Privacy Policy
Last updated: 28 July 2026
This Privacy Policy explains how OneStep ("we", "us", "our") collects, uses, and protects information about you when you visit our website or interact with our services. We are committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
OneStep provides tools that help frontline professionals support victims and survivors through the criminal justice process. For the purposes of UK data protection law, OneStep is the data controller for personal data collected through this website.
Information we collect
We may collect the following categories of information:
- Contact details you provide (name, email, organisation, phone number).
- Messages or enquiries you send to us.
- Technical information such as IP address, browser type, device information, and pages visited.
- Cookies and similar technologies (see Cookies below).
How we use your information
We use your personal data to respond to enquiries, provide and improve our services, communicate with you about OneStep, meet legal and regulatory obligations, and keep our website secure.
Legal basis for processing
We rely on one or more of the following lawful bases: your consent, the performance of a contract with you, our legitimate interests in operating and improving our services, and compliance with a legal obligation.
Sharing your information
We do not sell your personal data. We may share it with trusted service providers who help us operate our website and services (such as hosting and analytics), and where required by law. Any third parties are bound by appropriate data protection obligations.
Data retention
We keep personal data only for as long as necessary for the purposes described in this policy, or as required by law. When it is no longer needed, we securely delete or anonymise it.
Your rights
Under UK GDPR you have the right to access your personal data, request correction or erasure, restrict or object to processing, request data portability, and withdraw consent at any time. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
Our website uses a small number of cookies to help it function correctly and to understand how it is used. You can control cookies through your browser settings.
Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with the "Last updated" date above.
Contact us
If you have any questions about this policy or how we handle your personal data, please contact us via the details provided on our website.