Privacy Policy

Last updated: 31 August 2026

This policy covers the marketing website at firststepshr.co.uk and the demo request form. It does not cover data processed on behalf of nursery clients using the First Steps HR software product — that is governed by a separate Data Processing Agreement issued to each client.

Who we are

First Steps HR Ltd is a company registered in England & Wales, company number 17422200, registered office at Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE.

For any question about this policy or your data, contact: dpo@firststepshr.co.uk

What we collect

When you use the "Book a demo" form on this site, we collect:

• Your name
• Your email address
• Your nursery or setting's name
• The number of staff you told us about

We do not collect any information about you automatically beyond standard, non-identifying website analytics (if enabled) such as pages visited and browser type.

Why we collect it

We use this information solely to respond to your enquiry and arrange a demo, follow up about First Steps HR if you've expressed interest, and keep a record of who we've spoken to. We do not sell, rent, or share your information with any third party for their own marketing purposes.

Our lawful basis

We process this data on the basis of legitimate interest — responding to an enquiry you've initiated is a reasonable and expected use of the information you've given us. Where we send you further marketing communications beyond directly responding to your enquiry, we rely on your consent, which you can withdraw at any time.

How long we keep it

If you don't become a client, we retain enquiry data for 12 months from your last contact with us, then delete it. If you become a client, your data is retained under the terms of our client agreement and Data Processing Agreement instead.

Your rights

Under UK GDPR, you have the right to ask what personal data we hold about you, ask us to correct inaccurate data, ask us to delete your data, withdraw consent to marketing communications at any time, and complain to the Information Commissioner's Office if you're unhappy with how we've handled your data — ico.org.uk.

To exercise any of these rights, email dpo@firststepshr.co.uk.

How we handle complaints

If you have a complaint about how we've processed your personal data, email dpo@firststepshr.co.uk. We will acknowledge your complaint within 30 days and respond as soon as reasonably possible.

Where your data is held

All data is held on UK-based Microsoft Azure infrastructure (UK South region).

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.