Here at Stepping Stones, we are committed to maintaining the trust and confidence of our website visitors and clients.
This privacy notice tells you when and why we collect your personal information, how we use it, when we might need to disclose it to others and how we keep it secure.
Ian Hanson is our nominated representative and is in charge of all privacy-related matters for Stepping Stones. If you have any questions about this privacy notice, please contact us using the details set out below.
Full business name: Stepping Stones Financial Services
Email address: email@example.com
Postal address: 7 Summerford Wellthorne Lane, Ingbirchworth, Penistone, Sheffield, England, S36 7GS
Website cookies – see our separate cookies policy for more information
Google Analytics – to collect standard internet log information and details of visitor behaviour patterns. We do this to find out which pages are most viewed to continually improve our service. This information is only processed in a way that does not identify anyone.
Contact data – such as billing address, delivery address, email address and telephone numbers.
Financial data – such as your bank account and payment details.
Marketing & communications data – your preferences in receiving marketing communications from us and your communication preferences.
We collect data through direct interactions including when you:
We also collect data automatically too through cookies and our website server logs to learn more about our website visitor’s browsing actions and usage patterns.
We will use your personal data to:
Our legal grounds for processing your data are in relation to points 1 to 4 above are for performance of a contract with you and in relation to 5 above, necessary for our legitimate interests to develop our products/services and grow our business.
The only other time we are legally permitted to use your data is where we need to comply with a legal or regulatory obligation.
Some of our third party providers are businesses outside of the EEA in countries which do not always offer the same levels of protection for your personal data. We do our best to ensure a similar degree of security by ensuring that contracts, code of conduct or certification are in place which give your personal data the same protection it has within Europe.
If we are not able to do so, we will request your explicit consent to the transfer and you can withdraw this consent at any time.
We only keep your personal data for as long as is necessary to fulfil the purposes for which we collected it. We may retain your data to satisfy any legal, accounting, or reporting requirements.
Protecting your data is important to us and we have put in place security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breaches and will notify you and any applicable regulator of a breach where we are legally required to do so.
You are entitled to view, amend, or delete the personal information that we hold about you at any time. Email your request to: firstname.lastname@example.org.
In the unlikely event that you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We should be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.
Access to your personal data
You are entitled to ask us to confirm if we are processing your personal data and you may request a copy of your data by contacting us.
You have the right to withdraw your consent of the use of your personal data by contacting us.
You have the right to request the rectification of inaccurate personal data by contacting us.
In certain circumstances the right to erasure may apply – if you would like us to erase your data please contact us with details of why you would like us to do this.
In certain circumstances you can ask us to restrict the use of your personal data. In such instances please contact us with details of why you would like your information restricted.
There are certain circumstances in which you may ask us to provide you with the personal data we hold about you in a commonly used and machine readable form, or you may ask us to send personal data to another data controller. Please contact us if you have a request.
In certain circumstances you may object to the processing of your personal data. Please contact us if you have a request.
We may change this Privacy Notice from time to time and shall notify you of any changes. Last updated May 2018