StepChange Ltd. Privacy Policy

This Privacy Policy was last updated on 24th May 2018.

Please contact us if you have any questions about our privacy policy or information we hold about you

by email:           

or write to us at:         Data Protection Officer,  StepChange Ltd., Kinnitty, Thormanby Road, Howth, Co. Dublin D13 CV63

StepChange is committed to protecting and respecting your privacy.

It is the intention of this privacy statement to explain to you the information practices of StepChange in relation to the information we collect about you and other users.

For the purposes of the GDPR the data controller is:

  •  StepChange Limited
  •  Phone: 01 8396972
  •  Email:

Please read this Statement carefully as this sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.


Purpose for processing your data


Why do StepChange need to collect and store personal data?

StepChange is a business-to-business agency that collects and stores personal contact details of individuals within client businesses. This enables StepChange to maintain contact with individuals and with some clients and business contacts, to send them the StepChange monthly newsletter and occasional flyers.

How will StepChange use the personal data it collects about me?

StepChange will process (collect, store and use) the information you provide in a manner compatible with the EU’s General Data Protection Regulation (GDPR). We will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary.

StepChange will hold the data you provide when you subscribe to its Newsletter for the purposes of emailing the StepChange monthly newsletter to you and occasional flyers. You do not need to provide your name and company name for this purpose only your email address. StepChange will not share the data provided by you with any third party. You have the option of unsubscribing from the newsletter via the newsletter, phone or email. StepChange uses Poppulo – the email marketing software platform to store its newsletter data. Poppulo are GDPR compliant –

Under what circumstances will StepChange contact me?

StepChange will contact you in relation to business services that it provides to your organisation, where legitimate business interest exists. Our aim is not to be intrusive.

Why we are processing your data? Our legal basis

We collect your personal details in order to maintain contact and provide the highest standard of service to you. We take great care with the information provided, taking steps to keep it secure and to ensure it is used only for legitimate purposes. The information and other data provided to our office may be used to advise you of products and services we may offer from time to time.

If we transfer personal data outside the EU, we, as the data controller will ensure the recipient (processor or another controller) has provided the appropriate safeguards and on condition that enforceable data subject rights and effective legal remedies for you, the data subject are available.

Data Subjects’ Rights

StepChange facilitates the data subject’s rights in line with the data protection policy and the subject access request procedure. The data protection policy is available on request. Our email address is

Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, has the following rights:

  • Right of access – you have the right to request a copy of the information that we hold about you.
  • Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
  • Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
  • Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
  • Right of portability – you have the right to have the data we hold about you transferred to another organisation.
  • Right to object – you have the right to object to certain types of processing such as direct marketing.
  • Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
  • Right to judicial review: in the event that StepChange refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in the complaints section below.

All of the above requests will be forwarded on should there be a third party involved as we have indicated in the processing of your personal data.

Retention of your personal data

Data will not be held for longer than is necessary for the purpose(s) for which they were obtained. StepChange will process personal data in accordance with our retention policy. This retention policy is available upon request.

Withdraw consent:

If we are relying on your consent to process your data you can withdraw this at any time – this does not affect the lawfulness of processing based on your consent before its withdrawal.


In the event that you wish to make a complaint about how your personal data is being processed by StepChange, or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and StepChange’s Data Protection Officer.

Additional Processing:

If we intend to further process your personal data for a purpose other than for which the data was collected, we will provide this information prior to processing this data.