Customer data is now an invaluable business asset that helps our clients inform future product development and service offerings, and build deeper relationships with their customers. At the same time, our clients’ customers are highly aware of data security and the rights they have in protecting it.

We work with clients to implement practical strategies built for their business objectives, while ensuring compliance with the framework of data protection regulation.

We also advise on the contractual implications surrounding these statutory obligations. This includes acting for Creative & Digital Agencies who are providing services to clients, including the use of their clients’ data and advising technology clients on appropriate levels of liability for working and supplying products that use personal data.

We act for a variety of clients, such as technology companies, e-businesses and production companies, who either collate and process personal data themselves, or act as a processor of personal data on behalf of their clients.


  • Advising a dating agency website on capturing, using and storing personal data

  • Drafting terms and conditions for for the capture and use of personal data via a family collaboration portal designed for better communication between divorced and separated families

  • Advising digital creative clients on their obligations to clients whose digital services process personal data

  • Making recommendations to, the podcast and content platform, on the use and capture of personal data, and drafting suitable terms and conditions

  • Advising brands on their digital marketing campaigns, including the sensitive area of processing children’s personal data

Key contracts / services

  • Website and Platform Terms and Conditions

  • Privacy and Cookie Policies

  • Privacy advice for online businesses and online platforms

  • Strategic advice including acting as data protection officer for businesses

  • Data protection registrations

  • Data compliance advice

  • Data protection information access requests

Case Studies

Agile CRM Development Project

Our client, a Bristol-based digital media agency, had won a pitch to develop a bespoke CRM system to be rolled out across various sites of a national charity.

We worked with our client to negotiate an agile development agreement for the build of the system. The project was of high value, great for the client’s business of course, but equally managing the risk that came with it, was key. In addition, the charity was sensitive because it had been involved in a number of failed IT projects in the past, which it was keen not to repeat. Understanding the charity’s concerns, as well as our clients, was key to proposing workable solutions for both parties. Although our client was highly experienced in its field, we were able to bring our experience in working on agile projects from a legal perspective. This helped us to agree a negotiating approach with our client and advise where we felt it was acceptable to push, or hold out for certain points.  This included the term of the project and commitment to the budget, rights of termination, approvals and limitations of our client’s liability. 

Ensuring that both parties’ expectations were clearly defined, meant that our client was able to clearly consider exposure to risk, and to put in place internal processes to manage that risk within the project team. Ultimately this holistic approach lead to a successful project, where our client exceeded the charity’s expectations, and has laid a great foundation for future work.

Read more

Who to contact

Rebecca Steer

Rebecca Steer
+44 (0)117 230 9700
+44 (0) 7887 627063

Steer & Co are supportive and flexible. Rebecca Steer provides thorough and practical advice to start-ups and other digital businesses

– Legal 500 2015, ranked in TMT, Media and Entertainment, South West

Rebecca Steer is a very strong listener but at the same time is not afraid to share her opinions.

– Legal 500 2021, ranked in Intellectual Property, South West