Privacy Policy

Last Updated: November 1, 2025

Your privacy is important to us. This Privacy Policy explains how StepUp Technology ("we," "our," "us") collects, uses, and protects your personal information when you visit StepUpUp.com or use our Services.

1. Information We Collect

We may collect the following types of information:

A. Personal Information

Name, email address, phone number, and company name (when you contact us or fill out a form)
Billing details when you purchase a service
Business information and website credentials when providing services

B. Automatically Collected Data

IP address, browser type, device information, and usage patterns (via cookies and analytics tools)
Website interaction data, pages visited, and time spent on pages
Referral sources and search terms used to find our Site

C. Sensitive Personal Information

We may collect the following categories of sensitive personal information as defined by applicable privacy laws:

Account login credentials (when you create an account)
Precise geolocation data (if you enable location services)

D. Cookies and Tracking

We use cookies and similar tracking technologies to:

Enhance user experience and remember your preferences
Analyze site traffic and usage patterns
Provide personalized marketing and advertising
Measure the effectiveness of our campaigns

You can control or disable cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of our Site.

2. How We Use Your Information

We use your information for the following business purposes:

Service Delivery: To provide and improve our SEO and digital marketing services
Communication: To communicate with you about updates, offers, project details, and customer support
Payment Processing: To process payments, generate invoices, and maintain financial records
Analytics: To analyze usage trends and optimize website performance
Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements
Marketing: To send promotional materials and personalized offers (with your consent where required)

Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes other than those specified by law without obtaining your explicit consent.

3. Data Sharing and Disclosure

We do not sell your personal information for monetary consideration.

However, we may share personal information for cross-context behavioral advertising, which some privacy laws consider a "sale" or "sharing." To opt-out of this practice, please visit the "Your Privacy Rights" section below or email
privacy@stepupup.com

We may share your information only with:

Service Providers and Contractors

We work with third-party service providers who assist in delivering our Services, including:

Analytics providers: Google Analytics, Google Tag Manager
Email marketing platforms: Mailchimp, HubSpot
Customer Relationship Management: HubSpot, Zoho CRM
Payment processors: [Stripe, PayPal, or your processor]
Advertising networks: Google Ads, Meta Ads, LinkedIn Ads
Cloud hosting providers: [AWS, Google Cloud, or your provider]
Communication tools: Slack, Zoom, Microsoft Teams

Legal Authorities

When required by law, court order, or government regulation, or when necessary to protect our rights, safety, or property.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity.

4. International Data Transfer

Your data may be transferred and processed outside your country of residence, including in the United States and Canada, where privacy laws may differ from those in your jurisdiction.

We ensure appropriate safeguards to protect your information during international transfers, including:

Standard Contractual Clauses (SCCs) approved by regulatory authorities
Data Processing Agreements with all third-party service providers
Organizational and technical security measures to protect data integrity and confidentiality

By using our Services, you consent to the transfer of your information to the United States and Canada.

5. Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal information:

A. Rights Under CPRA (California Residents)

The California Privacy Rights Act (CPRA) provides California residents with the following rights:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Correct: Request correction of inaccurate personal information we maintain about you
Right to Opt-Out of Sale/Sharing: Opt-out of the sale or sharing of your personal information for cross-context behavioral advertising
Right to Limit Use of Sensitive Personal Information: Limit our use and disclosure of your sensitive personal information to purposes necessary to perform our Services
Right to Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment

Automated Decision-Making: We do not make automated decisions that produce legal or similarly significant effects. If this changes, we will provide notice and obtain consent as required.

Do Not Sell or Share My Personal Information: To opt-out of the sale or sharing of your personal information, click [here] or email

privacy@stepupup.com

We honor universal opt-out mechanisms such as Global Privacy Control (GPC) as a valid request to opt-out.

B. Rights Under Other U.S. State Privacy Laws

If you reside in Virginia, Colorado, Connecticut, Utah, Montana, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, or other states with comprehensive privacy laws, you may have similar rights including:

Right to Access: Confirm whether we process your personal data and access such data
Right to Correction: Correct inaccuracies in your personal data
Right to Deletion: Delete your personal data
Right to Data Portability: Obtain a copy of your personal data in a portable format
Right to Opt-Out: Opt-out of targeted advertising, sale of personal data, and certain profiling activities

C. Rights Under PIPEDA (Canadian Residents)

The Personal Information Protection and Electronic Documents Act (PIPEDA) provides Canadian residents with the following rights:

Right to Access: Access your personal information in our records within 30 days of your request
Right to Correct: Request correction of any inaccuracies in your personal information
Right to Withdraw Consent: Withdraw your consent for data collection and processing at any time (subject to legal or contractual restrictions)
Right to File a Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada
Right to Opt-Out: Opt-out of targeted advertising, sale of personal data, and certain profiling activities

Accountability: Our Chief Privacy Officer is responsible for ensuring compliance with PIPEDA. Contact information is provided in Section 11.

D. Additional Rights for Quebec Residents (Law 25)

If you reside in Quebec, you have additional rights under Quebec's Law 25:

Right to Portability: Request your personal information in a structured, commonly used, and machine-readable format
Right to Object to Automated Decision-Making: Object to decisions made solely through automated processing that produce legal or significant effects
Privacy by Default: Our privacy settings are configured to the highest protection level by default
Privacy Impact Assessments: We conduct Privacy Impact Assessments (PIAs) for high-risk data processing activities and data transfers outside Quebec

Breach Notification: In the event of a data breach presenting a risk of serious harm, we will notify you and the Commission d'accès à l'information du Québec (CAI) without undue delay.

E. How to Exercise Your Rights

To exercise any of your privacy rights:

Email: Send a request to support@stepupup.com with the subject line "Privacy Rights Request"
Mail: StepUp Technology, Privacy Rights Request, Address
Phone: Phone no

In your request, please include:

Your full name and email address
Description of your specific request
Information to help us verify your identity

Response Timeline: We will acknowledge your request within 10 business days and provide a substantive response within 45 days. For complex requests, we may extend this period to 90 days with notice to you.

Verification: To protect your privacy, we will verify your identity before processing your request. We may request additional information to confirm your identity.

No Fee: We do not charge a fee to process privacy rights requests unless they are manifestly unfounded, excessive, or repetitive.

6. Data Security

We take the security of your personal information seriously and implement industry-standard security measures, including:

Encryption: TLS/SSL encryption for data transmission; encryption at rest for sensitive data
Access Controls: Role-based access controls and authentication requirements for employee access
Security Assessments: Regular security audits, vulnerability assessments, and penetration testing
Employee Training: Ongoing privacy and security training for all employees with access to personal data
Incident Response: Documented procedures for detecting, responding to, and recovering from security incidents

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods:

Customer account data: 3 years after last activity or account closure
Marketing communications data: Until you unsubscribe, plus 1 year for compliance purposes
Payment and billing information: 7 years as required by tax and accounting regulations
Analytics data: 26 months (default Google Analytics retention period)
Website visitor logs: 12 months
Project deliverables and reports: Duration of client relationship plus 2 years

After the retention period expires, we will securely delete or anonymize your personal information.

8. Children's Privacy

Our Services are not directed toward children under the age of 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).

For California residents aged 13-16: We obtain opt-in consent before selling or sharing personal information of minors aged 13-16.

If you believe a child under 13 has provided us with personal information, please contact us immediately at privacy@stepupup.com, and we will take steps to delete such information.

9. Third-Party Services and Links

Our Site may contain links to third-party websites, tools, or services that are not operated by us. We are not responsible for the privacy practices, content, or policies of these third parties.

Third-party services we use include but are not limited to:

Google Analytics, Google Tag Manager (Analytics)
HubSpot, Mailchimp (Email Marketing)
Meta Pixel, Google Ads, LinkedIn Insight Tag (Advertising)
[Payment Processor Name] (Payment Processing)
[Cloud Provider Name] (Hosting)

Each third-party service has its own privacy policy governing the collection, use, and disclosure of your information. We encourage you to review their privacy policies before interacting with these services.

Accessing third-party websites or services is at your own risk, and we are not liable for any damages or losses arising from your use of third-party services.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

Notice of Changes: When we make material changes, we will:

Update the "Last Updated" date at the top of this Privacy Policy
Notify you via email (if you have provided your email address)
Display a prominent notice on our Site

Your Continued Use: Your continued use of our Site or Services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, please discontinue use of our Services.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Indemnification

For questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: privacy@stepupup.com
Mail: StepUp Technology, [Your Complete Physical Address]
Phone: [Your Phone Number]

Privacy Rights Requests: For requests to exercise your privacy rights (access, deletion, correction, opt-out), please use the subject line "Privacy Rights Request" when emailing us.

12. Do Not Sell or Share My Personal Information

California Residents: We do not sell personal information for monetary consideration. However, we may share personal information with advertising partners for cross-context behavioral advertising, which California law considers a "sale" or "sharing."

To opt-out of the sale or sharing of your personal information:

Email us at: support@stepupup.com with subject "Do Not Sell My Information"
We honor Global Privacy Control (GPC) browser signals as valid opt-out requests

We will process your opt-out request within 15 business days and will not discriminate against you for exercising this right.

Thank you for trusting StepUp Technology with your personal information. We are committed to protecting your privacy and handling your data responsibly