Privacy Policy – Next Step Compliance
Effective date: 3rd March 2026
Next Step Compliance respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use our website and services.
1. Who we are
Next Step Compliance is the controller of your personal data.
Registered address: Ditton, Aylesford, Kent
Contact: jeanette@nextstepcompliance.co.uk
For any questions about your data, or to exercise your rights, you can contact us directly at the above details. You also have the right to complain to the Information Commissioner’s Office (ICO) (www.ico.org.uk) if you believe your data is not being handled correctly.
2. Personal data we collect
We may collect the following personal data when you contact us, sign up for updates, or use our services:
- Identity data: name, title
- Contact data: email, phone number, postal address
- Technical data: IP address, browser type, website usage data (collected via cookies)
- Communications data: messages you send us, feedback, or inquiries
We do not collect sensitive personal data (such as health, racial, religious, or financial details) unless explicitly provided for a specific purpose.
3. How we collect your data
- Direct interactions: when you fill out a contact form, email, or call us.
- Website usage: via cookies and analytics to improve the site experience.
We do not sell or trade personal data to third parties.
4. How we use your data
We process personal data for purposes including:
| Purpose | Type of Data | Legal Basis |
|---|---|---|
| Responding to enquiries and providing services | Identity, Contact, Communications | Performance of a contract or legitimate interests |
| Sending updates, newsletters, or information you request | Identity, Contact | Consent |
| Managing and improving our website | Technical, Usage | Legitimate interests |
| Complying with legal obligations | Identity, Contact | Legal obligation |
You can withdraw consent for marketing emails at any time by contacting us.
5. Cookies
Our website uses cookies to improve your browsing experience. Cookies help us:
- Make the website function correctly
- Understand website usage to improve content and services
You can control cookies through your browser settings. Disabling cookies may affect some website features.
6. Data retention
We only keep personal data as long as necessary to provide our services or meet legal obligations. For example, basic records may be retained for up to six years for tax purposes. Data no longer required is securely deleted or anonymised.
7. Sharing your data
We may share personal data with trusted third parties who help us deliver our services, such as:
- IT and website providers
- Legal or professional advisors
All third parties must comply with UK data protection law and may only use your data as instructed. We do not transfer your data outside the UK/EEA.
8. Your rights
You have the right to:
- Access and receive a copy of your data
- Correct inaccurate data
- Request deletion or restriction of processing
- Object to processing for marketing or legitimate interests
- Withdraw consent where applicable
To exercise your rights, contact us at [Email Address]. We aim to respond within one month.
9. Changes to this policy
We may update this policy from time to time. The latest version will always be posted on our website with the updated date. Please check back periodically.
10. Contact
Next Step Compliance
Ditton, Aylesford, Kent ME20 6AE
jeanette@nextstepcompliance.co.uk