Privacy Policy

As the Data Controller, we at STEP CONNECT2 Ltd are committed to protecting your privacy and ensuring we collect, process, and share your data in accordance with the latest regulations, including the UK General Data Protection Regulation (UK GDPR). Our privacy policy explains how we do this and outlines your rights.

Customer Definition

STEP CONNECT2 Ltd defines its customers as follows:

Visitors
Exhibitors
Delegates
Speakers, including Chairs
Sponsors
Online Attendees/Participants
Press/Media
Enquiries
Other individuals/organisations with whom STEP CONNECT2 Ltd maintains business relationships or communicates with

Types of Information Gathered

Financial Information:

Payment information gathered during the registration process – including, but not limited to, credit card details, financial institutions, and expiration dates – is considered financial information. This information is not distributed under any circumstances.

Payments for delegate places, awards places, stands, and/or sponsorship are processed either through Stripe or by invoice(s) generated by our accounts team

Professional Information:

Professional information includes, but is not limited to:

Name
Job title
Company name
Company address
Phone number
Email address
Responses to surveys or registration forms

Data captured during visits to a STEP CONNECT2 Ltd website or interactions with another STEP CONNECT2 Ltd customer is also considered professional information. This information is stored and managed internally.

Legal Basis for Processing

We process your personal data based on the following lawful bases:

Consent: For marketing communications and event registrations.
Contract: To provide services you have requested, such as event attendance.
Legal Obligation: To comply with financial or legal regulations.
Legitimate Interests: To improve our services, manage events, and carry out analytics.

Retention Periods

We retain personal data for as long as it is necessary for the purposes for which it was collected:

Event Data: Retained for as long as necessary to facilitate event-related purposes and fulfil ongoing legitimate interests, such as analytics, unless otherwise requested by the individual.
Marketing Data: Retained until you opt-out or withdraw consent.
Financial Data: Retained for 6 years in accordance with tax and financial regulations.

Generative AI Stance

At STEP CONNECT2, we are committed to using generative AI responsibly and ethically, enhancing event experiences through thoughtful and innovative applications. Overseen by our AI Leadership Group, we ensure AI integration aligns with our values and delivers measurable benefits.

Our AI Approach:

Enhancing Experiences: Leveraging AI to enrich event content, streamline interactions, and elevate both exhibitor and attendee experiences, fostering creativity and expertise.
Data Protection First: All AI applications comply with our stringent data protection policies, adhering to GDPR and other relevant standards to safeguard privacy while providing valuable insights.
Operational Excellence: By automating repetitive tasks, AI enables teams to dedicate more time to strategic planning and impactful decision-making.
Personalisation and Engagement: Tailored AI-driven solutions meet the unique needs of attendees, exhibitors, and supporters, creating more meaningful connections.
Ethical Integration: Our commitment to fairness ensures AI is free from biases and maintains trust across all applications.

Guided by Expertise:
Our AI Leadership Group ensures that every aspect of AI use reflects innovation, ethics, and professionalism. This oversight enables us to build trust, deliver exceptional experiences, and uphold the highest standards in the event industry.

At Our Events

Anyone attending a presentation in our conference rooms/theatres at our events who has their attendee badge scanned agrees to share their professional information with the presentation host/exhibitor company. Similarly, badge scans at exhibitor stands indicate agreement for:

Data to be used by the exhibitor for marketing purposes.
Data to be shared with STEP CONNECT2 Ltd for analytics purposes.

Webinars & Online Events

By entering contact details to stream webinars or attend online events, you consent to being contacted about future events and related activities. You can unsubscribe from communications at any time using the provided links or by contacting us directly.

Your Rights

Right to Access:

You have the right to access a copy of your personal data. Requests should be made in writing to the Data Controller at:

Email: data@stepconnect2.com
Post: STEP CONNECT2 Ltd, 1st Floor Upper Birchetts, Langton Road, Langton Green, Tunbridge Wells, Kent, TN3 0EG

Right to Rectification:

You have the right to request corrections to inaccurate or incomplete personal data.

Right to Erasure:

You can request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected.

Right to Data Portability:

You can request your data in a structured, commonly used, and machine-readable format.

Right to Object:

You have the right to object to processing based on legitimate interests or direct marketing.

Consent and Opt-Out

You may withdraw consent or opt-out of communications at any time by:

Using the unsubscribe link in emails
Contacting us at data@stepconnect2.com
Specifying preferences for opt-out criteria (e.g., sender, show, communication method)

Children Below the Age of 18

Our services do not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.

Additionally:

Children under the age of 18 cannot register independently for events or services provided by STEP CONNECT2 Ltd.
Parental or guardian consent is required, and verification will be sought to ensure compliance with data protection regulations.

Data Transfers

Personal data is stored and processed within the UK. If data is transferred outside the UK or EEA, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place.

Security Measures

We utilise secure servers and encryption to protect financial and professional information. Additional measures include:

Regular security audits
Employee training on data protection
Physical and technical access controls

Breach Notification

In the event of a data breach, affected individuals will be notified promptly, and we will report significant breaches to the ICO in line with UK GDPR requirements.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience. Cookies are small text files placed on your device to help us improve our services and deliver a more personalised experience. The types of cookies we use include:

Essential Cookies: Necessary for the website to function properly.
Analytics Cookies: Help us understand how visitors interact with our website.
Marketing Cookies: Used to deliver personalised advertisements and measure their effectiveness.

We obtain your consent for non-essential cookies in compliance with the Privacy and Electronic Communications Regulations (PECR). For more information, please see our Cookie Policy here.

Any Queries/Concerns

If you have any questions or wish to exercise your rights, please contact:

Email: data@stepconnect2.com
Telephone: 01892 351626
Post: Data Controller, STEP CONNECT2 Ltd, 1st Floor Upper Birchetts, Langton Road, Langton Green, Tunbridge Wells, Kent, TN3 0EG

Complete Removal of Data

To request the complete removal of your data, contact us using the above details. Specify your name, company name, and email address to facilitate the process.

STEP CONNECT2 Ltd does not share personal data with third parties beyond the specific purposes outlined in this policy, such as with exhibitors or for analytics purposes. We do not sell or rent your data to any third parties.

Updates to This Policy

This Privacy Policy is reviewed regularly and updated to ensure compliance with legal and regulatory requirements. The latest version will always be available on our website.

Updated 23/1/2025