Privacy Policy

Step2Progress Ltd understands that your privacy is important to you and that you care about how your personal data is used and shared online. This notice applies across all our “Services”, i.e. all services we provide, our programs, events or training, and the websites that we own and operate.

We respect and value the privacy of everyone who uses our Services and will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.

Please read this Privacy Policy carefully and ensure that you understand it.

Definitions and Interpretation

In this Policy, the following terms shall have the following meanings:

“Account” - means an account required to access and/or use certain areas and features of our services.

“Cookie” - means a small text file placed on your computer or device by our services when you visit certain parts of our services and/or when you use certain features of our services.

“Personal data” - means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data.

“You” - means yourself and/or the school.

“Programees” - means children participating in our programs.

“We”, “our” or “us” - means Step2Progress Ltd, a limited company registered in England under company number 09301218 whose registered address is 10 Park Plaza, Battlefield Enterprise Park, Shrewsbury, Shropshire, SY1 3AF. We provide physical literacy-based products to schools.

How we collect your data

When you enter into or are party to a contract with us, use our services or visit our websites, we collect personal data as follows:

All personal data is processed and stored securely. The ways we collect it can be broadly categorised into the following:

Information you provide to us directly: When you use our services and/or visit some parts of our websites we might ask you to provide personal data to us. For example, we ask for your contact information and role when you sign up to our programs, take part in our training and events, contact us with questions or request support, participate in community forums, join us on social media. When you sign up programees to our programs we ask for their name, date of birth and gender; we may also request performance and behavioral characteristics.

If you don’t want to provide us with personal data, you don’t have to, but it might mean we are unable to provide our services and/or you can’t use some parts of our websites.

Information we collect automatically: We collect some information about you automatically when you use our services and/or visit our websites, e.g. a pupil’s progress through our programs. We also collect information when you navigate through our websites and services, including what pages you looked at and what links you clicked on. This information is useful for us as it helps us get a better understanding of how you’re using our websites and services so that we can continue to provide the best experience possible.

Some of this information is collected using cookies and similar tracking technologies. If you want to find out more about the types of cookies we use, why, and how you can control them, please see the section ‘Our use of cookies’ below.

This Privacy Policy applies only to our services. Our sites may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

How we use your data

Where we collect personal data, we’ll only process it:

First and foremost, we use your personal data to provide you with any services you’ve signed up for and to operate our websites:

We also use your personal data for other purposes, which may include the following:

To communicate with you. This may include:

To support you: This may include supporting you with effective delivery of our programs, assisting with the resolution of technical support issues or other issues relating to the websites or services, whether by email, telephone or otherwise.

To enhance our websites and services and develop new ones: For example, by tracking and monitoring your use of websites and services so we can keep improving, or by carrying out technical analysis of our websites and services so that we can optimise your user experience and provide you with more efficient tools.

To protect: So that we can detect and prevent any fraudulent or malicious activity, and make sure that everyone is using our websites and services fairly and in accordance with our terms of use.

To analyse, aggregate and report: We may use the personal data we collect about you and other users of our websites and services to produce aggregated and anonymised analytics and reports, which we may share publicly or with third parties.

We will only share your data with third parties who are contracted to deliver our services and who themselves have a Privacy Policy which incorporates the definitions provided in the GDPR.

How and where we store your data

Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure data collected from you and through our websites.

In the case of data collected through our company website STEPtoday.com, all communication is sent to our servers using the TLS encrypted protocol.

All passwords are stored using a secure hashing algorithm.

Data is stored in a secure database that is only accessible from our internal network.

In the case of data collected through our STEP program website, all information is sent to our servers using the TLS encrypted protocol.

All passwords are stored using a secure hashing algorithm.

Data is stored in a secure Azure SQL database that is only accessible from our developers internal network.

It is recommended that you keep your internet browser and operating system up-to-date as our services are optimised to the latest versions of Internet Explorer, Microsoft Edge, Safari, Chrome (different to Chrome OS), Firefox. Running older versions is less secure (susceptible to hacking and viruses) and may result in our websites not displaying and operating effectively.

Our use of cookies

Our company website STEPtoday.com may place and access certain first party cookies on your computer or device. First party Cookies are those placed directly by us and are used only by us. We use cookies to facilitate and improve your experience of our website and to provide and improve our products. We have carefully chosen these cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

All cookies used by and on our website are used in accordance with current Cookie Law.

Certain features of our website depend on cookies to function. Cookie Law deems these cookies to be “strictly necessary”. These cookies are shown below. Your consent will not be sought to place these cookies, but it is still important that you are aware of them. You may still block these cookies by changing your internet browser’s settings, but please be aware that our website may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them.

The following first party cookies are strictly necessary and may be placed on your computer or device:

_RequestVerificationToken – Used to prevent areas of the website being accessed fraudulently.

.AspNet.TwoFactorCookie – Used during user login to allow two factor login

.AspNet.ApplicationCookie – Used to store secure information related to your login and your ability to access certain sections of the site.

Our company website STEPtoday.com uses analytics services provided by Google. Website analytics refers to a set of tools used to collect and analyse anonymous usage information, enabling us to better understand how our website is used. This, in turn, enables us to improve our website and the products offered through it. You do not have to allow us to use these cookies, however whilst our use of them does not pose any risk to your privacy or your safe use of our website, it does enable us to continually improve our site, making it a better and more useful experience for you.

The analytics service used by our website uses the following cookies: _ga, _gid, _gat

In addition to the controls that we provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third-party cookies. By default, most internet browsers acceptcCookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

You can choose to delete cookies on your computer or device at any time, however you may lose any information that enables you to access our site more quickly and efficiently including, but not limited to, login and personalisation settings.

What happens if our business changes hands?

We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by us.

In the event that any of your data is to be transferred in such a manner, you will not be contacted in advance and informed of the changes.

Retention

The length of time we keep your personal data depends on what it is and whether we have an ongoing business need to retain it, for example, to provide you with a service you’ve requested or to comply with applicable legal requirements. Following that period, we’ll make sure it’s deleted or anonymised. For further information please contact dpo@steptoday.com

Your rights

It’s your personal data and you have certain rights relating to it. When it comes to marketing communications, you can ask us not to send you these at any time by sending your request to info@steptoday.com

You also have rights to:

You can exercise these rights at any time by sending an email to dpo@steptoday.com

Please be aware that if we don’t collect and retain your personal data, or it is deleted, we may be unable to provide you with our services, and some functions and features on our websites may not be available to you.

If you’re not happy with how we are processing your personal data, please let us know by sending an email to dpo@steptoday.com. We will review and investigate your complaint and will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.

Contacting Us

If you have any questions about our services or this Privacy Policy, please contact us at:

Email: dpo@steptoday.com

Tel: 020 3039 3380

Post: Step2Progress Limited, Meridien House, 69-71 Clarendon Road, Watford, WD17 1DS

Changes to Our Privacy Policy

We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted here. We recommend that you check this page regularly to keep up-to-date.