Privacy notice
This privacy notice explains how STEP uses any personal information we collect about you when you use this website.
What information do we collect about you?
How will we use the information about you?
How does STEP justify lawfulness of processing?
What security measures are in place?
Data retention
Marketing
Access to your information and correction
Cookies
Other websites
STEP online events
Changes to our privacy notice
How to contact us
What information do we collect about you?
We collect information that you provide by filling in forms (such as STEP and CLT application forms), which are provided directly by us or found on our website www.step.org. This includes information provided at the time of applying to become a member of STEP, when posting material, or when enquiring about further services such as requesting to attend STEP events and conferences, as well as information you have included in your online profile. Website usage information is collected using cookies.
How will we use the information about you?
We collect information about you to process your membership, manage your account, when attending online STEP events and, if you consent, to keep you informed about STEP and our services that may be of interest to you and relevant to your membership. Selected personal information is also displayed in the online STEP Directory, which is open to the public. Members have control over what information is displayed in this, except in relation to disciplinary notices, which are published according to our Publications Policy. Where consent has been obtained, STEP will only share your information with GDPR-compliant third parties when deemed appropriate and of benefit to you. STEP may share your personal information with GDPR-compliant third parties when legally instructed, or where STEP has a justifiable legitimate interest (such as for online events, auditing or disciplinary purposes). STEP will not provide your personal information to third parties for any other purpose. We will use your information collected from the website to personalise and improve your repeat visits and for statistical analysis.
How does STEP justify lawfulness of processing?
STEP has identified four subparagraphs within UK / EU GDPR Article 6 that enable us to lawfully process personal data.
Article 6:1a Consent – as a member driven organisation, gaining consent is included within the membership agreement, or when attending a STEP event or meeting. This will include photography, video and recording where applicable.
Article 6:1b Contract – On joining, members sign an agreement that forms a contract between STEP and the data subject.
Article 6:1d Vital Interests – STEP will only process personal information when deemed of vital interest of the data subject.
Article 6:1f Legitimate Interests – STEP will only process personal data that is of legitimate interest to STEP and our members.
What security measures are in place?
STEP uses industry-standard SSL certificates to encrypt website traffic to safeguard all data sent and received.
Data retention
Where a payment has been made, STEP will retain your personal data for six years for compliance with the UK Companies Act 2006. If legally required, or where a complaint has been made about a member, STEP may retain your details further but only under specific circumstances.
Where consent has been gained during registration for a STEP online event, your personal data will only be kept by third party sponsors for a maximum of 6 months.
Marketing
We would like to send you information about STEP and our services that will be of interest and benefit to you. If you have consented to receive marketing, you may opt out at any time. You have a right to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please click here.
Access to your information and correction
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us at the following address. Depending on the extent of the request, we may make a small charge for this service. We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
Cookies
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information visit www.aboutcookies.org or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.
Other websites
Our website contains links to other websites. This privacy notice only applies to this website so when you link to other websites you should read their own privacy notices.
STEP online events
When attending a STEP online event, you are consenting to the sharing of your full name which will be displayed for all attendees to view for the duration of the event.
You will be asked to supply your email address when signing in to the event but this information is not displayed and is only used to enable us to deliver the event.
During the registration process, STEP will request consent to share your personal details with third party sponsors who may contact you in relation to their services associated with the event. This is available as an opt-out option on the registration form.
On some occasions there will be an opt-out option to share your email address with third party sponsors of the event. You can deny or consent to this processing when registering to attend the event.
By registering to attend the event, you consent to the recording of the event by STEP.
Changes to our privacy notice
We keep our privacy notice under regular review and we will place any updates on this web page. This privacy policy was last updated in August 2020.
How to contact us
Please contact us at dataprotection@step.org if you have any questions about our privacy notice or information we hold about you.