Privacy Notice

The data controller is Richard Carpendale, whose contact details are as follows:

Correspondence address: Richard Carpendale, Alison Business Centre, 39 Alison Crescent, S2 1AS.
Phone: 0750 555 9730.
Email: my name at dot co dot uk

Personal data is processed for the purposes of providing the services requested, as well for accounting purposes and for keeping records of work undertaken.

Personal data is processed on the basis that it is necessary for the performance of a contract to which a customer is party, or in order to take steps at the request of a person prior to entering into a contract.

Personal data is also processed for accounting purposes, keeping records of work undertaken and customers’ contact details (such as phone numbers, addresses and email addresses), on the basis of the legitimate interests of the data controller. These legitimate interests include 1) the keeping of accurate accounting records and 2) recording and retrieving details of work undertaken and customers’ contact details (such as phone numbers, addresses and email addresses) to help in performing current or future work for a customer.

We use service providers established in the EU to provide:

online accounting and financial-record storage;
business email hosting and delivery; and
the operation of our website contact form and delivery of submitted messages.
to receive online forms acknowledging regarding terms and agreements.

These providers may process identification and contact information, email correspondence, contact-form messages, invoices and accounting data.

The providers process this information on Richard Carpendale’s behalf to provide their contracted services. They are required them to follow instructions, maintain confidentiality, protect personal information using appropriate technical and organisational measures, and not use the information for their own purposes unless they have separately informed you that they act as an independent controller.

Relevant government regulations exist approving the use of data processors that are established in the EU.

Personal data will be stored no longer than the following periods:

Contact details (such as phone numbers, addresses and email addresses) may be stored for 1 year for enquiries that do not result in work undertaken, or 10 years following work that is undertaken;
Details of work undertaken for customers: 10 Years;
Accounting records and associated communications: 7 Years.

Personal data that may be collected by the data controller while backing up or transferring data from a customer’s computer will be deleted following the completion of the job.

Persons who have had their personal data stored or processed by the data controller have the right to:

request from the controller;
access to and rectification or erasure of personal data;
restriction of processing concerning that person;
to object to processing; and
the right to data portability.

The provision of personal data by the customer is a requirement to enter a contract for the purposes of providing the work requested. The customer is not obliged to give this data, but failure to do so may have the following consequences: If the customer does not provide the address of their premises, then it will not be possible to provide work on-site; if the customer does not provide either a telephone number or email address, then it will not be possible to provide work remotely; if the customer does not provide access to the data on their devices, it may not be possible to provide the work requested.

Persons who have had their personal data stored or processed by the data controller have the right to lodge a complaint with the Information Commissioner’s Office.

Date of policy: 16 August 2026