Privacy Policy

Last updated: [date to confirm]. DRAFT – for Tim to review before publishing.

Who we are

This website is run by Norwich IT Ltd, trading as Elephant IT (“Elephant IT”, “we”, “us”), company number 06151427, 36 Brabazon Road, Norwich, NR6 6SZ. We are the data controller for the personal information described in this policy. If you have any questions, email website@elephant-it.co.uk or call 01603 852222.

What we collect

• When you contact us by phone or email: your name, contact details and whatever you tell us, so we can reply.
• Customers: contact and billing details for the people we deal with, and the information we need to support your IT systems.
• Website visits: basic technical information such as your IP address and browser type, kept in our web host’s server logs for security. See our Cookie Policy.

How and why we use it

Under UK data protection law (UK GDPR and the Data Protection Act 2018) we must have a lawful basis for using your information. We use it:

• to answer your enquiry and to provide our services (to take steps towards, or perform, a contract);
• to keep our website and systems secure, and to run our business (our legitimate interests);
• to keep accounting and tax records (legal obligation).

We do not sell your information, and we do not send marketing emails without your consent.

Who we share it with

We only share information with trusted suppliers who help us run the business, such as our website host, email provider, accountant and the IT platforms we use to support customers. They may only use it to provide their service to us. Some suppliers may store data outside the UK; where they do, we make sure appropriate safeguards are in place.

How long we keep it

We keep enquiry emails for as long as needed to deal with them, customer records for the length of our relationship, and accounting records for six years, as the law requires. [To confirm retention periods.]

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to data portability. To use any of these rights, contact us using the details above. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.