Privacy Policy

Introduction

Stevie Rodger Ltd, trading as Steerer design (“we”, “us”, or “our”) is committed to safeguarding the privacy and security of your personal data. This Privacy Policy sets out the ways in which we collect, use, store, and process your personal data when you visit our website steerer-site.vercel.app. It is designed to comply with the UK General Data Protection Regulation (“UK GDPR”) and the provisions of the Data Protection Act 2018.

If you have any questions about this Privacy Policy, or you wish to exercise any of your rights as outlined below, please contact us using the details in the “Contact Us” section.

1. Who We Are

We are Stevie Rodger Ltd, trading as Steerer design, and we act as the data controller with respect to your personal data. Our principal activity involves providing design system, website and product design services, including a free website audit. For further information about us, visit our website at steerer-site.vercel.app.

We are a company registered in England and Wales (company number 15062313). Our registered office is located at 7 Bell Yard, London, WC2A 2JR. You can also contact us via email at team@stevierodger.com.

2. What Personal Data We Collect

We collect and handle the following categories of personal data, either provided by you directly or collected automatically:

2.1 Information You Provide

• Name, address, email address, and telephone number.
• Account registration details, including username and password.
• Payment information, including billing address, card number details, and transaction history.
• Enquiries submitted via forms or customer support channels.
• Responses to feedback forms, surveys, or questionnaires.

On this website specifically, our free website audit form asks for your email address, the address of the website you would like us to check, and whether you would like to receive occasional tips and news from us (this box is unticked unless you tick it). We then check that website’s homepage and a few linked pages as a normal visitor would, and save the results to produce your report.

2.2 Automatically Collected Information

• Technical Data: IP address, browser type and version, operating system, time zone settings, and device type.
• Usage Data: Pages visited, links clicked, errors encountered, time spent on pages, and navigation patterns.
• Cookies: Information collected through cookies and similar technologies. For more details, please refer to our Cookie Policy.

To stop the audit form being misused, we keep a scrambled, daily-changing form of your IP address for one day, and a scrambled form of your email address for 30 days so that each address can request one free audit a month. Neither can be turned back into the original.

3. Why We Process Your Data (Legal Basis)

We process your personal data on the following lawful bases under Article 6 of the UK GDPR:

• Consent: Where you have provided clear and explicit consent, for example, when subscribing to our newsletter or accepting cookies.
• Performance of a Contract: To fulfil our obligations under contracts with you, such as processing your orders or completing transactions.
• Legal Obligations: To comply with applicable legal or regulatory requirements, including tax reporting or law enforcement requirements.
• Legitimate Interests: To manage and improve our website and services, provided our interests are not overridden by your rights and freedoms.

If you require more information about any specific purpose and legal basis, please contact us.

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which we collected it, including for satisfying legal, accounting, or regulatory obligations. General retention periods include:

• Transaction Data: Retained for six years in compliance with tax and financial regulations.
• Account Data: Retained for as long as the account remains active or until requested to delete it.
• Support Query Records: Retained for up to one year after resolution.
• Marketing Consents: Retained for one year after consent withdrawal or inactivity.
• Free Website Audit Requests: Requests that are never confirmed are deleted after 48 hours. Confirmed requests and their reports are deleted after 90 days.

For details of specific retention periods not listed here, please contact us.

5. How We Share Your Data

Your data may be shared with third parties in the following circumstances:

1. Service Providers: This includes IT hosting providers, payment processors, and other suppliers required to facilitate our services.
2. Legal Requirements: To comply with legal obligations, regulatory requests, or court orders.
3. Corporate Transactions: If part or all of our business is sold, merged, or transferred to another organisation.
4. Analytics/Tools: We may use tools for website or marketing analytics (e.g., Google Analytics).

The service providers we currently use for this website are:

We ensure that any third-party recipients are bound by contractual obligations to protect your data and process it only under our instructions.

6. International Data Transfers

Where the processing of your personal data involves transfers outside of the UK/EEA, we ensure that appropriate safeguards are in place, such as:

• Transfers based on adequacy decisions approved by the Secretary of State.
• The use of Standard Contractual Clauses approved for cross-border transfers.
• Explicit consent from you, where applicable.

If you require specific details of the safeguards we use, please contact us.

7. Your Rights as a Data Subject

You have the following rights under the UK GDPR:

1. Access (Art. 15): Request a copy of your personal data and information on how it is processed.
2. Rectification (Art. 16): Correct inaccurate or incomplete data.
3. Erasure (Art. 17): Request the deletion of certain personal data.
4. Restriction (Art. 18): Request a limitation on how we process your data.
5. Data Portability (Art. 20): Obtain a copy of your data in a commonly used and machine-readable format.
6. Objection (Art. 21): Object to certain processing activities, including for direct marketing purposes.
7. Withdraw Consent: Withdraw your consent when data processing relies on it.

We aim to respond to all requests within 30 days. For assistance, please contact us using the details in the “Contact Us” section. Complaints can also be filed with the Information Commissioner’s Office (ICO) via www.ico.org.uk.

8. Data Security

We implement appropriate technical and organisational measures to safeguard your personal data. Measures include secure servers, encryption technology, and limited access to data. While no system is entirely secure, we work to minimise risks associated with data loss or unauthorised access.

In the event of a data breach, we will notify affected users and the ICO promptly within 72 hours, as required by the UK GDPR.

9. Cookies and Similar Technologies

This website uses cookies to improve functionality, analyse engagement, and support advertising efforts. Cookies may include:

• Essential Cookies: Necessary for site operation (e.g., navigation and security).
• Performance Cookies: Gather analytics about website usage.
• Marketing Cookies: Used for targeted advertising.

You may adjust your cookie preferences at any time via the cookie settings panel on our website. Full details are provided in our Cookie Policy.

10. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page, and where significant, we may notify you via a notice on this website.

11. Contact Us

You can contact us regarding this Privacy Policy or any data protection queries using the information below:

• Email: team@stevierodger.com
• Address: 7 Bell Yard, London, WC2A 2JR

This version of the Privacy Policy is effective as of 27 October 2026.