Privacy Policy

Last Updated

March 24th, 2025

At StepUpp Ventures, accessible from www.stepuppventures.com, we are committed to protecting your personal data and ensuring your privacy is respected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). This Privacy Policy explains what information we collect, how we use it, and your rights.

1. INTRODUCTION

StepUpp Ventures, a company under the corporate entity LD&R Group Ltd, 101 Cavendish Street, W1W 6XH, London ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.stepuppventures.com (the "Website") or use our services.

This Privacy Policy applies to our Website and services. We are the data controller for the purposes of UK data protection law.

Please read this Privacy Policy carefully. By using our Website or services, you acknowledge that you have read and understood this Policy.

If you have any questions about this Privacy Policy, please contact us at info@stepuppventures.com with Privacy Policy as Subject.

2. INFORMATION WE COLLECT
2.1 Personal Information

We may collect the following types of personal information:

  • Contact information: Name, email address, postal address, telephone number
  • Professional information: Company name, job title, business contact details
  • Website usage data: IP address, browser type, device information, pages visited, time spent on pages
  • Communication records: Records of correspondence with us
  • Marketing preferences: Your preferences regarding marketing communications
2.2 Special Categories of Personal Data

We do not generally collect special categories of personal data (such as health information, political opinions, or religious beliefs) unless specifically required for our services and with your explicit consent.

3. HOW WE COLLECT YOUR INFORMATION

We collect personal information in the following ways:

  • Directly from you when you:
    • Contact us via our Website, email, or phone
    • Subscribe to our newsletter or marketing communications
    • Attend our events or webinars
    • Use our services
  • Automatically when you use our Website through:
    • Cookies and similar tracking technologies
    • Web analytics tools
    • Server logs
  • From third parties such as:
    • Business partners and referral sources
    • Publicly available sources
    • Data providers (where we have confirmed they have appropriate consent)
4. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we process your personal information based on one or more of the following legal bases:

  • Consent: Where you have given clear consent for us to process your personal information for specific purposes
  • Contract: Where processing is necessary for the performance of a contract with you
  • Legitimate interests: Where processing is necessary for our legitimate business interests and does not override your fundamental rights
  • Legal obligation: Where processing is necessary to comply with legal requirements
  • Vital interests: Where processing is necessary to protect someone's life (rarely applicable)
5. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

5.1 Service Delivery
  • To provide and maintain our services
  • To process transactions and manage billing
  • To communicate with you about our services
  • To provide customer support

Legal basis: Contract, Legitimate interests

5.2 Marketing and Communications
  • To send you marketing communications about our services (with consent)
  • To keep you informed about industry news and updates
  • To invite you to events and webinars

Legal basis: Consent, Legitimate interests

5.3 Website and Service Improvement
  • To analyse how our Website and services are used
  • To improve our Website functionality and user experience
  • To develop new services

Legal basis: Legitimate interests

5.4 Legal and Compliance
  • To comply with legal obligations
  • To protect our rights and interests
  • To prevent fraud and ensure security

Legal basis: Legal obligation, Legitimate interests

6. COOKIES AND SIMILAR TECHNOLOGIES

Our Website uses cookies and similar technologies to:

  • Essential cookies: Enable basic Website functionality
  • Analytics cookies: Help us understand how visitors use our Website
  • Marketing cookies: Allow us to show relevant advertisements

You can control cookies through your browser settings. However, disabling certain cookies may affect Website functionality.

7. SHARING YOUR INFORMATION

We may share your personal information with:

7.1 Service Providers

We work with trusted third-party service providers who process personal information on our behalf, including:

  • [INSERT LIST OF KEY SERVICE PROVIDERS, E.G., WEB HOSTING, EMAIL MARKETING, CRM SYSTEMS]
  • IT support and maintenance providers
  • Professional advisers (lawyers, accountants, consultants)
7.2 Legal Requirements

We may disclose your information when required by law or to:

  • Comply with legal proceedings or government requests
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activity
7.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, personal information may be transferred as part of the transaction.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

8. INTERNATIONAL TRANSFERS

Some of our service providers may be located outside the UK. When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the UK government
  • Standard Contractual Clauses approved by the UK authorities
  • Appropriate certification schemes
9. DATA RETENTION

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless:

  • A longer retention period is required by law
  • You have consented to longer retention
  • We need to retain the information for legal claims

Typical retention periods:

  • Customer data: 6 YEARS AFTER RELATIONSHIP ENDS
  • Marketing data: Until you unsubscribe or object to processing
  • Website analytics: 3 YEARS
10. YOUR RIGHTS

Under UK data protection law, you have the following rights:

10.1 Right of Access

You can request a copy of the personal information we hold about you.

10.2 Right to Rectification

You can ask us to correct inaccurate or incomplete personal information.

10.3 Right to Erasure

You can request deletion of your personal information in certain circumstances.

10.4 Right to Restrict Processing

You can ask us to limit how we use your personal information in certain situations.

10.5 Right to Data Portability

You can request your personal information in a commonly used format for transfer to another organisation.

10.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

10.7 Rights Related to Automated Decision-Making

You have rights regarding automated decision-making and profiling (if applicable).

10.8 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

To exercise your rights, please contact us using the details in Section 13.

11. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal information against:

  • Unauthorised access or disclosure
  • Accidental loss or destruction
  • Unlawful processing

Security measures include:

  • Encryption of data in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. DATA BREACH NOTIFICATION

In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, we will notify you without undue delay, and no later than 72 hours after becoming aware of the breach.

13. CONTACT INFORMATION AND COMPLAINTS
13.1 Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

StepUpp Ventures Data Protection Officer: DATA PROTECTION TEAM Email: info@stepuppventures.com Address: 101 Cavendish Street, W1W 6XH

13.2 Complaints

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO) Website: https://ico.org.uk/make-a-complaint/ Phone: 0303 123 1113 Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will:

  • Post the updated Privacy Policy on our Website
  • Notify you of material changes by email (where we have your email address)
  • Update the "Last updated" date at the top of this Policy

Your continued use of our Website or services after changes become effective constitutes acceptance of the updated Privacy Policy.

15. CHILDREN'S PRIVACY

Our Website and services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are under 16, please do not provide any personal information through our Website.

  • Bullet Item
  • Bullet Item
  • Bullet Item
Back to Home