PRIVACY POLICY FOR RICHARD CARPENDALE PROVIDING IT REPAIR AND SUPPORT SERVICES

The data controller is Richard Carpendale, whose contact details are as follows:

Correspondence address: Richard Carpendale, Alison Business Centre, 39 Alison Crescent, S2 1AS.

Phone 0750 555 9730.

Personal data is processed for the purposes of providing the services requested, as well for accounting purposes and for keeping records of work undertaken.

Personal data is processed on the basis that it is necessary for the performance of a contract to which a customer is party, or in order to take steps at the request of a person prior to entering into a contract.

Personal data is also processed for accounting purposes, keeping records of work undertaken and customers' contact details (such as phone numbers, addresses and email addresses), on the basis of the legitimate interests of the data controller.  These legitimate interests include 1) the keeping of accurate accounting records and 2) recording and retrieving details of work undertaken and customers' contact details (such as phone numbers, addresses and email addresses) to help in performing current or future work for a customer.

Accounting records which include names of customers are kept in online storage, which involves the transfer of data to a country outside the UK. Relevant adequacy regulations exist for this transfer under section 17A of the Data Protection Act 2018.

Personal data will be stored for the following periods:

• Contact details (such as phone numbers, addresses and email addresses) and details of work undertaken for customers, may be stored for an unspecified period, taking into consideration the point above.
• Personal data that may be collected by the data controller while backing up or transferring data from a customer's computer will be deleted following the completion of the job.

Persons who have had their personal data stored or processed by the data controller have the right to request from the controller:

• access to and rectification or erasure of personal data
• restriction of processing concerning that person
• to object to processing
• the right to data portability.

The provision of personal data by the customer is a requirement to enter a contract for the purposes of providing the work requested. The customer is not obliged to give this data, but failure to do so may have the following consequences: If the customer does not provide the address of their premises, then it will not be possible to provide work on-site; if the customer does not provide either a telephone number or email address, then it will not be possible to provide work remotely; if the customer does not provide access to the data on their devices, it may not be possible to provide the work requested.

Persons who have had their personal data stored or processed by the data controller have the right to lodge a complaint with the Information Commissioner's Office.

Date of policy: 15 December 2023