Privacy Policy

1. Who we are

Browners IT Services Ltd (“we”, “us”, “our”) is the data controller for personal data collected through this website and through customer communications.

2. What personal data we collect

We may collect and process the following categories of personal data:

a) When you contact us or use our services

• Name
• Email address
• Telephone or WhatsApp number
• Device details and fault descriptions
• Booking notes, quotes, invoices and communications
• Payment references (we do not store full card details)

b) When you use our website

• IP address
• Browser and device information
• Pages visited and basic usage data
• Approximate location (city/region level)

c) During repairs or diagnostics

• Limited access to data stored on your device only where necessary to diagnose or carry out the requested service

3. How we collect your data

We collect personal data when you:

• Contact us by email, phone or WhatsApp
• Submit an enquiry or booking request
• Request diagnostics, repairs or support
• Use our website
• Authorise us to inspect or repair a device

4. Why we use your data

We use personal data to:

• Respond to enquiries and provide quotes
• Book, manage and carry out repairs or support services
• Communicate updates about diagnostics, approval and collection
• Issue invoices, receipts and process payments
• Meet legal, accounting and regulatory obligations
• Maintain service history and handle complaints
• Ensure the website functions correctly and securely

5. Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract – to provide repairs, diagnostics, support and related services you request
• Legitimate interests – to respond to enquiries, manage our business, prevent fraud, and improve services
• Legal obligation – for tax, accounting and statutory record-keeping
• Consent – where required (for example, non-essential cookies). You may withdraw consent at any time

6. Data access during repairs

Devices submitted for diagnostics or repair may contain personal or sensitive data.

• You are responsible for backing up your data before submitting a device
• We only access the minimum data necessary to perform the requested service
• We take reasonable technical and organisational measures to protect data while a device is in our possession
• We do not provide automatic data backup unless expressly agreed in writing

Further details about data responsibility and repair-related risks are set out in our Consumer Repair & Services Terms.

7. Who we share data with

We only share personal data where necessary to operate our business or provide services. This may include trusted third-party providers acting as processors or independent controllers, such as:

• Website hosting and domain providers (including WordPress and domain registrars)
• Email and communications providers
• Payment processors (e.g. card or bank payment platforms)
• Accounting and invoicing software
• Delivery or courier services (where shipping is requested)
• Specialist third-party repair providers (only where authorised by you)

These providers are required to protect your data and use it only for the agreed purpose.

8. International transfers

Some service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK data protection law.

9. How long we keep your data

We keep personal data only for as long as necessary:

• Enquiries: typically up to 12 months
• Repair jobs, invoices and accounting records: typically up to 6 years
• Communications: for the duration of the service relationship and a reasonable period afterwards
• Website logs: retained for security and operational purposes only

10. Your data protection rights

You have rights under UK GDPR, including the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of data (in certain circumstances)
• Restrict or object to processing (in certain circumstances)
• Request data portability (where applicable)
• Withdraw consent where processing is based on consent

To exercise your rights, contact: DataProtection@BrownersITServices.co.uk

11. Cookies

Our website uses cookies and similar technologies to ensure it functions correctly and securely.

• Essential cookies may be set automatically
• Non-essential cookies will only be used where required consent is obtained
• You can control cookies through your browser settings
• If additional cookies or analytics tools are introduced, this policy will be updated.

12. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure. No system can be guaranteed to be completely secure.

13. Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO): https://ico.org.uk

14. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date.