This Privacy Policy explains how NetNinja IT Support collects, uses, and protects your personal data when you visit our website or use our services. We are committed to handling your data responsibly and in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
NetNinja IT Support ("we", "us", "our") is a UK-based IT support company providing IT services to small businesses. We are the data controller for the personal data we collect through this website and in the course of providing our services.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: [email protected] Phone: 07300 403590
2. What personal data we collect
We collect personal data in the following ways:
Contact form submissions: When you complete our contact form, we collect your name, business name, email address, phone number, and the content of your message.
Email and phone enquiries: When you contact us directly by email or phone, we collect the information you provide.
Service delivery: When we provide IT support services to your business, we may collect information necessary to deliver those services, including contact details for your staff and technical information about your IT systems.
Website usage: We collect standard technical information when you visit our website, including your IP address, browser type, pages visited, and referring URLs. This is collected via cookies — see our Cookie Policy for more details.
3. How we use your personal data
We use the personal data we collect for the following purposes:
To respond to your enquiries and provide you with information about our services.
To deliver IT support services to your business under a contract with you.
To send you service-related communications, such as appointment confirmations or support updates.
To improve our website and services based on how visitors use them.
To comply with our legal obligations.
We do not use your personal data for automated decision-making or profiling, and we do not sell your data to third parties.
4. Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
Contract: Where processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract.
Legitimate interests: Where we have a legitimate business interest in processing your data, such as responding to enquiries or improving our services, and that interest is not overridden by your rights.
Legal obligation: Where we are required to process your data to comply with a legal obligation.
Consent: Where you have given us your explicit consent, such as when you tick the consent checkbox on our contact form.
5. Who we share your data with
We do not sell, rent, or trade your personal data. We may share your data with trusted third-party service providers who assist us in operating our business, including:
IT systems and software providers (such as Microsoft 365 for email and document management).
Customer relationship management and helpdesk software providers.
Website hosting and analytics providers.
All third parties we work with are required to handle your data securely and in accordance with UK data protection law. We do not transfer your personal data outside the UK or European Economic Area without appropriate safeguards in place.
6. How long we keep your data
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
Enquiry data (contact form submissions and email enquiries) is retained for up to 2 years from the date of last contact.
Client data collected in the course of providing services is retained for up to 6 years after the end of the client relationship, in line with standard business and legal requirements.
Website usage data collected via cookies is retained in accordance with our Cookie Policy.
7. Your rights
Under UK data protection law, you have the following rights:
Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data.
Right to erasure: You can ask us to delete your personal data in certain circumstances.
Right to restriction: You can ask us to restrict how we process your data in certain circumstances.
Right to data portability: You can ask us to provide your data in a structured, commonly used format.
Right to object: You can object to our processing of your data where we rely on legitimate interests.
Right to withdraw consent: Where we process your data based on consent, you can withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.
9. Data security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
All data transmitted to and from our website is encrypted using TLS. Access to personal data within our organisation is restricted to those who need it to perform their role.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
If we make significant changes that affect how we use your personal data, we will take reasonable steps to notify you.
11. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: [email protected] Phone: 07300 403590
