Privacy Policy

1. Introduction & Data Controller

Techsteps UK Limited ("Techsteps", "we", "our", or "us") is dedicated to protecting and upholding the privacy, confidentiality, and security of all personal data entrusted to us. This Privacy Policy details our operational and technical procedures regarding the collection, use, transfer, and retention of personal data collected through our website, client portals, quote requests, and formal contractual engagements across our four divisions: Information Management, IT Lifecycle Services & Destruction, Secure Shredding & Document Integrity, and Moving & Relocation Services.

2. Categories of Information We Collect

Depending on how you interact with Techsteps, we collect and process several categories of information:

3. Lawful Bases for Processing Under UK GDPR

In compliance with Article 6 of the UK GDPR, we only process personal information where a valid lawful basis applies:

• [object Object]
• [object Object]
• [object Object]
• [object Object]

4. Chain of Custody & Information Security Safeguards

Information security is embedded across our four operating divisions under our ISO 27001:2022 certified Information Security Management System (ISMS). Every member of our mobile collection fleet and warehouse processing personnel is vetted to BS 7858 standards (five-year historical employment verification and criminal records check). Logistics transit utilizes GPS-tracked, solid-sided vehicles equipped with electronic deadlocks and remote vehicle immobilization.

5. Data Retention & Destruction Policies

We adhere to strict data minimisation and retention schedules. Client account records and transactional order histories are retained for seven (7) years following contract conclusion to satisfy statutory UK accounting requirements. Waste Transfer Notes and Hazardous Waste Consignment Notes are retained for two (2) and three (3) years respectively, pursuant to Environment Agency mandates. Data-bearing client media entrusted to us for sanitisation is processed within certified SLA windows and destroyed in accordance with NIST 800-88 Rev 1 or DIN 66399 standards.

6. Your Statutory Rights Under UK GDPR

Under Chapter III of the UK GDPR, you have comprehensive statutory rights regarding your personal data:

• [object Object]
• [object Object]
• [object Object]
• [object Object]
• [object Object]
• [object Object]

7. Data Protection Officer & Inquiries

For questions regarding this policy or to exercise any data subject rights, please contact our Data Protection Officer directly at enquiries@techsteps.co.uk or by post to Data Protection Officer, Techsteps UK Limited, Techsteps House, Logistics Park, Crossways Boulevard, Dartford, Kent, DA2 6QJ. You also hold the right to lodge a formal complaint with the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.