Data privacy is a primary concern for each of StepStone Group LP (“SSG”), StepStone Group Real Assets LP (“SIRA”) and StepStone Group Real Estate LP (“SRE” together with SSG and SIRA, collectively, “StepStone”). This data privacy notice (the “Notice”) details StepStone’s practices for collecting and disclosing the personal information of clients and others, to both affiliates of SSG, SIRA and SRE, as applicable, and nonaffiliated third parties. Recipients of this Notice include, among others, current clients and investors, prospective clients, former clients, employees of managers with whom StepStone has conducted business, and employees of StepStone or any of StepStone’s affiliates (each a “Notice Recipient”). For purposes of this Notice, an affiliate is an entity that (i) controls SSG, SIRA, or SRE, (ii) is controlled by SSG, SIRA or SRE, or (iii) is under common control with SSG, SIRA or SRE. Nonaffiliated third parties are parties who are not affiliates of any of SSG, SIRA or SRE.
Confidentiality of Personal Information
StepStone maintains the confidentiality of nonpublic personal information that a Notice Recipient provides to it. StepStone maintains physical, electronic and procedural safeguards to guard a Notice Recipient’s nonpublic personal information. All third parties that handle information must agree to follow the standards for confidentiality that StepStone has established. In addition, all people who work for StepStone are trained to handle a Notice Recipient’s information properly in order to maintain its security, and only employees who need to know nonpublic personal information about a Notice Recipient to provide services to such Notice Recipient have access to such information.
Categories of Nonpublic Personal Information that StepStone Collects
StepStone collects nonpublic personal information about Notice Recipients from the following sources: (i) information it receives from Notice Recipients on applications or other forms; and (ii) information about Notice Recipients’ transactions with StepStone, its affiliates, or others.
StepStone is a data controller within the meaning of data protection legislation in force in the European Economic Area (“EEA”) and undertakes to hold any nonpublic personal information provided in accordance with EEA data protection legislation.
Nonpublic personal information will be used by the StepStone for the following purposes:
- to manage and administer holdings in StepStone managed or advised funds, separately managed accounts, advisory engagements and any related business relationships (and, in each case, the investments made pursuant thereto) on an ongoing basis in accordance with the terms agreed between a Notice Recipient and SSG, SIRA or SRE, as applicable;
- to carry out statistical analysis and market research; and
- to comply with legal and regulatory obligations applicable to the Notice Recipient, StepStone or its managed or advised funds, separately managed accounts, advisory engagements or any related business relationship with the Notice Recipient from time to time, including applicable anti-money laundering and counter terrorist financing legislation, investor qualification legislation and tax legislation.
The nonpublic personal information will only be used in connection with StepStone’s legitimate business interests and accordingly Notice Recipients’ specific consent is not required.
Disclosure of Nonpublic Personal Information to Affiliates
StepStone generally may share all of a Notice Recipient’s nonpublic personal information with StepStone’s affiliates; provided that such affiliates will be obligated to keep such nonpublic personal information confidential to the same extent as StepStone. StepStone shares information with its affiliates in order to serve its Notice Recipients better. If a Notice Recipient prefers that StepStone not disclose nonpublic personal information about such Notice Recipient to its affiliates, such Notice Recipient may opt out of those general disclosures; that is, such Notice Recipient may direct StepStone not to make such disclosures (other than disclosures permitted or required by applicable law or otherwise permitted by StepStone’s privacy policy). However, notwithstanding any such opt-out, StepStone will be permitted to disclose personal information to its affiliates to the extent necessary or appropriate for such affiliates to perform services for the benefit of the Notice Recipient.
Disclosure of Nonpublic Personal Information to Non-Affiliates
StepStone does not sell or market a Notice Recipient’s personal information to nonaffiliated third parties. StepStone’s intent is to respect the Notice Recipients’ expectations that their personal information will be kept confidential. However, in order to serve the Notice Recipients better, StepStone will disclose personal information to nonaffiliated third parties (including service providers to StepStone), but only to the extent necessary or appropriate for such third parties to perform services for the benefit of the Notice Recipient and only if StepStone believes that such personal information will be kept confidential by such third parties after such disclosure.
Additional Information About Categories of Nonpublic Personal Information that StepStone Discloses
Except as required by applicable law and described in this privacy notice, StepStone will not share any other nonpublic personal information about a Notice Recipient with its affiliates or nonaffiliated third parties.
Nonpublic Personal Information of Former Investors and Prospective Clients
This Notice and StepStone’s policy regarding treatment of nonpublic personal information of Notice Recipients also apply to former clients, business prospects, potential clients and current and former employees.
Disclosure of Nonpublic Personal Information outside the EEA
Nonpublic personal information may be transferred to countries which may not have the same or equivalent data protection laws as that required under EEA data protection legislation. Any such transfer will be made in compliance with applicable data protection legislation, and appropriate measures are in place to ensure this, such as entering into Model Contractual Clauses (as published by the European Commission). For more information on the means of transfer of data or a copy of the relevant safeguards, please contact us at privacy@stepstoneglobal.com.
Pursuant to EEA data protection legislation, investors have the right to object to processing of nonpublic personal information and a number of other rights which may be exercised in certain circumstances, i.e.:
- the right of access to nonpublic personal information held;
- the right to amend and rectify any inaccuracies in nonpublic personal information held;
- the right to erase nonpublic personal information held;
- the right to data portability of nonpublic personal information held; and
- the right to request restriction of the processing of nonpublic personal information
These rights will be exercisable, subject to limitations as provided for in EEA data protection legislation. Any Notice Recipient may make a request to StepStone to exercise these rights by contacting us at privacy@stepstoneglobal.com.
Please note that nonpublic personal information may be retained by StepStone for the duration of a Notice Recipient’s investment or engagement with StepStone, and afterwards in accordance with StepStone’s legal and regulatory obligations, including but not limited to StepStone’s record retention policy.
For queries, requests or comments in respect of this Notice, or the way in which StepStone uses nonpublic personal information, please contact us at privacy@stepstoneglobal.com. Note that Notice Recipients have the right to lodge a complaint with the appropriate regulator.
Changes to Privacy Policy
StepStone may modify its privacy policy at any time.
