1. Who is responsible for your information?
ITECH MOBILES AND REPAIR CENTRE LTD is the data controller. We are a company registered in England and Wales under company number 17052336. Our registered office is 9 Harbour Street, Ramsgate, Kent, United Kingdom, CT11 8HA. Our trading address is 9 Harbour Street, Ramsgate, Kent, CT11 8HA.
For privacy questions or to exercise your rights, use our data rights page. You may also write to our registered office.
2. Information we collect
- Identity and contact details: name, date of birth, email address, mobile number, postal address and account details.
- Service and transaction details: enquiries, product reservations, in-store sales, valuations, offers, repair, warranty, collection and delivery records.
- Device details: make, model, serial or IMEI where needed, reported faults, condition, diagnostic notes and repair progress.
- Content you provide: messages, photographs, videos and verified reviews.
- Communication details: email, SMS, WhatsApp or Telegram preferences, messages and delivery records.
- Website and security details: authentication sessions, server and audit logs, browser or device information and IP address where it appears in security logs.
- Privacy-friendly website events: actions such as opening a repair form, requesting directions, sharing a product or selecting a contact button, together with the page path and relevant product reference. These events do not use analytics cookies or build an advertising profile.
Please do not include passwords, payment-card details or unrelated private information in repair notes, messages, photographs or videos.
3. Where information comes from
Most information comes directly from you through the website, by telephone, through a messaging service or in our shop. We may also receive information from a family member or representative acting for you, from a staff member recording an in-store transaction, or automatically from our website and security systems.
If somebody gives us information about another person, they must have authority to do so and should make this notice available to that person.
4. Why we use information and our lawful bases
- Contract or steps requested before a contract: accounts, enquiries, reservations, repairs, valuations, collections, deliveries and customer service.
- Legal obligation: accounting, tax, consumer protection, fraud prevention and responding to lawful requests.
- Legitimate interests: operating and securing the website, maintaining service and warranty records, measuring useful website actions without tracking cookies, preventing misuse, improving services, resolving complaints and sending one invitation for honest feedback after a genuine transaction. We balance these interests against your rights.
- Consent: optional electronic marketing and optional communication channels where consent is required. You may withdraw consent at any time.
We need the fields marked as required to answer a request, provide the relevant service or meet a legal requirement. If you do not provide them, we may be unable to create an account, accept a booking, identify a repair or respond safely. Optional fields can be left blank.
5. Repair trackers and QR codes
A repair QR code opens a limited, mobile-friendly progress page. It is designed not to show the customer's name, contact details, private notes or internal records. Anyone who receives the link or QR code may be able to view the limited repair status until the tracker is revoked or expires, so share it only with people you trust.
Product QR codes lead to public product information and do not grant access to a customer account.
6. Who we share information with
We share only what is needed with providers that support website hosting, secure data storage and backup, email delivery, communications, postcode lookup and workflow automation such as n8n. If an administrator sends a product to n8n, customer information is not intended to form part of that product publishing payload.
If you choose SMS, WhatsApp or Telegram, the relevant contact details and message content are processed by the communications provider. Those providers may also use information under their own privacy terms. We may share information with delivery providers, professional advisers, insurers, regulators, law enforcement or another party where reasonably necessary or required by law. We do not sell personal information.
Some providers may process information outside the UK. Where this happens, we rely on an applicable UK adequacy regulation or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum, as required. Contact us if you would like more information about the safeguard used for a particular provider.
7. Marketing
Email, SMS and direct messages on services such as WhatsApp or social media can count as electronic marketing. We send optional marketing only where permitted and provide a clear way to opt out. Service messages about an enquiry, reservation or repair are not marketing. You can unsubscribe from marketing at any time without affecting your service.
8. AI and automation
We may use approved automation to route enquiries, prepare summaries or draft communications. A member of staff remains responsible for prices, repair decisions, valuation offers and important customer communications. We do not make decisions with legal or similarly significant effects solely by automated means.
Customer information must not be sent to an AI provider unless that provider has been approved for the purpose and only the minimum necessary information is used.
9. How long we keep information
- Account information: while active, then normally up to 24 months after closure, unless related transaction records must be kept longer.
- Sales, repair, warranty and completed service records: normally up to 6 years after the transaction or service ends.
- Unconverted enquiries and viewing requests: normally up to 24 months after the last contact.
- Valuation and repair uploads: normally up to 12 months after the matter closes, unless needed for a warranty, dispute or legal obligation.
- Communication and notification records: normally up to 24 months.
- Privacy-friendly analytics events: normally up to 24 months.
- Published verified reviews: while relevant and accurate. Supporting transaction links may be retained for up to 6 years.
- Marketing details: until you unsubscribe or they are no longer current; a minimal suppression record may be retained so we continue to respect your opt-out.
- Security and audit logs: only for as long as reasonably needed to protect the service, investigate incidents and demonstrate authorised administrative actions.
We may keep information longer where a dispute, legal claim or legal duty requires it, and delete or anonymise it when no longer needed.
10. Your rights
Depending on the circumstances, you may ask for access to your personal information, correction, erasure, restriction, portability, or object to how it is used. You may withdraw consent at any time. These rights are not absolute, and we may need to verify your identity or retain some records for legal reasons. We normally respond within one month.
You have an absolute right to object to direct marketing at any time. You may also object to processing based on our legitimate interests. Use the unsubscribe link in an email, change your account preferences or contact us.
If you are unhappy with our response, you may complain to the Information Commissioner's Office through ico.org.uk, telephone 0303 123 1113, or write to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
11. Keeping information safe
We use access controls, encrypted connections, password hashing, backups and role-based staff permissions intended to protect customer information. No internet service is completely risk-free, so use a unique password and contact us promptly if you think an account, private link or device record has been misused.
12. Changes to this notice
We review this notice when our services, suppliers or legal obligations change. We will bring material new uses of personal information to your attention before they begin where required.
