Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how Solid First Step ("we", "us", "our") collects, uses, shares and protects personal data when you use our platform, website, and related services (the "Services"). We are the data controller for the personal data described below, and we comply with the UK GDPR and the Data Protection Act 2018.

1. Information we collect

2. How we use your data

We process personal data to:

3. Legal bases

We rely on your consent, the performance of a contract with you, our legitimate interests in operating and improving the Services, and compliance with legal obligations.

4. Sharing your data

We share data with our infrastructure providers, with partner institutions or employers where you have chosen to connect with them, and where required by law. We do not sell your personal data.

5. Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to meet legal obligations or resolve disputes.

6. Your rights

You have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise these rights, contact us at privacy@solidfirststep.com. You may also complain to the Information Commissioner's Office (ico.org.uk).

7. Cookies

We use cookies and similar technologies as described in our Cookie Preferences page.

8. Contact

Questions about this policy? Email privacy@solidfirststep.com.