Privacy Policy

Step by Step Financial Solutions Ltd
Website: www.sbsfinance.co.uk
Address: Solent Business Centre, Unit 314, 343 Millbrook Road West, Southampton SO15 0HW
Email: info@sbsfinance.co.uk

1. Who we are (Data Controller)

This privacy notice explains how Step by Step Financial Solutions Ltd (“we”, “us”, “our”) collects and uses personal data when you use our website or interact with us. For data protection purposes, we are the Data Controller for personal data processed via www.sbsfinance.co.uk.

If you have questions about this notice or how we handle your data, contact us at info@sbsfinance.co.uk.

2. Scope of this notice

This notice covers all information we collect about you, whether it can identify you directly (personal data) or indirectly (usage data). We are committed to protecting your privacy and confidentiality and to using your information only for purposes you would reasonably expect.

This policy complies with applicable UK law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. What information we collect

We may collect and process the following categories of data:

Basic identification and contact information: name, email address, phone number, and any details you provide in contact forms.
Business information: information you provide in the course of enquiries or as part of a client relationship.
Technical and usage data: IP address, device type, browser type, pages viewed, time on site, and navigation paths (see section 7 on analytics).
Communications data: records of correspondence (e.g., emails, support messages, complaints).
Recruitment data (if you apply for a job): CV/resumé, cover letter, interview notes.

We do not intentionally collect special category data via the website unless you choose to provide it, and we ask that you avoid submitting sensitive information through general contact forms.

4. How we use your information and legal bases

We use your information for the following purposes under these legal bases:

To provide services and respond to enquiries (performance of a contract or steps prior to entering into a contract; legitimate interests to operate our business).
To verify identity and maintain security (legitimate interests; legal obligations).
To operate and improve our website (legitimate interests in running an effective, secure site and understanding usage).
To send service updates and information you requested (performance of a contract; legitimate interests).
Marketing communications (consent where required; you can withdraw consent at any time).
Compliance and record keeping (legal obligations; legitimate interests).

We do not sell your personal data.

5. Market-place / third-party services via our site

If you provide information so that we can facilitate a service offered by a third party, you authorise us to share the necessary data with that third party for that purpose.

6. Email, phone and office communications

Emailing us: Email is not always a secure transmission channel. Please avoid including sensitive information in unencrypted emails.
Phone calls: We may collect Calling Line Identification (CLI) to help improve efficiency and service quality. We do not share this information with third parties.

7. Cookies and analytics

Our website uses cookies. Please see our Cookie Policy for details.
We use Google Analytics to collect aggregated, anonymised statistics (e.g., number of visits, pages viewed, time on site). While Google Analytics may process your IP address to approximate location, we do not use it to identify you. You can control cookies via your browser settings and opt-out tools. Blocking certain cookies may affect site functionality.

8. Information you post or provide for publication

If you provide content intended to be read, copied, downloaded, or used by others (e.g., comments), you are responsible for the information shared. We cannot control how third parties may use content you make publicly available.

9. Website usage information

We may use software (such as JavaScript) to understand how you navigate our site—pages viewed, how you reached them, actions taken, and time spent. This information helps us improve our content and services and is not used to identify you personally.

10. Business and client information

Information provided in the course of a business relationship (as a client or prospective client) will be kept confidential and used solely for the purpose of providing services and maintaining our relationship. We generally keep records for at least six years where required for legal, tax, or contractual reasons.

11. Third-party advertising and links

Third parties may advertise or be linked from our site. Those parties may use cookies or similar technologies over which we have no control. This privacy notice does not cover their practices. Please review their privacy policies.

12. Who we share data with

We may share data with:

Service providers / processors who support our website and IT (e.g., hosting, analytics), under contracts that require them to protect your data and use it only on our instructions.
Professional advisers (legal, compliance) when necessary.
Authorities if required by law or to protect legal rights.

We do not rent or sell your personal data.

13. International transfers

Our website is hosted within the UK/EU. Some service providers may process data in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place (e.g., UK-approved standard contractual clauses) to protect your data.

14. Security

We implement appropriate technical and organisational measures to protect personal data. However, no system is completely secure. You are responsible for safeguarding your own login credentials (if applicable) and for logging out and clearing browser data on shared devices.

15. Your rights

Under UK data protection law, you have rights which may include:

Access to your personal data;
Rectification of inaccurate or incomplete data;
Erasure (“right to be forgotten”) in certain circumstances;
Restriction of processing in certain circumstances;
Data portability (receipt of your data in a structured, commonly used format);
Object to processing based on legitimate interests or to direct marketing;
Withdraw consent where processing relies on consent.

To exercise any rights, contact info@sbsfinance.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk) if you are unhappy with how we handle your data.

16. Retention

We keep personal data only as long as necessary for the purposes set out in this notice and to meet legal, tax, accounting, or reporting requirements. Typical retention for business records is six years, unless a longer or shorter period is required or permitted by law.

17. Accuracy of website content

We try to ensure the information on our website is accurate and up to date, but we do not guarantee it will always be free from errors or omissions.

18. No financial advice

No information on our website constitutes financial advice. If you require financial advice, please contact us directly.

19. Complaints handling

If you submit a complaint, we will process the information you provide to investigate and resolve the issue. We may need to share limited information with relevant third parties to address your complaint, but only where necessary.

20. Recruitment

If you submit a job application, we may retain your application for up to three years. If employed, we process your personal data for employment purposes and typically retain employment files for six years after employment ends.

21. Changes to this notice

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new “Effective date”.

22. Contact us

If you have any questions about this Privacy Policy or your personal data, please contact:
Email: info@sbsfinance.co.uk
Address: Step by Step Financial Solutions Ltd, Solent Business Centre, Unit 314, 343 Millbrook Road West, Southampton SO15 0HW