This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

The
Step Legal Limited Data Controller is Mr Abid Hussain.

Step Legal Limited is committed to protecting and respecting your privacy and rights. As such, we observe UK data protection legislation. This Privacy Notice sets out the different ways in which we collect, manage, process, store and share information about you. It also provides information about how you can control the use of your data.

What information do we collect?

As a necessary part of our business, we collect and manage client and non-client
data. We do this so that we can:

• Administer our
  relationship with you and provide services
• Respond to
  enquiries
• Facilitate business
  development including sending legal updates
• Process employment
  applications
• Send requested
  information to you about our services and our subsidiaries
• Ensure the billing
  of any services and obtain payment
• Process and respond
  to any complaints
• Meet the legal and
  other regulatory obligations imposed on us
• Audit usage of our
  websites.

We also process sensitive classes of information that includes:

• Physical or mental
  health details, and
• Racial or ethnic origin.

We will seek your permission if we need to record any of your sensitive personal data on our systems.

Howdo we collect this information?

We collect this information in a number of different ways. For example:

Data Collection

You may provide this data to us online, over the telephone, or by letter. Where
appropriate we may voice record our interactions with you. Should we do this;
any information captured will automatically be stored, for training and
monitoring purposes.

Cookies

When you visit our websites, cookies will be used to collect information about you.
This could include your Internet Protocol (IP) address, the pages you viewed or
searched for, etc. We do this so that we can measure the performance of our
websites and make improvements.

Cookies are also used to enhance this website’s functionality and personalisation,
which includes sharing data with third-party organisations. You can control
this by adjusting your cookies settings.

You can opt out of cookies by visiting the Network Advertising Initiative opt-out page at http://optout.networkadvertising.org/?c=1#!/

How do we use your information?

We use the data collected from you for the specific purposes listed below. The
following table includes the legal basis for processing your data and in what
circumstances , if any, your data will be shared with a third-party organisation.

Purpose for processing data

To administer our relationship with you, to provide services, and to respond to
enquiries

• Legal Basis – To meet the
  requirements of a contract and provide you with the requested information
• Third party organisations with which data is shared – None without your consent –
  see list of potential third parties provided to you.

To bill for services and obtain payment

• Legal Basis – To meet the requirements of a contract
• Third party organisations with which data is shared – Government VAT and tax inspectors, external auditors, internal auditors.

To communicate with you about legal updates, news, and events that are relevant to
your interests and in line with your preferences.

• Legal Basis – Explicit consent will be sought prior to sending this information
• Third party organisations with which data is shared – None.

To provide support by telephone (includes recording conversations for monitoring
and quality purposes)

• Legal Basis – To fulfil contractual obligations before and during a contract
• Third party organisations with which data is shared – None.

To process and respond to complaints

• Legal Basis – To meet a legal obligation
• Third party organisations with which data is shared – None.

To monitor and record information relating to the use of our services and website

• Legal Basis – To meet a legitimate interest in order to improve the services and experience we provide
• Third party organisations with which data is shared -Web service providers and cookie providers.

To monitor and record information relating to the use of our services and website

• Legal Basis – To meet a legitimate interest in order to improve the services and experience we provide
• Third party organisations with which data is shared -Web service providers and cookie providers.

To capture photographs and videos to be used in marketing and promotional material
for our firm

• Legal Basis – Explicit consent will be sought prior to collecting and using this information
• Third party organisations with which data is shared – None.

To ensure our offices and stored information is secure

• Legal Basis – To meet the requirements of a contract
• Third party organisations with which data is shared – IT and security providers.

To conduct HR administration including assessing suitability, eligibility and/or
fitness to work

• Legal Basis – To fulfil contractual obligations before and during entering into a contract
• Third party organisations with which data is shared – Disclosure and Barring Service.

Step Legal Limited is not aware of any valid reasons that would constitute a legitimate reason for objecting to the way we process or control your personal information. None of the information that we collect, process or store is transferred outside of the European Economic Area (EEA). This includes data that is exchanged with the third-party organisations described above.

Understanding your rights

Under current UK data protection legislation, you have the following rights regarding the information we collect, process and store about you:

• Right to be informed. This Privacy Notice, together with our Cookies Policy, fulfils our legal obligation to tell you about how we use your information
• Right to access. You have the right to ask for a copy of any personal data that we hold about you. Except in exceptional circumstances (which we will discuss with you), we will provide this information free of charge. We will send you a copy of this information within 30 days of your request. To make a Subject Access Request, please write to our Data Protection Officer at 213-215 Nantwich Road, Crewe, Cheshire, CW2 6DA.
• Right to rectification. If any of the information that we hold about you is inaccurate, you can contact us on 01270 254064 or contact our Data Protection Officer via email at  AbidHussain@steplegal.co.uk
• Right to be forgotten. You can ask that we erase all the personal information we hold about you. Where it is appropriate your request will be fully actioned within 30 days. For further information, please contact us on 01270 254064 or contact our Data Protection Officer via email at  AbidHussain@steplegal.co.uk
• Right to object. You have the right to object to withdrawing your consent for any purpose listed above for which consent is identified as the lawful basis for processing. You can do this at any time. However, we have the right to the continued use of your data for any purpose listed above for which the lawful basis of processing is that it has been deemed legitimate
• Right to restrict processing. You can ask us to restrict the use of your data for any of the following reasons. To do this, please contact us on 01270 254064 or contact our Data Protection Officer via email at AbidHussain@steplegal.co.uk
• You think it is inaccurate but this will take time to validate
• You believe our data processing is unlawful but you do not want your data erased
• You want us to retain your data in order to establish a legal claim
• You have objected to the processing of your data, but we have yet to conclude whether this is appropriate
• Right to data portability. If you want to move, copy or transfer the electronic personal data that we hold about you to another organisation, please contact us on 01270 254064 or contact our Data Protection Officer via email at AbidHussain@steplegal.co.uk
• Rights related to automated decision-making. If you want to object to automated decision making without any individual involvement, and to the profiling of your data, please contact us on 01270 254064 or contact our Data Protection Officer via email at AbidHussain@steplegal.co.uk

How long do we retain your information for? Step Legal Limited  typically retains information for a period of seven years. This is due to regulatory reasons and ensures that our business records maintain the necessary levels of insurance to protect our clients and non-clients .

Data privacy and security

At Step Legal Limited, we seek to protect the availability, confidentiality and
integrity of all our data. As such, we make data protection a crucial
consideration of all new and existing IT systems. Where any concerns, risks or
issues are identified, we conduct impact assessments to determine any actions
that are necessary to ensure the required privacy levels are maintained.

This
helps us to:

• Protect against confidentiality breaches
• Protect against damage, loss and misuse
• Ensure everyone within our business has an awareness and understanding of the requirements of information security; including their specific responsibilities
• Ensure the optimum security of our websites.

General

Questions and comments regarding this Privacy Notice are welcomed and should be sent to
our Data Protection Officer at AbidHussain@steplegal.co.uk

Alternatively,
you can write to our Data Protection Officer at 213-215 Nantwich Road, Crewe,
Cheshire, CW2 6DA.

You
can also contact our Data Protection Officer if you have any concerns or
complaints about the ways in which your personal data has been handled as a
result of you using this website.

Contact us

If you have any questions, concerns or complaints about our Privacy Policy, our
practices or our Services, you may contact us by the following means:

By Mail

Step
Legal Limited
213-215 Nantwich Road
Crewe, Cheshire
CW2 6DA

By Email

AbidHussain@steplegal.co.uk

By Phone

01270
254064

We will respond to all requests, inquiries or concerns within 7 days.