Privacy Policy

How we protect your data and respect your privacy

Introduction

Stepwise Recovery Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our website (stepwiserecovery.com). We are the data controller for information collected through our site.

Last updated: March 2026

Data Controller Details

Stepwise Recovery Ltd
Strawberry Fields Digital Hub
Euxton Lane
Chorley, Lancashire, PR25 5AU

What Data We Collect

We may collect personal data in the following ways:

Information you provide voluntarily

  • Your name and email address when contacting us
  • Any stories, feedback, or submissions you share with us
  • Information provided through contact forms or enquiry submissions

Technical data collected automatically

  • Your IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on the website
  • Referring website or source

Cookie data

Information stored through cookies and similar technologies (see our Cookies section below).

Important note on special category data

We do NOT collect special category (sensitive) data such as health or medical information through our website. Our self-assessment tools process all data entirely on your device and do NOT transmit or store any responses.

How We Use Your Data

We use your personal data for the following purposes:
  • To respond to your enquiries and correspondence
  • To improve our website and user experience
  • To analyse website traffic and usage patterns (anonymised data only)
  • To send updates and communications if you have opted in
  • To fulfil our legal obligations

Legal basis for processing

We process your personal data on the basis of:
  • Your consent (where you have explicitly agreed to processing)
  • Our legitimate interests (such as improving our services and protecting our website)
  • Legal obligation (where we are required by law to process your data)

Our processing is carried out in accordance with UK GDPR Article 6.

Self-Assessment Tools

IMPORTANT: Our self-assessment tools are designed with privacy at their core. All responses are processed entirely within your browser using client-side technology. No assessment data is transmitted to our servers, stored in any database, or accessible to us or any third party. Your results remain on your device only and are cleared when you close the page.

We have no ability to identify who has used these tools or what their results were. This approach reflects our commitment to the principle of anonymity that is central to recovery.

Key privacy features

  • Zero data transmission to our servers
  • No database storage of any assessment responses
  • No tracking or identification of tool users
  • Complete anonymity by design
  • Automatic deletion when browser session ends

Cookies

We use cookies and similar technologies to enhance your experience on our website. We use the following types of cookies:

Essential cookies

Required for the website to function properly. These cookies enable core functionality such as security and accessibility.

Analytics cookies

Help us understand how visitors use our website (anonymised data only). We use these to improve our services and user experience.

Preference cookies

Remember your settings and choices so you do not have to reconfigure them on repeat visits.

Your cookie choices

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. We will ask for your consent before placing non-essential cookies on your device.

For more information on managing cookies, visit aboutcookies.org.

Data Sharing

We do NOT sell, trade, or rent your personal data to third parties.

We may share your data with:

  • Service providers who assist with website hosting, analytics, and technical support (under strict data processing agreements)
  • Law enforcement authorities if required by law or legal process
  • Professional advisors such as legal and accounting professionals (under confidentiality obligations)

Any third-party data processors we work with are required to handle your personal data in accordance with UK GDPR requirements and our instructions.

Data Retention

We retain personal data only for as long as necessary for the purposes it was collected. Our retention periods are:

  • Contact form submissions: Retained for 12 months, then deleted
  • Email correspondence: Retained for 24 months
  • Analytics data: Anonymised and aggregated (not personally identifiable)
  • Self-assessment tool responses: Not stored or transmitted (processed on your device only)

You can request deletion of your personal data at any time by contacting us at privacy@stepwiserecovery.com.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: You can request a copy of your personal data (Subject Access Request)
  • Right to rectification: You can ask us to correct inaccurate data
  • Right to erasure: You can request deletion of your data (right to be forgotten)
  • Right to restrict processing: You can ask us to limit how we use your data
  • Right to data portability: You can request your data in a transferable format
  • Right to object: You can object to certain types of processing
  • Right to withdraw consent: You can withdraw your consent to processing at any time

How to exercise your rights

To exercise any of these rights, please contact us at privacy@stepwiserecovery.com. We will respond to your request within one month of receipt.

Complaint to the ICO

If you are not satisfied with our response to your request or how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Website: ico.org.uk
Helpline: 0303 123 1113

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encrypted connections (SSL/TLS) for data in transit
  • Secure hosting with industry-standard security protocols
  • Access controls and authentication requirements
  • Regular security reviews and updates
  • Staff training on data protection and security

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data, and any transmission is at your own risk.

International Transfers

We primarily process personal data within the United Kingdom. If any personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. This includes using Standard Contractual Clauses or other lawful mechanisms approved by the UK authorities.

Children's Privacy

Our website is intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected personal data from a minor, we will take steps to delete it promptly. Parents or guardians who believe their child has provided personal data to us should contact us immediately at privacy@stepwiserecovery.com.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this policy periodically to stay informed of how we protect your privacy.

Your continued use of the website following the posting of revised terms means you accept and agree to the changes.

Get in Touch

If you have questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us using the details below:

Privacy Enquiries

General Enquiries

Data Protection Complaints

Information Commissioner’s Office
ico.org.uk

ICO Helpline

UK Crisis Support Services

Samaritans

116 123

Frank (Drug Support)

0300 123 6600

Narcotics Anonymous UK

0300 999 1212

SHOUT (Crisis Text)

Text 85258

Added to basket Go to checkout →

Join the waitlist to be emailed when this product becomes available

Join the waitlist to be emailed when this product becomes available