Privacy Policy

1. Introduction

Backup IT ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use and store your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies when you use www.backupit.co.uk, contact us or use our services.

2. Information We Collect

We may collect contact details such as your name, business name, address, telephone number and email address; account information such as usernames or IDs needed to provide IT support; technical data such as IP address, device details, operating system and software versions; service data such as reported issues, files sent for troubleshooting and backup records; and billing information processed securely by trusted third-party payment providers.

When you use a website form, we process the details you provide, the time of the request, and limited security information such as your IP address and browser details. We use this information to respond to your enquiry, prevent abuse and protect the website.

We do not store your full card details.

3. How We Use Your Data

We use your personal data to respond to enquiries, provide and manage IT support, communicate about support requests and service updates, process payments and invoices, protect our systems from abuse, and meet legal or regulatory obligations.

We will not sell, rent or trade your personal data to third parties.

4. Legal Basis for Processing

We rely on legitimate interests to respond to enquiries, secure the website and administer our services. Where you ask us to take steps before entering a contract, or where we provide services to you, we process data to take those steps or perform the contract. We process billing and record-keeping information where needed to meet legal obligations. We only rely on consent where we clearly ask for it, such as optional analytics or marketing where applicable.

5. Data Storage & Security

We take appropriate technical and organisational measures to secure your personal data against unauthorised access, alteration, disclosure or destruction. Data is stored on secure servers in the UK or EEA. Remote access tools are protected by multi-factor authentication and encrypted connections.

6. Sharing Your Data

We may share your data with payment processors, hosting and IT infrastructure providers, subcontractors who assist in service delivery and law enforcement or regulatory authorities if required by law. Subcontractors are bound by confidentiality agreements.

We will never share your data for marketing purposes without your explicit consent.

7. Data Retention

We keep personal data only for as long as needed for the purpose collected. Enquiries are normally kept for up to 24 months after our last meaningful contact. Website security logs are normally kept for up to 90 days. Customer, support and billing records may be kept for longer where needed to provide ongoing services, resolve a dispute or meet legal, accounting or tax requirements. When information is no longer needed, it is securely deleted or anonymised.

8. Your Rights

Under the UK GDPR, you have the right to access the personal data we hold about you, request correction, request deletion, object to or restrict processing, request data portability and withdraw consent where we rely on it.

To exercise these rights, use the contact form on this website. You also have the right to complain to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

9. Cookies

We use essential cookies to protect forms and secure restricted areas. We do not currently use analytics or advertising cookies. If optional analytics is enabled in future, it will remain off unless you choose to allow it. See our Cookie Policy for more detail.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

11. Contact Us

Backup IT, Staffordshire. Please use the contact form for privacy questions or to exercise your data protection rights.