Privacy Policy

Last updated: 08/10/2026

Who we are

Next Step Digital is the trading name of Joe Lalgee, an independent digital marketing consultant based in Durham, United Kingdom. Joe is the data controller for personal information collected through this website. If you have any questions about this policy or your information, email hello@next-step-digital.co.uk.

What we collect and why

When you send an enquiry

Our contact forms ask for your name, email address and, optionally, your business name, website, the area you want help with and a message. We also record the page you used and, if you arrived from an ad or campaign link, the campaign details in that link (for example “utm_source”). We use this to reply to you and discuss your enquiry. Our lawful basis is our legitimate interest in responding to enquiries and, where relevant, taking steps at your request before entering into a contract. Enquiries are delivered to us by email and a copy is kept securely in the website’s admin area.

If you sign up for updates

If you tick the box to receive marketing tips, we add your name and email address to our mailing list in Mailchimp. Our lawful basis is your consent. Every email includes an unsubscribe link, and you can also ask us to remove you at any time.

How you use the website

We use Google Analytics (through Google Tag Manager) to understand how visitors use the site, such as which pages are visited and how people find us. Analytics cookies are only set if you accept them in the cookie banner. If you don’t, Google may still receive limited, cookieless signals that don’t identify you (Google “consent mode”). We also use HubSpot to understand how visitors use the site and to record enquiries submitted through our forms. Our lawful basis is consent for cookies and our legitimate interest in understanding and improving the website. Full details of the cookies we use are in our Cookie Policy, where you can also change your choices.

Technical information

Like most websites, our hosting provider records technical information such as IP addresses in server logs to keep the site secure and working. Our website fonts are loaded from Google Fonts, which means your browser connects to Google’s servers and shares your IP address.

Who we share it with

We don’t sell your information. We use a small number of trusted service providers who process data on our behalf:

  • IONOS — website hosting and email
  • Mailchimp (Intuit) — mailing list, if you opt in
  • Google — Analytics, Tag Manager and Fonts
  • HubSpot — website analytics and form records
  • Complianz — cookie consent management

Some of these providers may process data outside the UK, including in the United States. Where that happens, transfers are protected by approved safeguards such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.

How long we keep it

  • Enquiries: up to 2 years after our last contact, unless you become a client, in which case we keep business records for as long as the law requires (usually 6 years).
  • Mailing list: until you unsubscribe.
  • Analytics data: no longer than 14 months.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. To make a request, email hello@next-step-digital.co.uk. We will respond within one month.

If you’re unhappy with how we’ve handled your information, please contact us first. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.