Who is responsible for your information?
Wrexham Tech Support is the trading name used by the sole trader who is the data controller for the personal information described in this notice. The controller's full legal identity and service address are provided privately with every accepted quotation, booking confirmation and invoice before a contract is made.
For privacy questions or requests, email hello@wrexhamtechsupport.co.uk or call 01978 365 365.
When we process personal data inside a business customer's systems solely on that customer's instructions, the customer will normally be the controller and Wrexham Tech Support will act as a processor under the applicable service agreement.
Information we may collect
- Contact details, such as your name, business name, email address, telephone number and service location.
- Enquiry, quotation, appointment, contract, invoice and payment records.
- Device, account, network, licence and technical information needed to diagnose or deliver the agreed service.
- Support communications, notes, audit records and remote-support session information.
- Website security and technical logs provided by our hosting and security suppliers.
- Marketing preferences and feedback where you choose to provide them.
We do not ask you to put passwords, one-time codes, payment-card details or unnecessary sensitive information into a website enquiry. If support work may expose private or sensitive data, we limit access to what is reasonably required for the agreed work.
How we obtain it
Most information comes directly from you by telephone, email, WhatsApp, during a visit or while providing support. We may also receive relevant information from an authorised contact at your organisation, a supplier you ask us to work with, or the systems and devices included in the service.
About the website enquiry form
The form prepares an email in your own mail application. It does not submit the form to a website database. Nothing is sent to us until you review the message and choose to send it from your email account.
Why we use information
| Purpose | Usual lawful basis |
|---|---|
| Responding to enquiries, preparing quotes and arranging work | Steps before a contract and legitimate interests |
| Delivering, documenting and supporting services | Contract and legitimate interests |
| Billing, accounting, tax and legal records | Contract and legal obligation |
| Protecting customers, systems and our business from misuse or security threats | Legitimate interests and, where applicable, legal obligation |
| Improving services and managing customer relationships | Legitimate interests |
| Sending optional electronic marketing | Consent, or legitimate interests where the law permits |
Our legitimate interests include operating a secure and effective IT service, keeping accurate service records, preventing fraud, improving support and maintaining appropriate customer relationships. We balance those interests against your rights and expectations.
Who we may share information with
We do not sell personal information. Where necessary, we may share it with:
- IT, cloud, email, security, backup, remote-support, accounting and payment suppliers used to run or deliver the service.
- Microsoft, Hornetsecurity, ESET and other vendors when you ask us to supply or support their products.
- Professional advisers, insurers, auditors and subcontractors who are subject to appropriate confidentiality obligations.
- Regulators, law-enforcement bodies or other parties where disclosure is required by law or needed to protect legal rights.
Some suppliers may process information outside the UK. Where that happens, we use providers and contractual or legal safeguards intended to provide an appropriate level of protection. You can ask us for more information about the safeguard relevant to your data.
How long we keep it
We keep information only for as long as it is reasonably needed for the purpose collected, to maintain service continuity, and to meet legal, tax, insurance or dispute requirements. The exact period depends on the record:
- Unsuccessful or one-off enquiries are normally reviewed for deletion after 12 months.
- Customer, contract, service and financial records are normally retained for up to six years after the relationship or relevant transaction ends.
- Technical logs, temporary working files and remote-support records are kept for shorter operational periods unless a security incident, contract or legal requirement justifies longer retention.
- Backup copies expire in line with the relevant protected system's backup and retention schedule.
Security
We use proportionate technical and organisational measures designed to protect personal information, including access control, secure cloud services, multi-factor authentication, device security and data minimisation. No internet or storage system can be guaranteed completely secure, but security is treated as part of service design rather than an afterthought.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information; receive certain information in a portable format; and object to particular uses. You can withdraw consent at any time where processing relies on consent. These rights may be limited by exemptions or overriding legal requirements.
Your right to object: you can object at any time to direct marketing. You may also object to processing based on legitimate interests, and we will consider your circumstances and the legal test that applies.
We do not use solely automated decision-making that produces legal or similarly significant effects. To exercise a right, email hello@wrexhamtechsupport.co.uk. We may need to verify your identity before acting.
Questions and complaints
Please contact us first so we can try to resolve a concern. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
See our Cookie notice for website storage technologies and our Complaints policy for the wider complaints process.