↓Skip to main content

Privacy Policy

··793 words
Table of Contents

A lady walking with a website background behind

1. Introduction #

Welcome to Seven Steps Support Ltd (“we,” “our,” or “us”). We are committed to protecting your personal data and your right to privacy. This Privacy Policy outlines how we collect, use, and protect your personal information. This privacy policy relates specifically to our public-facing website; not the social care services we render or internal software applications.

2. Information We Collect #

We collect personal information from our website, primarily through the contact form, which is powered by Zapier. The information we collect includes:

Name
Email address
Contact number
Message/query

3. How We Use Your Information #

We use the personal information you provide us solely for the following purposes:

To respond to your queries
To provide information about our social care services
To comply with legal and regulatory obligations

We process your personal data based on the following legal grounds:

Consent (when you voluntarily submit the contact form)
Legitimate interests (responding to queries, providing information)

5. Data Sharing #

We do not share your personal information with third parties, except in the following circumstances:

With service providers who assist us in responding to queries (e.g., hosting providers)
As required by law or regulation
As necessary for business transfers (e.g., mergers, acquisitions)

6. Cloudflare Pages and Data Protection #

Our website is hosted on Cloudflare Pages, which includes features such as a content delivery network (CDN), advanced protections, and a firewall. Cloudflare’s services are used for security and monitoring purposes only and do not involve cookies or third-party analytics.

7. Data Security #

We implement appropriate measures to protect your personal data from unauthorized access, disclosure, or destruction.

8. Data Retention #

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

9. Changes to this Privacy Policy #

We may update this Privacy Policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. This page will reflect the date on which this policy was last updated.

10. Relevant Registrations #

NHS Data Protection Toolkit (DSP) #

The Data Security and Protection Toolkit is an online self-assessment tool that allows organisations to measure their performance against the National Data Guardian’s 10 data security standards.

We are registered with the NHS Data Protection Toolkit and submitted our latest Standards Met assessment on 16/06/2023. Our organisation code (ODS) is AY70; this is a HQ publication which covers all of our services.

Information Commissioner’s Office (ICO) #

The ICO is the UK’s independent body set up to uphold information rights. The Information Commissioner’s Office is a non-departmental public body which reports directly to the Parliament of the United Kingdom.

We are registered with the Information Commissioner’s Office (ICO) under the reference ZA331998.

11. Suppliers #

We choose our technology suppliers carefully. We ensure they have up-to-date privacy policies, third-party audits, and robust internationally recognized certifications. If you have any concerns about our choices; you can contact us.

Cloudflare #

Cloudflare provides content delivery network services, cloud cybersecurity, DDoS mitigation, and ICANN-accredited domain registration services.

We use Cloudflare to deploy, serve, and protect our website. Cloudflare adhere to industry-standard security compliance certifications and regulations. We understand they are committed to their privacy obligations including GDPR.

Zapier #

Zapier is a product that allows end users to integrate the web applications they use and automate workflows.

Our contact form is powered by Zapier. Zapier has obtained indepdent third-party auditor certifications. We understand they are committed to their privacy obligations including GDPR.

12. Cookies #

Cookies are small pieces of text sent to your browser by a website you visit. They help that website remember information about your visit.

Our favourite cookies are edible ones. Our public-facing website does not set cookies on your device(s).

13. Analytics #

Plausible is intuitive, lightweight and open source web analytics. No cookies and fully compliant with GDPR, CCPA and PECR.

We use Plausible for website analytics. Plausible is a privacy-friendly and open-source website analytics tool. It does not collect any personal data or personally identifiable information and does not use cookies.

We use it as a way to see how many people visit our website, how long they stay for, and how many pages they view - this anonymized information helps us create a more usable and engaging website.

14. Contact Us #

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: hello@sevenstepssupport.com
Phone: 0114 376 7000
Registered Address: 25 Youlgreave Drive, Sheffield, S12 4SD
↑