1. Data we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, WhatsApp | Communicate about your order | Contract performance |
| Project brief and files | Deliver the service | Contract performance |
| Payment data | Process transactions via Stripe/PayPal | Contract performance |
| Usage/analytics data | Improve website and services | Legitimate interest / Consent |
2. Cookies and tracking
We use the following categories of cookies:
- Essential Required for the site to function. No consent needed.
- Analytics Session tracking, scroll depth, calculator usage. Only set after you accept cookies via the cookie banner.
- Marketing Google Analytics 4, Meta Pixel. Only set after consent.
You can withdraw consent at any time by clearing your browser cookies and declining on your next visit, or by contacting us.
3. Data sharing and transfers
We share your data only:
- With our writers (need-to-know basis) to deliver your order.
- With Stripe and PayPal for payment processing (both EU-certified).
- With Google (Analytics) and Meta (Pixel) — only with your consent.
- Where required by law or EU legal process.
Some data may be processed outside the EEA (e.g. by Google or Meta). Where this occurs, appropriate safeguards (Standard Contractual Clauses) are in place.
4. Data retention
- Order data: retained for 3 years (legal and financial obligations).
- Analytics data: retained for 12 months.
- Marketing consent records: retained for 3 years.
5. Your rights under GDPR
You have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data ("right to be forgotten").
- Restriction — limit how we process your data.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interest.
- Withdraw consent — at any time, for consent-based processing.
To exercise any right, contact us at contact@nextstepwriters.eu. We will respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority.
6. Data Controller
NextStep Writers · contact@nextstepwriters.eu · nextstepwriters.eu
7. Changes to this Policy
We will notify you of material changes by email or a prominent notice on this page. The "Last updated" date at the top of this page reflects the most recent revision.