Privacy Policy

This policy explains what personal information Little Steps collects, why, and what rights you have over it. We keep it to what we need to sell and deliver the kit, look after you as a customer and, only with your permission, tell you about new stories.

Who we are

Little Steps is run by [TO COMPLETE: your full legal name], a sole trader based in the United Kingdom, trading as Little Steps. We are the "controller" of your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Business address: [TO COMPLETE: business address] Email: littlestepsfounders@gmail.com

What we collect

• Purchase details: your name, email address, billing country and what you bought. Payments are handled by Stripe. We never see or store your full card details.
• Account and access details: the email address we use to give you access to the kit, and records of when you accessed it.
• Email list: your email address and first name, if you choose to join our mailing list.
• Messages: anything you send us when you get in touch, for example by email.
• Website and advertising data: with your consent, cookies and similar technologies collect information such as the pages you visit, your device and browser, and whether you came from or went on to buy after seeing one of our adverts.

Information about your child

Little Steps is bought and used by parents and carers. We don't ask for information about your child, and we ask you not to send us details about your child's health or diagnosis. If you choose to share something in a message, we'll use it only to reply to you and won't keep it longer than we need to.

Why we use it, and our legal basis

• To process your order, give you access to the kit and send receipts and service emails: to perform our contract with you.
• To keep tax and accounting records: to meet our legal obligations.
• To answer your questions and handle refunds: to perform our contract, or our legitimate interest in looking after customers.
• To send you news, tips and offers by email: your consent. You can unsubscribe at any time using the link in every email.
• To measure our adverts and show relevant adverts on Meta (Facebook and Instagram) and TikTok: your consent, given through our cookie banner.
• To keep our website secure and working: our legitimate interest.

Who we share it with

We share information only with providers who help us run Little Steps, under contracts that require them to protect it: - Stripe, for payments - Kit (ConvertKit), for our mailing list and service emails - Meta and TikTok, for advertising measurement, only if you consent - our website hosting provider

We don't sell your personal information. We may share it if the law requires us to.

International transfers

Some of these providers are based in, or store data in, the United States or other countries outside the UK. Where this happens, the transfer is protected by safeguards recognised under UK law, such as the UK–US data bridge or the UK International Data Transfer Addendum.

Cookies and similar technologies

We use a small number of cookies that are strictly necessary for the website and checkout to work. These don't need your consent.

Advertising cookies and pixels (from Meta and TikTok) are used only if you accept them in our cookie banner. You can change your choice at any time from the cookie settings link at the bottom of every page.

How long we keep it

• Purchase and tax records: 6 years after the end of the tax year of your purchase, as HMRC requires.
• Access details: for as long as you have access to the kit.
• Mailing list: until you unsubscribe. After that, we keep just your email address on a suppression list so we don't contact you again.
• Messages: up to 2 years after our last contact, unless we need them for an open matter.

Your rights

You have the right to: - ask for a copy of the information we hold about you - ask us to correct or delete it - object to, or ask us to restrict, how we use it - ask for it to be transferred to you or someone else - withdraw your consent at any time, without affecting anything done before

To use any of these rights, email littlestepsfounders@gmail.com. We'll reply within one month.

Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We'll update this page if anything changes, and show the date of the latest version at the top.