1. Introduction
1.1 We are committed to safeguarding the privacy of our website visitors, customers, and service users.
1.2 This policy applies where we act as a data controller regarding your personal data, determining how and why it is processed.
1.3 We use cookies and analytics tools to enhance your experience. Where these cookies are not strictly necessary, we request your consent through our cookie banner when you first visit our website.
1.4 In this policy, “we”, “us” and “our” refer to STEPEVI LIMITED (Company No. 05409103). For our full details, see Section 10.
2. Personal Data We Collect
We collect and process the following categories of personal data:
- Contact data: such as name, email address, telephone number, postal address, and social media handles.
- Account data: information related to your customer account or order history on our site.
- Transaction data: purchase details, payment method, and billing information (processed securely via Shopify Payments or PayPal).
- Communication data: correspondence you send to us via email or our website forms.
- Usage data: IP address, browser type, device identifiers, pages visited, and session duration, collected through analytics tools such as Google Analytics 4 (GA4).
3. Purposes of Processing and Legal Bases
- To operate and fulfil orders: including payment processing, shipping, and customer service (legal basis: performance of a contract).
- To communicate with you: about orders, support, and service updates (legal basis: legitimate interests).
- To send marketing communications: where you have opted in via our website or checkout (legal basis: consent).
- To analyse and improve our website: including aggregated reporting via Google Analytics 4 (legal basis: consent).
- To maintain business records: for auditing, compliance, and risk management (legal basis: legitimate interests).
- To prevent fraud or misuse: protecting our systems and payment integrity (legal basis: legitimate interests and legal obligation).
4. Providing Your Personal Data to Others
- We share data with our platform and hosting provider, Shopify, which operates as both data processor and controller under GDPR. Data may be stored by Shopify International Ltd (Ireland) and Shopify Inc (Canada). Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy.
- We use GoDaddy.com, LLC to host some elements of our website. See GoDaddy Privacy Policy.
- We may share limited data with professional advisers, payment providers (Shopify Payments, PayPal), and logistics partners (DHL Express) where necessary for order fulfilment and business administration.
- We may disclose information where legally required or necessary to protect our rights, comply with legal obligations, or defend against legal claims.
5. International Data Transfers
Your personal data may be transferred outside the UK and EEA for hosting or processing by Shopify or GoDaddy. Where this occurs, it is protected under:
- Standard Contractual Clauses approved by the European Commission; and/or
- Shopify’s Binding Corporate Rules and adequacy decisions for Canada.
Copies of relevant safeguards can be obtained from Shopify or GoDaddy’s published documentation.
6. Data Retention
We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. We periodically review our records and securely delete or anonymise data that is no longer needed.
7. Your Rights
You have the following rights under UK and EU data protection laws:
- Access to the personal data we hold about you;
- Correction of inaccurate or incomplete data;
- Erasure (“right to be forgotten”);
- Restriction or objection to processing in certain circumstances;
- Data portability; and
- Withdrawal of consent for marketing communications.
To exercise any of these rights, please contact us at customerservice@stepevi.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
8. Cookies
We use cookies to provide essential website functionality, improve performance, and support advertising and analytics. You can manage or withdraw your consent at any time through our cookie banner or your browser settings.
Cookies Used
- Shopify cookies: for checkout, cart management, and session security.
- Analytics cookies: Google Analytics 4 for website performance insights.
- Advertising cookies: Facebook Pixel and Google Ads for remarketing, via Simprosys integration.
- Preference cookies: to remember your cookie choices.
Blocking cookies may affect website functionality. For details on managing cookies, visit your browser’s help page.
9. Amendments
We may update this policy periodically by publishing a new version on our website. We will notify you by email or on-site notice if material changes occur.
10. Contact Details
STEPEVI LIMITED
Company No. 05409103
Registered Office: 274 King’s Road, London SW3 5AW, United Kingdom
Email: customerservice@stepevi.com
