Privacy Policy (Seventh Step)

Effective date: 21 January 2026
Last updated: 21 January 2026

This Privacy Policy explains how Seventh Step Agency Ltd (“Seventh Step”, “we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit our website, contact us, or use our services.

1. Who we are

Controller: Seventh Step Agency Ltd (Company No. 16939733)
Address: 46 Eastwick Crescent, Mill End, Rickmansworth, England, WD3 8YJ
Email: shravan@seventhstep.co.uk

If you have any questions about this policy or want to exercise your rights, contact us at shravan@seventhstep.co.uk.

2. The personal data we collect

a. Data you provide to us

When you fill out our enquiry form or contact us, we collect the information you submit, which may include:

  • First name and last name

  • Email address

  • Phone number

  • Country and dialling code

  • Services you are interested in (e.g., full wedding, single event, editing-only, bespoke package, other)

  • Rough budget

  • Wedding venue & location

  • Wedding date

  • Additional details you share

  • How you heard about us

If you contact us by email, we will also collect the information contained in your message.

b. Data we collect automatically

When you visit our website, we may collect technical and usage data such as:

  • IP address (or a masked/approximate version where applicable)

  • Device and browser type, operating system

  • Pages viewed, time spent, referring URLs

  • General location (city/region level, where available)

We collect this using Google Analytics (see Cookies and Analytics below).

c. File uploads

At present, website visitors cannot upload files through the website. Any files shared with us will be handled via separate methods we provide (for example, after an enquiry progresses).

3. How we use your personal data

We use your personal data to:

  • Respond to enquiries and communicate with you

  • Provide quotes, availability, and service information

  • Arrange consultation calls and booking logistics

  • Create and administer bookings and related documents (including contracts, schedules, and invoices)

  • Manage our business operations (record keeping, internal reporting, improving our services)

  • Maintain website performance and understand how people use our website (analytics)

4. Our lawful bases for processing (UK GDPR)

We process personal data under the following lawful bases:

  • Legitimate interests: to respond to enquiries, manage our business, and improve our website/services (balanced against your rights).

  • Contract / steps to enter a contract: to prepare quotes, arrange bookings, and deliver services when you choose to proceed.

  • Legal obligation: where we need to keep records for tax/accounting or other legal requirements.

We do not send marketing emails/newsletters at this time.

5. Who we share personal data with

We may share personal data where necessary, including with:

  • Content creators we assign to your booking (or potential booking) to deliver the services and coordinate logistics

  • Wedding planners, venues, or suppliers where needed to coordinate access and timing (only relevant details)

  • Service providers that help us run our business and website, including:

    • Squarespace (website hosting and CRM tools)

    • Google (Google Drive/Workspace and Google Analytics)

    • Frame.io (storage and delivery platform for content, where applicable)

We do not sell your personal data.

6. International transfers

Because we work with international clients and use providers that may process data outside the UK, your personal data may be transferred and processed outside the UK.

Where international transfers occur, we take steps designed to ensure an adequate level of protection (for example, relying on the provider’s appropriate safeguards and contractual protections where applicable).

7. How long we keep your data

We keep personal data only for as long as needed for the purposes described above.

  • Enquiries (including non-bookings): we retain enquiry information for up to 36 months from your last interaction with us.

  • Bookings and contract records: we retain these for as long as needed for operational and legal purposes (for example, accounting and dispute management).

  • Analytics data: retained according to our Google Analytics settings and Google’s standard processing.

8. Cookies and analytics

We use Google Analytics to understand how visitors use our website.

We currently do not use a cookie banner to request consent for non-essential cookies. If you want to control cookies, you can do so through your browser settings (for example, blocking cookies or deleting them).

You can also use Google’s tools to control Analytics, such as the Google Analytics Opt-out Browser Add-on (available from Google).

9. Your data protection rights

Depending on your location and applicable law (including UK GDPR), you may have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate personal data

  • Request deletion of personal data (in certain circumstances)

  • Restrict or object to our processing (in certain circumstances)

  • Request portability of data (in certain circumstances)

To exercise any rights, contact shravan@seventhstep.co.uk.

10. Complaints

If you are in the UK and you are unhappy with how we handle personal data, you have the right to complain to the Information Commissioner’s Office (ICO).

We would appreciate the chance to resolve your concern first — please contact shravan@seventhstep.co.uk.

11. Security

We take reasonable steps to protect your personal data and keep it secure. However, no method of online transmission or storage is completely secure.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date at the top when we do.