Privacy policy

IronStep

Last updated: April 2026

IronStep is a trading brand of Astflick Group Ltd, with intellectual property owned by Astflick Holdings Ltd.

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or purchase from us.

For any privacy-related queries, contact: hello@ironstep.co.uk

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Astflick Group Ltd (trading as IronStep)

We are responsible for ensuring your personal data is handled in accordance with:

  • UK GDPR
  • Data Protection Act 2018

2. Information We Collect

We may collect and process the following data:

2.1 Identity & Contact Data

  • Name
  • Billing and delivery address
  • Email address
  • Telephone number

2.2 Order & Transaction Data

  • Purchase history
  • Payment details (processed securely via third-party providers)

2.3 Technical Data

  • IP address
  • Browser type and device
  • Website usage data

2.4 Business Customer Data (B2B)

  • Company name
  • VAT number
  • Credit account details
  • Director/guarantor information (where applicable)

3. How We Use Your Data

We use your data to:

  • Process and fulfil orders
  • Communicate about your order
  • Manage accounts and credit facilities
  • Prevent fraud and misuse
  • Improve our website and services
  • Comply with legal obligations

Where applicable, we rely on:

  • Contractual necessity
  • Legal obligations
  • Legitimate interests
  • Consent (for marketing)

4. Marketing Communications

We may send marketing emails where:

  • You have opted in, or
  • You are an existing customer and have not opted out

You can unsubscribe at any time via:

5. Sharing Your Data

We only share data where necessary with:

5.1 Service Providers

  • Payment processors
  • Courier and delivery partners
  • IT and hosting providers

5.2 Professional & Legal Bodies

  • Accountants, auditors
  • Legal advisors
  • Debt recovery agencies (for overdue B2B accounts)

5.3 Group Structure

Your data may be shared within:

  • Astflick Group Ltd
  • Astflick Holdings Ltd

For operational, administrative, and compliance purposes.

6. International Data Transfers

Some of our service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses
  • Adequacy decisions

7. Data Retention

We retain personal data only as long as necessary:

  • Order records: up to 6 years (for tax/legal compliance)
  • Credit account data: duration of account + statutory period
  • Marketing data: until consent is withdrawn

8. Your Rights

Under UK data protection law, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability

To exercise your rights, email: hello@ironstep.co.uk

9. Cookies

We use cookies to:

  • Enable website functionality
  • Analyse site traffic
  • Improve user experience

You can manage cookie preferences via your browser settings.

For full details, see our Cookie Policy (recommended as a separate page).

10. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Secure servers
  • Encrypted payment processing
  • Access controls

However, no system is completely secure, and transmission of data is at your own risk.

11. Complaints

If you are unhappy with how your data is handled, you may contact:

Information Commissioner's Office

Website: https://ico.org.uk

We encourage you to contact us first so we can resolve the issue.

12. Third-Party Links

Our website may contain links to third-party websites.

We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on our website.

14. Contact Us

IronStep (Astflick Group Ltd)
Email: hello@ironstep.co.uk