Stepcast is operated by Erika Illsley, trading as Stepcast, based in Newbury, United Kingdom. We are committed to protecting your personal data and your privacy. This policy explains what information we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
We are the data controller for the personal information we collect. To contact us about this policy or to exercise your data rights: info@stepcasttours.com
Data we hold.
Purchase data
When you buy a tour through Lemon Squeezy, they collect your email address and payment information on our behalf. Payment processing is powered by Stripe. We receive a record of your purchase but do not store your card details.
License key usage
When you unlock a tour using a license key, we verify it against Lemon Squeezy's API. We do not store your key permanently on our servers.
Device data
Our tours use your browser's local storage to remember that you have unlocked a tour on your device. This data stays on your device and is not transmitted to us.
Location data
If you use the GPS feature, your location is used only on your device to show your position on the map. We do not collect, store or transmit your location to our servers.
Contact data
If you contact us via our contact form or by email, we will store your email address and the content of your message to respond to your enquiry.
Purpose of processing.
We use your data to process your purchase and deliver your unlock code, to verify license keys and unlock tour content, to respond to customer service enquiries, and to improve our tours and service.
We do not use your data for marketing without your explicit consent. We do not sell your data to any third party.
Why we're allowed to.
Contract
Processing necessary to fulfil your purchase and deliver the service you have paid for.
Legitimate interests
Responding to enquiries and improving our service.
Legal obligation
Where we are required to retain records for tax or legal compliance.
Consent
Where you have given explicit consent, specifically for the loading of Google Ads cookies. You may withdraw this consent at any time by clearing your browser's site data for stepcasttours.com.
Who else is involved.
Lemon Squeezy
Payment processing and license key management. They act as our Merchant of Record and handle payment data under their own privacy policy. Payment infrastructure is provided by Stripe.
Vercel
Website hosting. Our site is served via Vercel's infrastructure.
Formspree
Our contact form is processed by Formspree. Messages submitted via the contact form are handled under Formspree's privacy policy. No personal data is stored by us beyond what we receive in the resulting email notification.
We use Google Ads conversion tracking on our website. When you accept cookies via our consent banner, a Google Ads tag is loaded which may set cookies on your device and send data (including your IP address and browsing behaviour on stepcasttours.com) to Google LLC. This is used to measure how visitors find Stepcast through our advertising. Google acts as a data processor under their own privacy policy: policies.google.com/privacy. Additionally, Google Fonts are loaded from Google's servers on all pages, which transmits your IP address to Google as part of font delivery.
Local storage and cookies.
Functional storage (no consent required)
We use your browser's local storage to remember your tour unlock status and your cookie consent preference. This data stays on your device and is not transmitted to us. It is essential to the service.
Advertising cookies (Google Ads, consent required)
If you accept cookies via our consent banner, we load a Google Ads tracking tag which may set cookies on your device to help us measure the effectiveness of our advertising. This is only activated with your consent. You can withdraw consent at any time by clearing your browser's site data for stepcasttours.com, which will reset your preference and show the consent banner again on your next visit.
We do not use analytics cookies such as Google Analytics. We do not use cookies for any purpose other than those described above.
Data retention.
We retain purchase records for 7 years as required by UK tax law. Emails and contact form submissions are retained for as long as necessary to resolve your enquiry, and deleted thereafter. Device-local data (your unlock status and consent preference) is stored in your browser until you clear your browser data.
What you can ask for.
Under UK GDPR you have the following rights. To exercise any of them, email info@stepcasttours.com and we will respond within 30 days.
Request a copy of the personal data we hold about you.
Request that inaccurate data is corrected.
Request deletion of your data, subject to legal retention requirements.
Object to processing of your data.
Request restriction of how we process your data.
Request your data in a portable format.
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy.
We may update this policy from time to time. The latest version will always be available at stepcasttours.com/privacy.html. We will notify customers of significant changes by email where we hold your email address.