Telephone: 01732 445688
Website: https://step3.digital

We are the data controller for personal data collected through our website and during our business operations.

2. The data we collect

We may collect and process the following types of personal data:

    • Identity data: name, job title, company name

    • Contact data: email address, telephone number, business address

    • Enquiry data: details provided through contact forms, quote requests, or support tickets

    • Marketing & communication data: preferences, correspondence history

    • Technical data: IP address, browser type, device, and general website usage data (see our Cookie Policy for more information)

3. How we collect your data

We collect data when you:

    • Submit a form or enquiry through our website

    • Contact us via phone, email, or social media

    • Subscribe to updates or download resources

    • Engage with us at events or meetings

    • Use our hosting or support systems

We also collect limited technical data automatically via analytics tools (e.g. Google Analytics, server logs).

4. How we use your data

We use your personal data to:

    • Respond to enquiries and provide information about our services

    • Deliver website, hosting, and support services

    • Manage relationships with clients, suppliers, and partners

    • Send relevant business communications (where lawful)

    • Improve our website and customer experience

    • Comply with legal, financial, and regulatory obligations

5. Legal basis for processing

We rely on one or more of the following legal bases:

    • Contract: to deliver services you’ve requested or purchased

    • Legitimate interests: to operate, market, and improve our business (balanced against your rights)

    • Consent: when you’ve opted in to marketing or communications

    • Legal obligation: when required by law

6. How we share your data

We never sell your personal data.

We may share it with trusted third parties such as:

    • Service providers (e.g. hosting, CRM, email, or payment systems) acting under contract

    • Professional advisers (e.g. accountants, solicitors)

    • Regulators or authorities where legally required

All third parties must follow strict data protection and confidentiality rules and may only process data on our instructions.

7. Data storage and security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

Data is stored securely within the UK or in GDPR-compliant cloud systems.
We retain personal data only for as long as necessary to fulfil the purposes in this policy or meet legal obligations.

8. International transfers

If your data is transferred outside the UK (for example, through our service providers), we ensure suitable safeguards such as:

    • Standard Contractual Clauses (SCCs)

    • Adequacy decisions by the UK Government

    • Equivalent protections under applicable laws

9. Your rights

You have the right to:

    • Access your personal data

    • Request correction of inaccurate or incomplete data

    • Request deletion when data is no longer needed

    • Object to or restrict processing (particularly for marketing)

    • Withdraw consent at any time

    • Complain to the Information Commissioner’s Office (ICO)

To exercise these rights, email us at info@step3.digital.
For more information on your rights, visithttps://ico.org.uk/.

10. Marketing communications

We may contact you with information about our services where it’s relevant and lawful to do so.
You can unsubscribe at any time using the link in our emails or by contacting us directly.

11. External links

Our website may include links to third-party websites.
We’re not responsible for their content or privacy practices – please review their policies before sharing any personal information.

12. Cookies and tracking

We use cookies and similar tools to:

    • Improve website functionality and performance

    • Analyse traffic and visitor behaviour

    • Personalise your browsing experience

For full details about the cookies we use and how to manage your preferences, please see our Cookie Policy.

13. Updates to this policy

We may update this Privacy Policy from time to time.
Any updates will be posted on this page with a revised “Last updated” date.

14. Contact us

If you have any questions about this policy or how we handle your data, please contact:

Step3 Digital Ltd
 Goblands Farm Business Centre, Cemetery Lane, Hadlow, Kent, TN11 0LT
Email: info@step3.digital
 Telephone: 01732 445688
 Website: https://step3.digital