Legal

Privacy Policy

Last updated: July 2026

This policy explains what personal information Her Best Steps collects, why we collect it, and the choices you have. We handle your information in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Her Best Steps is a Community Interest Company registered in England and Wales, registered office 25 Clarendon Road, Redhill, Surrey, RH1 1QZ. For anything to do with your information, contact us at partnerships@herbeststeps.com. We are the data controller for the information described here.

What we collect

• Waitlist and enquiries. When you join our waitlist or contact us, we collect the details you give us, such as your name, email address and anything you choose to tell us.
• Events. If you attend one of our events, we may collect the information on your consent form, and, only where you agree, anonymous notes or quotes from the day.
• Website use. Basic technical information your browser sends, and any analytics we use to understand how the site is used.

Why we use it, and our lawful basis

• To respond to you, keep you updated about events and our work, and run those events. Our basis is usually your consent, or our legitimate interest in running the organisation.
• To understand what young women need, so we can shape our programmes. Where this involves anything you shared at an event, we rely on your consent, and we keep it anonymous.
• To meet our legal and safeguarding responsibilities.

Special category and safeguarding information

Some of what people share with us is sensitive. We only record what we need, we keep it secure and confidential, and we share it only with those who need to know. If we are ever worried about someone's safety, we may share information with the appropriate support or statutory services. Our safeguarding approach is set out in our safeguarding statement.

Who we share it with

We do not sell your information. We share it only with trusted services that help us operate (for example, the tools we use to run our waitlist and email), and with statutory or specialist services where safeguarding or the law requires it.

How long we keep it

We keep your information only for as long as we need it for the purpose we collected it, and then we delete it securely. Safeguarding records are kept in line with our safeguarding policy.

Your rights

You have the right to ask for a copy of your information, to correct it, to ask us to delete it, to object to or restrict how we use it, and to withdraw consent at any time. To do any of these, email partnerships@herbeststeps.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

If we use cookies or analytics, we will tell you and, where required, ask for your agreement first. You can control cookies through your browser settings.

Changes

We may update this policy from time to time. The date at the top shows when it was last changed.

This is a plain-English policy template. Please have it reviewed to confirm it fits exactly how you handle data before you rely on it.