How we look after your information
Short version: we only collect what we need to reply to you and send you what you've bought. We don't sell it, and this site doesn't use tracking cookies.
Who we are
Kithstep is run by Victoria Hewitt in West Lancashire. For anything about your personal information, email hello@kithstep.co.uk.
What we collect and why
| When | What | Why we're allowed to |
|---|---|---|
| You fill in the contact form or email us | Your name, email, organisation (if you give one) and your message | To answer you. This is in our legitimate interest, and you've asked us to. |
| You buy a pack, subscribe or get a free copy | Your name, email, what you got and when. Your email and the date are printed on each page of your PDF. | To send you the files, manage your subscription and stop the packs being shared beyond their licence. This is needed for the contract between us, and is in our legitimate interest. |
| Your organisation pays by invoice | Contact details for the person dealing with the invoice | To get paid and keep proper accounts, which the law requires. |
| You join the free pilot | Your feedback, and a quote if you agree to give one | To improve the packs. We only publish a quote with your permission. |
Please don't send us details about the young people you support. We don't need them, and we'll delete them if they arrive.
Who else sees it
- Netlify hosts this website and receives contact form messages.
- Google Fonts supplies the lettering on this site. When a page loads, your browser asks Google for the font files, which shares your IP address with Google. Google says it doesn't use this to build profiles of you.
- Payhip handles online sales and subscriptions, with card payments processed by Stripe or PayPal. They act under their own privacy policies for payment details. We never see your full card number.
- Our email provider, which stores the emails we send and receive.
- An accountant, if we use one, for our records.
Some of these companies store information outside the UK, including in the United States. Where that happens they use safeguards approved under UK data protection law, such as the UK's international data transfer agreement or addendum.
How long we keep it
- Enquiries that don't lead to a sale: up to two years, then deleted.
- Sales and invoice records: six years, because tax law requires it.
- Pilot feedback: until the pilot review is finished, unless you've agreed we can use a quote.
Cookies
This website doesn't use advertising or tracking cookies, and it doesn't use analytics. The checkout pages run by Payhip may use cookies needed for payments to work. You'll see their notice when you get there.
Your rights
You can ask to see the information we hold about you, have it corrected or deleted, object to how we use it, or ask us to stop using it. Email hello@kithstep.co.uk and we'll reply within a month.
If you're not happy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Last updated October 2026.