The Step-Up Hub

Last Updated: June 2026

The Step-Up Hub is a marketing, communications, training and digital skills consultancy operated by Linzi Jones ("we", "us", or "our").

We are committed to protecting your privacy and handling your personal information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Step-Up Hub

Email: info@thestep-uphub.co.uk

Website: https://thestep-uphub.co.uk

ICO Registration Number: ZB662061

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

We may collect and process the following information:

• Name
• Email address
• Telephone number
• Organisation name
• Job title
• Billing information
• Information provided through contact forms, emails, enquiries, bookings or consultations
• Information provided when attending training, workshops, mentoring or consultancy sessions

In some circumstances, clients may share information relating to staff, volunteers, service users, beneficiaries, project participants or stakeholders. We only process such information where necessary to deliver agreed services and in accordance with applicable data protection legislation.

If you subscribe to our newsletter, download resources, register for events or request updates, we may collect:

• Name
• Email address
• Marketing preferences

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited
• Time spent on pages
• Referring websites
• Website usage data collected through cookies and analytics tools

We use personal information to:

• Respond to enquiries and requests
• Deliver consultancy, mentoring and training services
• Manage bookings and registrations
• Process payments and issue invoices
• Provide resources, guides and materials you have requested
• Manage client relationships
• Improve our website, services and user experience
• Send newsletters and marketing communications where you have consented
• Meet legal, financial and regulatory obligations

Under UK GDPR, we rely on the following lawful bases:

Where processing is necessary to provide services you have requested, including:

• Consultancy projects
• Training courses and workshops
• Mentoring and coaching
• Paid products and services

Where processing is necessary for our legitimate business interests, including:

• Responding to enquiries
• Managing client relationships
• Improving our services
• Website administration and security
• Business development activities

Where you have given clear consent for us to:

• Send marketing communications
• Add you to our mailing list
• Use non-essential website cookies

You can withdraw consent at any time.

Where we are required to retain information for:

• Tax and accounting purposes
• Regulatory compliance
• Legal claims or disputes

If you subscribe to our newsletter or request updates from us, we may send occasional emails relating to:

• Training opportunities
• Events and workshops
• Resources and guides
• Consultancy services
• Business updates
• Relevant news and insights

You can unsubscribe at any time by clicking the unsubscribe link included in our emails or by contacting us directly.

We do not sell, rent or trade your personal information.

We may share information with trusted third-party service providers who help us operate our business and deliver our services, including:

• GoDaddy – website hosting, website management and email services
• Stripe – payment processing
• Zoom – online meetings, training sessions and consultations
• Microsoft – email, document management and cloud storage
• FreeAgent – accounting and financial administration
• Mettle – business banking services
• Google Analytics – website analytics and performance monitoring

These providers only process information necessary to deliver their services and are expected to protect personal information appropriately.

We may also disclose information where required by law or to protect our legal rights.

Some of our service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we ensure appropriate safeguards are in place, including:

• UK adequacy regulations
• International Data Transfer Agreements (IDTAs)
• Standard Contractual Clauses (SCCs)
• Other recognised legal transfer mechanisms

We take reasonable steps to ensure your information remains protected regardless of where it is processed.

We only keep personal information for as long as necessary.

Typical retention periods include:

Information TypeRetention PeriodGeneral enquiriesUp to 24 monthsNewsletter subscribersUntil you unsubscribeClient project recordsUp to 7 yearsFinancial and accounting records7 yearsTraining attendance recordsUp to 7 years

Information that is no longer required will be securely deleted or anonymised.

Our website uses cookies and similar technologies to:

• Ensure the website functions correctly
• Improve website performance
• Understand how visitors use our website
• Monitor and improve user experience
• Support marketing and advertising activities

We use Google Analytics to collect anonymised information about website usage, including:

• Pages visited
• Time spent on pages
• Traffic sources
• Device and browser information

This information helps us improve our website and services.

You can manage cookie preferences through your browser settings and our cookie consent banner.

For more information, please see our Cookie Policy.

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Restrict how we process your information
• Object to certain types of processing
• Request transfer of your information to another provider
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided above.

We take appropriate technical and organisational measures to protect personal information from:

• Unauthorised access
• Loss
• Misuse
• Disclosure
• Alteration
• Destruction

While no online system can guarantee absolute security, we take reasonable steps to ensure information is stored and processed securely.

Our website may contain links to external websites.

We are not responsible for the privacy practices or content of external websites and encourage you to review their privacy policies before providing any personal information.

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO).

Information Commissioner's Office

Website: https://ico.org.uk

Telephone: 0303 123 1113

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or business practices.

Any updates will be published on this page and the revised version will take effect immediately upon publication.

We encourage you to review this policy periodically.