Privacy Policy

1Who We Are

Next Step Technologies Inc. (“NST”, “we”, “us”, or “our”) is an information technology services company incorporated and operating in Barbados, West Indies. We provide cybersecurity, IT infrastructure, cloud services, custom software development, AI solutions, and related IT services to businesses across the Caribbean.

Our website is located at https://nst.solutions. For privacy-related enquiries, please contact us at [email protected].

2Information We Collect

We collect personal information in the following ways:

Information you provide directly:

• Name, email address, phone number, and company name submitted through our contact form
• Information provided when requesting a service quote or IT assessment
• Communications you send to us via email, WhatsApp, or phone

Information collected automatically:

• IP address and browser information when you visit our website
• Pages visited, time spent on site, and referring URLs via analytics tools
• Cookie data as described in Section 8 of this policy

Information from service delivery:

• Technical information about your systems and infrastructure necessary to deliver contracted IT services
• Contact details for key personnel at client organisations

3How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to enquiries submitted through our contact form or via email
• To provide, manage, and support the IT services you have contracted us to deliver
• To send service-related communications, including updates, maintenance notifications, and invoices
• To conduct our internal business operations, including record-keeping and financial administration
• To improve our website and service offerings based on usage patterns
• To comply with legal obligations applicable to our business in Barbados

4Legal Basis for Processing

Where applicable data protection legislation requires us to identify a legal basis for processing personal information, we rely on the following:

• Contractual necessity, processing required to deliver IT services you have engaged us to provide
• Legitimate interests, processing necessary for our business operations, including responding to enquiries and improving our services
• Legal obligation, processing required to comply with applicable laws in Barbados
• Consent, where you have given us explicit consent, such as subscribing to communications

5How We Share Your Information

We do not sell or share your personal information with third parties for their own commercial purposes. We may share information in the following limited circumstances:

• Service providers, trusted third-party vendors who assist us in delivering our services (e.g. cloud platform providers, communication tools), bound by confidentiality obligations
• Technology partners, where required to fulfil licensed software or hardware services on your behalf (e.g. Sophos, Microsoft)
• Legal requirements, where disclosure is required by law, court order, or regulatory authority in Barbados or other applicable jurisdictions
• Business transfers, in the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction

6Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements.

• Contact form submissions: retained for up to 2 years from the date of submission
• Client records: retained for the duration of the service relationship and for 7 years thereafter in accordance with Barbados business record-keeping requirements
• Website analytics data: retained in aggregated, anonymised form

When personal information is no longer required, we securely delete or anonymise it.

7Data Security

As an IT security company, we take the protection of personal information seriously. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction.

• All data in transit is encrypted using industry-standard TLS protocols
• Access to personal data is restricted to authorised personnel on a need-to-know basis
• Our systems are monitored and regularly assessed for security vulnerabilities

No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.

8Cookies & Tracking

Our website uses cookies, small text files stored on your device, to improve your browsing experience and understand how visitors use our site.

Types of cookies we use:

• Essential cookies, required for the website to function correctly. These cannot be disabled.
• Analytics cookies, help us understand how visitors interact with our site (e.g. pages visited, time on site). Data is aggregated and anonymised.
• Functional cookies, remember your preferences to improve your experience on return visits.

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of this website.

9Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access, request a copy of the personal data we hold about you
• Correction, request correction of inaccurate or incomplete data
• Deletion, request deletion of your personal data, subject to legal retention requirements
• Objection, object to processing based on legitimate interests
• Restriction, request that we restrict processing of your data in certain circumstances
• Portability, request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10Third-Party Services

Our website may contain links to third-party websites or use third-party services. This privacy policy applies only to nst.solutions. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you access through our website.

11Children’s Privacy

Our website and services are directed at businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us immediately at [email protected] and we will take steps to delete it.

12Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes acceptance of the updated policy.

13Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal information, please contact us: