Stepwise Recovery Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our website (stepwiserecovery.com). We are the data controller for information collected through our site.
Last updated: 11 October 2026
Stepwise Recovery Ltd
Strawberry Fields Digital Hub
Euxton Lane
Chorley, Lancashire, PR7 1PS
Information stored through cookies and similar technologies (see our Cookies section below).
Some information you choose to share with us can reveal details about your health, including your recovery. This happens, for example, when you send us your recovery story, take part in an interview, or tell us about your situation. This is special category data under UK GDPR. We only collect it when you give your explicit consent, and you can withdraw that consent at any time by emailing [email protected]. Withdrawing consent does not affect anything we did before. Please do not include health details in general enquiry or contact forms.
Our processing is carried out in accordance with UK GDPR Article 6.
IMPORTANT: Our self-assessment tools are designed with privacy at their core. All responses are processed entirely within your browser using client-side technology. No assessment data is transmitted to our servers, stored in any database, or accessible to us or any third party. Your results remain on your device only and are cleared when you close the page.
We have no ability to identify who has used these tools or what their results were. This approach reflects our commitment to the principle of anonymity that is central to recovery.
Help us understand how visitors use our website. We use Google Analytics 4 with Google Consent Mode: it sets analytics cookies only after you accept statistics cookies in our cookie banner. Before you choose, or if you decline, it sends Google limited cookieless signals (such as the page visited and basic device information) without setting cookies. Our cookie policy lists every cookie we use.
You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. We will ask for your consent before placing non-essential cookies on your device.
For more information on managing cookies, visit aboutcookies.org.
We do NOT sell, trade, or rent your personal data to third parties.
We use the following service providers to run our website and services. Each one handles personal data to provide its service to us. Some, such as Stripe, PayPal and Google, also act as independent controllers under their own privacy notices:
We may also share your data with law enforcement authorities if required by law, and with professional advisers such as lawyers and accountants under confidentiality obligations.
We retain personal data only for as long as necessary for the purposes it was collected. Our retention periods are:
You can request deletion of your personal data at any time by contacting us at [email protected].
Under UK GDPR, you have the following rights in relation to your personal data:
If you are not satisfied with our response to your request or how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Website: ico.org.uk
Helpline: 0303 123 1113
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data, and any transmission is at your own risk.
Our website is hosted in the United Kingdom. Some of our service providers (including Google, Mailchimp, Slack, monday.com, Stripe and PayPal) may process data in the United States or elsewhere outside the UK. We use Make.com’s European region. Where data leaves the UK, we make sure it is protected by a safeguard recognised under UK data protection law, such as the UK-US data bridge for certified providers, the UK International Data Transfer Addendum, or UK adequacy regulations.
Our website is intended primarily for adults, but we publish resources designed for young people — the Foundations Edition (ages 16–25) and the Children’s Companion (ages 8–12, designed to be shared with a trusted adult) — and we design our services with those readers in mind.
Purchases may only be made by individuals aged 18 or over. In line with UK data protection law, we do not knowingly collect personal data from children under 13, and our forms, newsletter and waitlists are intended only for those aged 13 or over. If you are under 13, please ask a parent or guardian to contact us on your behalf.
If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will delete it promptly. Parents or guardians who believe their child has provided personal data to us should contact us at [email protected].
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this policy periodically to stay informed of how we protect your privacy.
Your continued use of the website following the posting of revised terms means you accept and agree to the changes.
Information Commissioner’s Office
ico.org.uk
Free, 24/7, no judgement
Free drug advice, 24/7
Peer support, 10am–midnight
Free text support (UK)
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
