Privacy Policy
What information we collect, why we need it, and what we do with it — in plain English.
We keep this simple because you should be able to understand it. If anything here is unclear, ring us on 07775 580371 and we will explain it.
Who we are
IT Surgery is a trading name of IT Solution Architecture Limited, a company registered in England and Wales (company number 12066050), registered office 8 Beechwood Close, Sully, Penarth, CF64 5WW.
We are the data controller for the information described here. For any privacy question, email Help@ITSurgery.me.
What we collect
- When you contact us. Your name, phone number, email address if you give one, and whatever you tell us about your problem — through the enquiry form, WhatsApp, email or over the phone.
- When we do work for you. Notes about the job, what we did, and any details needed to fix the problem. For business customers, this may include information about your systems.
- During remote support. We see your screen while helping you. We do not record sessions unless you agree to it first.
- For invoicing. Billing details and payment records, which we must keep for tax purposes.
We do not use tracking cookies, advertising trackers or website analytics. We do not build profiles of visitors.
Why we are allowed to hold it
- To answer your enquiry — our legitimate interest in responding to someone who has contacted us.
- To do the work — performance of our contract with you.
- To keep accounts and invoices — a legal obligation under tax law.
Who else sees it
We do not sell your information, ever, and we do not share it for marketing. A small number of suppliers process data on our behalf:
- Netlify — hosts this website and receives enquiry form submissions.
- Microsoft — our email, files and Microsoft Teams, which we use for remote support sessions.
- WhatsApp (Meta) — if you choose to message us that way. Messages are covered by WhatsApp's own privacy terms as well as ours.
- Google Fonts — this site loads a typeface from Google, which means Google receives your IP address when a page loads. No cookie is set and we receive nothing from it.
- Our accountant — for invoices and tax records.
We may also disclose information if the law requires it.
How long we keep it
- Enquiries that don't become work — up to 12 months, then deleted.
- Customer and job records — for as long as you are a customer, and 6 years afterwards.
- Invoices and accounts — 6 years, as tax law requires.
- Recorded remote sessions — only made with your agreement, kept no longer than 90 days unless you ask us to keep your copy longer.
Keeping it safe
Your information is held in access-controlled accounts protected by multi-factor authentication, and transmitted over encrypted connections. Only Darren has access. We will never ask you for your banking passwords, and no genuine support session ever requires them.
Your rights
Under UK data protection law you can ask us to:
- Give you a copy of the information we hold about you
- Correct anything that is wrong
- Delete it, where we are not required to keep it
- Restrict or object to how we use it
- Provide it in a portable format
Email Help@ITSurgery.me and we will respond within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your information, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk (opens in a new tab) or on 0303 123 1113.
Changes
If we change this policy we will update this page. This version was published in July 2026.