StepWISE
Contact

Privacy Policy

Last updated: 19 August 2026

Who we are

Stepwise Limited, trading as StepWISE, is the controller responsible for the personal information described in this policy.

Stepwise Limited is registered in England and Wales under company number 15207335.

Registered office:
4th Floor
4 Tabernacle Street
London
United Kingdom
EC2A 4LU

For questions about this policy or how we use personal information, contact: legal@stepwiseinsights.com

What this policy covers

This policy explains how we collect and use personal information when you:

  • visit stepwiseinsights.com;
  • contact us by email;
  • submit an enquiry through our website; or
  • communicate with us about a potential project or business relationship.

Personal information processed while delivering services for a client may also be governed by the relevant contract, project documentation or a separate privacy notice.

Information we collect

Information you provide

When you contact us or submit a website enquiry, we may collect:

  • your name;
  • your organisation;
  • your email address;
  • your telephone number, if provided;
  • the type of project you are interested in;
  • the contents of your message; and
  • any other information you choose to provide.

Please do not include sensitive personal information in a general website enquiry unless it is genuinely necessary.

Information collected when you use the website

Our hosting provider may process limited technical information associated with visits to the website, including:

  • the page or file requested;
  • the referring website;
  • browser type and version;
  • operating system;
  • device type;
  • date and time of access; and
  • an IP address in anonymised form for approximate location and technical purposes.

We may also process limited, short-lived security information to protect the enquiry form from spam and misuse. This may include a one-way value derived from an IP address for rate-limiting purposes.

How and why we use personal information

We use personal information to:

  • respond to enquiries;
  • understand your requirements;
  • discuss potential projects and services;
  • take steps towards entering into a contract;
  • manage our business relationships;
  • operate, secure and improve the website;
  • prevent spam, misuse and security incidents;
  • maintain appropriate business records; and
  • meet our legal and regulatory obligations.

Our lawful bases are:

  • Steps before entering into a contract: where you ask us to consider or discuss a potential engagement.
  • Contract: where processing is necessary to manage or deliver an agreed service.
  • Legitimate interests: where necessary to respond to business enquiries, develop professional relationships, operate and improve our website, protect our systems, and manage our business effectively.
  • Legal obligation: where we must retain or disclose information to comply with applicable law.

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights and interests require additional protection.

We do not use website enquiry information to add people to a mailing list or send unrelated automated marketing.

Contact-form submissions

Information submitted through the contact form is sent to StepWISE by email. We do not intend to store contact-form submissions in a separate website database.

Our website and form-processing infrastructure is hosted by IONOS. Enquiry emails are received and managed through Google Workspace.

The form includes measures intended to reduce automated spam and misuse. These measures do not involve automated decisions that have legal or similarly significant effects on you.

Website analytics and cookies

We use IONOS SiteAnalytics to understand general website usage and improve the website’s performance and content.

IONOS SiteAnalytics may provide aggregate information such as:

  • visitor and session numbers;
  • pages viewed;
  • entry and exit pages;
  • session duration;
  • broad visitor location;
  • device, browser and operating-system information; and
  • referring pages.

We use this information only for statistical analysis, technical optimisation and improving the website. We do not use it to identify individual visitors, create advertising profiles or track people across unrelated websites or services.

We do not currently use Google Analytics, advertising pixels or behavioural advertising technologies.

We do not intentionally set non-essential cookies through the website. If this changes, we will update this policy and introduce an appropriate choice or objection mechanism where required.

Who we share information with

We may share personal information with:

  • IONOS, which provides website hosting and related technical services;
  • Google Workspace, which provides our business email and collaboration services;
  • professional advisers, including legal, accounting and insurance advisers;
  • technology suppliers supporting the secure operation of our business;
  • regulators, courts, law-enforcement bodies or public authorities where disclosure is required or permitted by law; and
  • a purchaser, investor or professional adviser if Stepwise Limited is involved in a proposed sale, restructuring or transfer of all or part of its business.

We require service providers acting on our behalf to protect personal information and use it only for the agreed purpose.

We do not sell personal information.

International transfers

IONOS states that website-hosting visitor data covered by its web-hosting service is not transferred outside the European Union.

Google and some other service providers may process information in countries outside the United Kingdom. Where personal information is transferred internationally, we take steps designed to ensure an appropriate level of protection. Depending on the destination and provider, these may include:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to the European Commission’s Standard Contractual Clauses; or
  • another lawful transfer mechanism.

You may contact us for further information about the safeguards relevant to your personal information.

How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

In general:

  • enquiries that do not result in a client relationship are retained for up to 24 months after the last meaningful contact;
  • client and project correspondence may be retained for the duration of the relationship and generally for up to seven years afterwards where required for contractual, tax, accounting, insurance or legal purposes;
  • short-lived form-security information is retained only for the period required to prevent spam or misuse, ordinarily no more than 24 hours;
  • IONOS states that web-hosting visitor data is retained for eight weeks; and
  • SiteAnalytics reports may remain available for up to 12 months.

We may retain information for longer where reasonably necessary to establish, exercise or defend legal claims, comply with a legal obligation, or resolve a dispute.

How we protect information

We use reasonable technical and organisational measures intended to protect personal information against accidental or unlawful loss, alteration, disclosure or access.

No internet transmission or storage system can be guaranteed to be completely secure. Please avoid sending sensitive or confidential information through the general website enquiry form.

Your rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

  • ask for access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your information;
  • ask us to restrict how we use your information;
  • object to certain uses of your information;
  • receive certain information in a portable format; and
  • withdraw consent where we rely on consent.

These rights are not absolute, and exemptions may apply.

Your right to object

You have the right to object to processing based on our legitimate interests. If you object, we will stop the relevant processing unless we have compelling legitimate grounds to continue or the processing is required for legal claims.

To exercise a right, email legal@stepwiseinsights.com. We may need to verify your identity before completing a request.

Automated decision-making

We do not use personal information collected through this website to make decisions based solely on automated processing that have legal or similarly significant effects.

Children

This website and our services are intended for organisations and business users. They are not directed at children, and we do not knowingly collect personal information from children through the website.

Complaints

Please contact us first at legal@stepwiseinsights.com if you have a concern about how we use your personal information. We will try to resolve it.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Website: ico.org.uk

Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The latest version will always be published on this page, together with its revision date.