Privacy Policy
This notice explains what personal information KindStep collects when you ask to be matched with a stairlift installer, why we collect it, who we share it with, how long we keep it, and the rights you have over it.
1. Who we are
KindStep is a stairlift lead-matching service. We are not a stairlift manufacturer or installer — we help UK households compare honest prices and then introduce each enquiry to one vetted local installer.
The data controller responsible for your personal data is:
- Kiran Kumar Woochit, trading as KindStep
- Contact for any privacy question or request: privacy@kindstep.co.uk
- Registered with the UK Information Commissioner's Office (ICO), registration number ZC181139.
2. What we collect
When you complete our quote form, we collect the information you give us and a small amount of technical information automatically:
- Your details: your name, phone number and email address.
- About the stairlift: your postcode, the type of staircase (straight or curved), the person's mobility/health context, who the lift is for, and whether you own or rent your home.
- Your consent record: the exact wording of the consent you agreed to, the version of that wording, and the date and time you gave it.
- Verification results: whether your phone number was confirmed by one-time code, and whether your email address passed a deliverability check.
- Technical & marketing data: your IP address and browser type
(user-agent), and — if you reached us from an advert — advertising identifiers such as a
Meta click identifier (
fbclid), the Meta browser cookie (_fbp), and campaign tags (UTM parameters). This data is only collected if you accept analytics and advertising cookies (see our Cookie Policy).
3. Why we use it, and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Pass your enquiry to one vetted local installer so they can phone you to arrange a free survey | Consent (Art. 6(1)(a)) — the box you tick on the form |
| Verify your phone and email so the installer can actually reach you and to prevent fraudulent or junk submissions | Legitimate interests (Art. 6(1)(f)) — running a trustworthy service |
| Measure which adverts produce genuine enquiries (Meta Pixel / Conversions API and Google Analytics) | Consent (Art. 6(1)(a)) — your cookie choice |
You can withdraw any consent at any time (see Your rights). Withdrawing consent does not affect anything we lawfully did before you withdrew it.
4. How your enquiry is shared — our matching model
KindStep is a referral service. When your enquiry qualifies and your phone number is verified, we match your details to one vetted local installer that serves your area — the single firm we select based on your postcode and requirements — so they can contact you with a quote. We never sell your data. We never pass your enquiry to more than one installer. You will not be handed to a pack of firms who all call you, and we do not share your enquiry with lead brokers or data aggregators.
Once your details reach that installer, the installer becomes an independent data controller and uses your data under its own privacy policy to arrange and carry out your free, no-obligation home survey.
Phone calls and PECR
The installer — not KindStep — will call you to arrange the survey. By ticking the consent box on our form you are asking us to pass your details to that one installer for exactly this purpose. You can withdraw at any time by contacting us at privacy@kindstep.co.uk or by telling the installer directly.
5. The companies that help us run the service
We use a small number of trusted suppliers (processors) who handle your data only on our instructions:
- Supabase (Supabase Inc.) — secure database hosting, in the
European Union (London /
eu-west-2region). - Cloudflare (Cloudflare, Inc.) — serves and protects this website.
- Twilio (Twilio Inc.) — sends the one-time code that verifies your phone number.
- NeverBounce — checks that an email address is deliverable.
- Meta Platforms Ireland Ltd — advert measurement via the Meta Pixel and the Meta Conversions API. On a completed enquiry we send conversion event data — your email and phone number, hashed (scrambled) first, plus your browser advertising identifier — server-to-server to Meta so we can tell which adverts produce genuine enquiries.
- Google Ireland Ltd — Google Analytics 4, for website and advert performance.
Meta and Google (and some of the suppliers above) may process data outside the UK. Where they do, the transfer is protected by recognised safeguards — the UK–US Data Bridge (the UK extension to the EU–US Data Privacy Framework) and/or the UK International Data Transfer Agreement / Standard Contractual Clauses.
We do not carry out automated decision-making that has a legal or similarly significant effect on you. Matching your enquiry to one local installer is based only on your postcode and the answers you give.
6. How long we keep it
- Your enquiry and contact details: kept for 12 months from the date you submit the form, then deleted — unless you ask us to delete them sooner.
- Your consent record: kept for up to 6 years purely as proof that consent was given, as data-protection rules expect.
7. Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you (access);
- have inaccurate data corrected (rectification);
- have your data deleted (erasure / "right to be forgotten");
- restrict or object to how we use it;
- withdraw consent at any time;
- complain to the regulator.
To exercise any of these — including asking us to delete your data — email privacy@kindstep.co.uk. We log every erasure request and action it promptly. You can also complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put things right first.
8. Cookies and tracking
We only set analytics and advertising cookies after you accept them in the cookie banner. Full details — including how to change your choice — are in our Cookie Policy.
9. How we keep it safe
Your data is stored in an EU-region database with row-level security, reachable only by our own secure server processes — never directly from your browser. Phone verification and email checks add a further layer against fraudulent or mistyped contact details.
10. Age
Our service is intended for adults. By submitting an enquiry you confirm you are 18 or over and, where the lift is for someone else, that you are entitled to share their details with us for this purpose.
11. Changes to this notice
If we change how we handle your data we will update this page and the "last updated" date above.