Privacy Policy

01Who we are

Step Into Media Inc. ("Step Into Media", "we", "us") is a business corporation incorporated in the State of New York, United States, with its business address at 15 W 38th St, New York, NY 10018.

We are the controller of the personal information described in this policy. If you have any question about it, write to info@stepin2.media.

02What this policy covers

This policy explains what personal information we collect, why we collect it, and what you can ask us to do with it. It covers:

• this website, stepin2.media, and any enquiry you send through it;
• email, phone and messaging correspondence with us;
• mobile applications we publish under our own developer accounts on the Apple App Store and Google Play.

03Information we collect

Information you give us

When you contact us through the form on this site, by email, or by phone, we receive the information you choose to send: your name, email address, phone number where you provide one, your company, and the content of your message. If we go on to work together, we also process the contact and billing details needed to run the engagement.

Information collected automatically

Our web host records standard server logs when a page is requested — IP address, browser and device type, referring page, and the date and time of the request. These logs are used for security and to keep the site running, not to build a profile of you.

Information from our apps

Where one of our own apps collects data, the categories collected are disclosed in that app's App Store privacy label and Google Play Data safety section, and in the notice presented inside the app. We do not collect more than the app's listing declares.

04How we use information

• to answer your enquiry and to prepare a proposal;
• to deliver, support and invoice work you have engaged us for;
• to operate, secure and improve this website and our apps;
• to send service messages about work in progress;
• to comply with tax, accounting and other legal obligations.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use your enquiry to add you to a marketing list without your consent.

05Legal bases for processing

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

• Contract — to take steps at your request before entering an agreement, and to perform it;
• Legitimate interests — to run and secure our website, respond to enquiries, and keep records of our business;
• Consent — for any optional analytics or marketing, which you may withdraw at any time;
• Legal obligation — where retention or disclosure is required by law.

06Cookies and analytics

This website uses only the cookies strictly necessary to serve the page. It does not set advertising cookies and does not track you across other websites.

If we later add privacy-respecting analytics, we will say so here and, where consent is required in your jurisdiction, ask for it before any non-essential cookie is set. You can also block or delete cookies in your browser settings; the site works without them.

07How we share information

We share personal information only in these situations:

• Service providers — hosting, email, accounting, payment and error-reporting vendors who process data on our instructions under a written agreement;
• Platforms — Apple and Google, where an app we publish is distributed through their stores and they process data under their own policies;
• Professional advisers — lawyers, accountants and auditors, bound by confidentiality;
• Legal requirements — where disclosure is required by law, court order or a valid request from a public authority, or to protect our rights or the safety of others;
• Business transfer — if we are involved in a merger, acquisition or sale of assets, in which case we will notify you before your information becomes subject to a different policy.

08How long we keep it

Enquiries that do not lead to an engagement are deleted within 24 months. Records connected to a client engagement are kept for the duration of the engagement and then for as long as tax, accounting and limitation periods require — generally seven years in the United States. Server logs are kept for up to 90 days.

09Security

We use encryption in transit (HTTPS), access controls, and least-privilege practices for the systems that hold personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires it.

10Your privacy rights

If you are in the EEA or the UK

You may request access to your personal information, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident

Under the CCPA as amended by the CPRA, you may request to know the categories and specific pieces of personal information we have collected, request deletion or correction, and you have the right not to receive discriminatory treatment for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA.

Making a request

Write to info@stepin2.media. We answer within 30 days, or within the period your local law requires. We may need to verify your identity before acting on a request. An authorised agent may act for you where the law allows it.

11Account and data deletion

You can ask us to delete the personal information we hold about you at any time.

• Website enquiries — email info@stepin2.media from the address you contacted us with.
• Apps we publish — where an app lets you create an account, deletion is available inside the app, and also by request. The full procedure, what is deleted, and what we must keep is set out on our account and data deletion page.

We complete verified deletion requests within 30 days, except for records we are legally required to retain, such as invoices and tax records.

12Children's privacy

This website is not directed at children, and we do not knowingly collect personal information from children under 13 through it. Any app we publish that is directed at children will say so in its store listing and will be operated in line with COPPA, Apple's Kids Category rules and Google Play's Families policy. If you believe a child has given us personal information, write to info@stepin2.media and we will delete it.

13International transfers

We are based in the United States, and our service providers may process data in the United States and elsewhere. Where we transfer personal information out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, together with the UK Addendum where applicable, and on appropriate technical and organisational safeguards.

14Apps we publish

Each app we publish under our own developer accounts carries its own in-app privacy notice describing exactly what that app collects, why, and whether any of it leaves the device. That notice matches the app's App Store privacy label and Google Play Data safety declaration.

Where an app uses a third-party SDK — for analytics, crash reporting, payments or push notifications — the provider is named in that app's notice, and its own privacy policy applies to the data it processes.

15Changes to this policy

We update this policy when our practices change or the law requires it. The date at the top of this page always shows the current version. If a change materially affects how we handle your personal information, we will give notice on this website before it takes effect.

16Contact us

For any privacy question, request or complaint: