Privacy Policy

TERMS AND CONDITIONS

What Step Next is fully committed to adherence of the General Data Protection Regulations (GDPR) following implementation on 25 May 2018, in relation to our collection and processing of your personal data.

This privacy statement aims to comply with the regulations by providing you with clear and concise information about what What Step Next does with your personal data. This information is available on our website and also provided with our quotation/invoice.

What we do 

What Step Next provides services as listed in our services page. We reserve the right to amend the range of these services. 

What we need from you 

What Step Next only collects and processes your personal data in a confidential and lawful way.

What Step Next directly collects personal data given by you, over the telephone, by email, video call or by face to face contact. Personal data includes your CV, application forms you have shared with us, notes taken during initial consultations and coaching sessions, your telephone number, email address and address.

Website Usage

What Step Next uses GoDaddy  to host the website. What Step Next does not collect personal data about you when you visit the website, however anonymous tracking data is collected and analysed by GoDaddy to help determine the effectiveness of advertising. As individuals cannot be identified by this data it is not considered to be covered by the General Data Protection Regulations.

Initial enquiry - Consent

During your initial enquiry by telephone or email, only personal data relevant to the provision of career and coaching services to you is requested. Consent is deemed to have been given, by you providing the requested personal data about yourself. To withdraw your consent and have your personal data deleted, you will need to contact What Step Next by email.  

Service Provision - Contract

Personal data given during the initial enquiry will be used to provide you with the contracted service. To fulfil the contracted service, additional relevant personal information may also be requested from you, by telephone, email, video call or face to face contact.

What we will do with it

Personal data is only used to provide you with career guidance, help and support through provision of a contracted service. Your personal data will be treated in the strictest confidence and is not shared with third parties. However it may be necessary to share records held for financial reporting and tax purposes with an accountant and/or HMRC.

All personal data held by What Step Next is stored securely in order to maintain confidentiality and minimise the risk that records may be viewed by people outside the company.

How long will we keep it

Personal data not used for providing a service is kept for 6 months, unless consent is withdrawn in which case it will be deleted immediately. (e.g. contact information)

Personal data given contractually is kept for 6 months after your last purchase of a service from the company.

Completed CV's and interview feedback forms are kept electronically for 12 months

Payment records for accountancy and HMRC purposes are retained for 7 years

All personal data exceeding the above timescales will be securely deleted.

What are your rights?

If at any point you believe the personal data What Step Next holds and processes about you is incorrect, you have the rights to see the data and have it corrected or deleted; in order to effect this you will need to contact What Step Next by email.

If you wish to raise a complaint regarding any of our consultants’ handling of your personal data, you will need contact What Step Next by email at hello@whatstepnext.co.uk. 

If you are not satisfied with the response from What Step Next regarding the above or you believe the processing of your personal data is not in accordance with the law, you have the right to lodge a complaint with the Information Commissioners Office.

Contact details

If you have any queries or questions about this privacy policy, please contact hello@whatstepnext.co.uk

This privacy statement was last updated April 2025