We look after other people's IT for a living, so we take the handling of personal data seriously. This page explains, in plain English, what information we collect, why we collect it, who we share it with and what rights you have over it.
Recall IT Consultancy ("we", "us", "our") provides managed IT support, cyber security, Microsoft 365 management, monitoring and backup services to businesses across Somerset and the South West.
For the personal data described in this policy, we are the data controller. We are registered with the Information Commissioner's Office (ICO) under registration number ZC056988.
| Trading name | Recall IT Consultancy |
|---|---|
| ICO registration | ZC056988 |
| [email protected] | |
| Telephone | 01460 297399 |
| Area served | Somerset and the South West, with remote support UK-wide |
Managed IT support means we handle personal data in two different ways, and different rules apply to each.
When you enquire through this website, email us, call us or become a client, we decide how and why your information is used. That's the data covered by this policy.
When we support a client's systems, managing their Microsoft 365 tenant, monitoring their devices, running their backups, we may come into contact with personal data belonging to their staff and their customers. In those cases the client is the controller and we act only on their documented instructions, under a written agreement that sets out what we may and may not do with that data.
We don't use advertising networks, we don't build marketing profiles, and we don't track you across other websites.
| What we use it for | Lawful basis |
|---|---|
| Replying to your enquiry | Legitimate interests. You asked us to get in touch |
| Providing a quote or free IT MOT | Steps taken at your request before entering a contract |
| Delivering and supporting our services | Performance of a contract |
| Invoicing, accounts and tax records | Legal obligation |
| Keeping the website secure and available | Legitimate interests. Protecting our systems and yours |
| Occasional service updates to existing clients | Legitimate interests, with an opt-out in every message |
| Marketing emails to non-clients | Consent. We only send these if you've asked us to |
Submitting the enquiry form doesn't sign you up to a mailing list or newsletter. We'll use your details to answer your enquiry and to follow up on it, and that's all.
We use a small number of trusted suppliers to run our business. They process data on our behalf, under contract, and cannot use it for their own purposes.
| Who | What they do |
|---|---|
| Web3Forms | Delivers submissions from the website enquiry form to our inbox |
| Cloudflare | Hosts and protects this website; processes technical request data |
| Microsoft | Our email, Microsoft 365 and business systems |
| Google Fonts | Serves the typeface used on this site; receives your IP address when a page loads |
| Our accountant | Bookkeeping, invoicing and statutory accounts |
| IT tooling providers | The remote monitoring, backup and security platforms we use to deliver managed services to clients |
We will also disclose information where we are legally required to, for example to a regulator, a court, or law enforcement acting under proper authority. Beyond that, we don't pass your details to anybody.
We store data in the UK and the European Economic Area wherever we reasonably can. Some of our suppliers are based in, or route traffic through, the United States. Where personal data is transferred outside the UK, it is protected by an approved safeguard such as the UK International Data Transfer Addendum, standard contractual clauses, or the UK extension to the EU–US Data Privacy Framework.
If you would like your details removed sooner, just ask. See section 9.
We apply the same standards to our own systems that we recommend to our clients: multi-factor authentication on every account that supports it, encryption in transit and at rest, least-privilege access, patching and endpoint protection on all our devices, monitored backups, and a documented process for handling a suspected breach.
If a personal data breach occurs that is likely to result in a risk to people's rights and freedoms, we will report it to the ICO within 72 hours and tell those affected without undue delay.
Under UK data protection law you have the right to:
Email [email protected] and we'll respond within one month. There's no charge. If you're asking on behalf of a client's employee, we'll pass the request to that client, as they're the controller of that data.
This website sets no advertising or tracking cookies. The full detail, including the strictly necessary cookies our security provider may set, is on our Cookie Policy page.
We review this policy from time to time and update it when our services or suppliers change. The date at the top of the page always shows the current version. If something important changes, we'll tell existing clients directly.
We'd always rather hear from you first so we can put things right. If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
By browsing and using this website you agree to the following terms, which together with the policy above govern your relationship with Recall IT Consultancy in relation to this website. If you disagree with any part of them, please do not use the site.