Privacy Notice

Infotechdirect Ltd Privacy Notice

1. Introduction

Infotechdirect Ltd (“we,” “our,” or “us“) is committed to protecting your personal data.

This Privacy Notice explains how we collect, use and protect personal data when you:

  • use our managed IT services
  • visit our website
  • contact us
  • interact with us in a professional capacity

Who We Are

  • Legal Name: INFOTECH DIRECT LIMITED
  • Head Office Address: 6 Springwood Drive, Mansfield Woodhouse, Mansfield, Nottinghamshire, NG19 9EB
  • Email: info@infotechdirect.co.uk
  • Data Protection Officer (DPO): Darrel Towndrow
  • DPO Contact: dpo@infotechdirect.co.uk

2. Types of Personal Data We Collect

We may collect and process the following categories of personal data:

Contact Information

Name, business address, email address, telephone number.

Contractual and Service Data

Service agreements, support requests, records of communications (for example support tickets or email correspondence).

Technical Data

IP address, device identifiers, browser type, operating system and connection information where collected through our website, support systems or network security tools.

Usage Data

Information about how services are used, such as support activity, system usage or service interactions.

3. How We Use Your Personal Data

PurposeLawful BasisDescription
Service DeliveryArticle 6(1)(b) ContractTo provide, maintain and support our managed IT services, including troubleshooting and technical support.
Security and System ProtectionArticle 6(1)(f) Legitimate InterestTo maintain the security of systems and networks, detect misuse and prevent fraud or cyber threats.
Legal ComplianceArticle 6(1)(c) – Legal ObligationTo comply with legal obligations including tax, regulatory requirements and law enforcement requests.
Marketing CommunicationsArticle 6(1)(a) Consent or Article 6(1)(f) Legitimate Interest (where permitted under PECR)To provide information about our services, updates or events. You can opt out of marketing at any time.

4. When We Act as a Data Processor

In many cases we process personal data on behalf of our customers when delivering managed IT services.

For example, when providing IT support to organisations such as schools or businesses, we may process personal data relating to their staff, pupils, customers or system users.

In these situations:

  • The customer is the Data Controller
  • Infotechdirect Ltd acts as the Data Processor

We process personal data only in accordance with the controller’s instructions and contractual agreements.

5. Who We Share Your Data With

We may share your personal data with:

Service Providers

Third-party suppliers such as cloud hosting providers or software vendors who support the delivery of our services. These organisations are contractually required to protect personal data.

Professional Advisors

Auditors, insurers, legal advisors or consultants assisting us with regulatory or legal matters.

Legal Authorities

Government bodies or law enforcement agencies where disclosure is required by law.

We do not sell or share your personal data with third parties for their marketing purposes.

6. International Data Transfers

Some service providers may process data outside the UK.

Where this occurs we ensure appropriate safeguards are in place, including:

  • UK approved Standard Contractual Clauses.
  • Adequacy regulations recognised by the UK government,

Further details can be requested by contacting our DPO.

7. How Long We Retain Your Data

We retain personal data only for as long as necessary.

  • Contractual Data: 6 years after the end of our contract (to comply with UK tax and legal requirements).
  • Support Tickets and Communications: 2 years after resolution.
  • Technical Logs: Up to 12 months.

8. How We Protect Your Data

We implement technical and organisational measures designed to protect personal data in accordance with Article 32 UK GDPR.

These measures include:

  • Encryption of data in transit and at rest where appropriate
  • Access controls restricting data access to authorised personnel
  • Security monitoring and system auditing
  • Regular risk assessments and security reviews
  • Staff training in data protection and information security

9. Your Rights Under UK GDPR

Individuals have the following rights regarding their personal data:

RightDescriptionHow to Exercise
Right of AccessRequest a copy of the data we hold about you.Email our DPO at dpo@infotechdirect.co.uk.
Right to RectificationAsk us to correct inaccurate or incomplete data.Contact our DPO.
Right to ErasureRequest deletion of your data (subject to legal exceptions).Contact our DPO. We will respond within one month.
Right to Restrict ProcessingAsk us to limit processing in certain circumstances (e.g., while we verify accuracy).Contact our DPO.
Right to Data PortabilityReceive your data in a machine-readable format (applies to data you provided).Contact our DPO.
Right to ObjectObject to processing based on legitimate interests or direct marketing.Email our DPO to opt out.

Requests can be made by contacting our DPO:

Email: dpo@infotechdirect.co.uk

We will respond within one month.

10. Automated Decision Making

Infotechdirect Ltd does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

11. Cookies and Tracking Technologies

Our website may use cookies or similar technologies to improve functionality and understand how visitors use the site.

Cookies may collect information such as:

  • IP address
  • device information
  • browsing behaviour

You can manage cookie preferences via our Cookie Banner or browser settings. For details, see our Cookie Policy.

12. Updates to This Notice

We may update this Privacy Notice from time to time.

Where significant changes occur we will update the notice on our website and update the revision date shown above.

13. Contacting the ICO

If you have concerns about how we process personal data you can contact the UK supervisory authority:

Information Commissioner’s Office:

Last Updated: 10th March 2026

ICO Registration Number

ZA441505