Privacy Policy

A2z Computer Solutions Ltd
Last updated: 13 August 2026

This privacy policy explains how A2z Computer Solutions Ltd (“A2z Computer Solutions”, “we”, “us” or “our”) collects, uses, stores and protects personal information when you visit https://a2zcomputersolutions.co.uk, contact us, request a quotation, book a visit, purchase goods or use our computer repair, data recovery or IT support services.

We are committed to handling personal information lawfully, fairly, transparently and securely in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

1. Who we are and how to contact us

A2z Computer Solutions Ltd is the controller of the personal information described in this policy.

Address: 188 Wandsworth Road, London, SW8 2JU
Telephone: 020 7627 5643
Email: info@a2zcomputersolutions.co.uk
Website: https://a2zcomputersolutions.co.uk

For privacy questions or to exercise your data protection rights, please use the contact details above and mark your request “Data Protection Request”.

2. The information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information: name, business name, address, postcode, email address and telephone number.

• Booking, repair and transaction information: device type, make, model, serial number or IMEI where needed, reported fault, repair history, job number, quotation, invoice, warranty and collection information.

• Payment information: payment status and transaction references. Card payments are normally handled by our payment provider; we do not intend to store complete card details.

• Communications: emails, messages, telephone notes, enquiries, complaints, feedback and customer-service records.

• Device-access information: a device password, PIN or temporary account details only where reasonably necessary to diagnose, test or complete an authorised repair, and only with the customer’s knowledge.

• Device content encountered during service: files, photographs, messages, account information or other content may be visible incidentally while diagnosing, repairing, testing, transferring or recovering data. We do not access customer content unless reasonably necessary for the authorised service.

• Website and technical information: IP address, browser and device type, operating system, referring pages, pages viewed, approximate location, cookie identifiers and website interaction data.

• Marketing preferences: whether you have agreed to receive marketing and any opt-out request.

• Fraud, security and compliance information: information needed to confirm identity, protect devices and accounts, prevent fraud, handle disputes or comply with law.

Please do not provide information that is not necessary for your enquiry or service. Before leaving a device with us, you should back up your data where possible, remove unnecessary confidential information and sign out of accounts that are not required for testing.

3. How we collect information

We collect personal information:

• directly from you through our website forms, by telephone, email, message, in person or when you buy or use a service;

• from an authorised representative, employer, insurer or other person arranging a service for you;

• automatically through cookies, server logs and similar technologies when you use our website; and

• from service providers or public sources where necessary to verify a transaction, prevent fraud, comply with law or manage a business relationship.

If someone gives us information about another person, they must have authority to do so and should make this policy available to that person.

4. Why we use information and our lawful bases

Purpose	Information commonly used	UK GDPR lawful basis
Respond to enquiries, give quotations and arrange bookings	Identity, contact, communication and device information	Steps at your request before entering a contract; legitimate interests in responding to business enquiries
Provide repairs, diagnostics, data recovery, IT support, goods and warranties	Identity, contact, repair, transaction, device-access and necessary device-content information	Performance of a contract; legitimate interests in delivering and documenting the requested service
Take payment, issue invoices and maintain tax and accounting records	Identity, contact, payment and transaction information	Performance of a contract; legal obligation
Communicate about a booking, repair, collection, warranty, complaint or service update	Identity, contact, communication and transaction information	Performance of a contract; legitimate interests in customer service and dispute management
Protect customers, devices, our website, systems and business; detect fraud and investigate misuse	Identity, technical, transaction, communications and security information	Legitimate interests in security, fraud prevention and establishing, exercising or defending legal claims; legal obligation where applicable
Operate, maintain and improve our website and services	Technical, cookie, enquiry and service information	Legitimate interests for strictly necessary operation and service improvement; consent where PECR requires it for non-essential cookies
Measure advertising and website performance, including Google Analytics or Google Ads features	Cookie identifiers, IP address, technical and interaction information	Consent for non-essential cookies or similar technologies; legitimate interests may apply to subsequent limited analysis where lawful
Send electronic marketing about our services	Contact details and marketing preferences	Consent, or the PECR “soft opt-in” for our own similar services where its conditions are met; legitimate interests for permitted business-to-business marketing
Comply with legal, regulatory and insurance requirements	Relevant identity, transaction, communication and repair information	Legal obligation; legitimate interests in compliance and risk management

Where we rely on legitimate interests, we consider whether the use is necessary, proportionate and reasonably expected, and balance our interests against your rights and freedoms. You may object to processing based on legitimate interests; see section 12.

Where information is required to enter into or perform a contract, failing to provide it may mean that we cannot provide a quotation, accept a booking, verify ownership, complete a repair or supply the requested service.

5. Repair devices, passwords and customer data

Computers and phones can contain highly personal information. We therefore apply the following rules:

• We access only the areas of a device reasonably necessary to diagnose, repair, test, recover data from or otherwise perform the service authorised by the customer.

• We ask for a password, PIN or temporary account only where it is reasonably necessary. Customers may remove the credential after service. We delete or securely dispose of recorded access credentials when they are no longer needed.

• Staff and authorised contractors are expected to maintain confidentiality and may not browse, copy or disclose customer files for an unrelated purpose.

• Data recovered or transferred for a customer is kept only for the agreed service and limited follow-up period, then securely deleted unless law, a dispute or the customer’s further instruction requires otherwise.

• We may refuse to access or process content that appears unlawful, harmful or outside the scope of the authorised service, and may preserve or disclose information where required by law.

Our services are not a substitute for the customer’s own backup. Although we take reasonable care, repair and recovery work can involve an unavoidable risk of data loss.

6. Cookies, Google Analytics and Google Ads

Our website may use:

• strictly necessary cookies required for security, core functions, form submission and preference storage;

• analytics cookies to understand website use and improve performance; and

• advertising cookies or similar technologies to measure advertising, attribute enquiries or sales, limit repeated advertising and, if enabled, support remarketing.

Except where the law permits otherwise, analytics and advertising technologies are not set until you give consent through our cookie controls. Refusing non-essential cookies will not prevent access to the core website. You can withdraw or change your choice at any time through the website’s cookie settings. You may also delete cookies using your browser settings.

Google may process technical and interaction information when Google Analytics, Google Ads conversion measurement, Google Maps or other Google services are enabled. Google acts under its own terms and privacy information for some processing. We configure these services and our consent controls with the aim of limiting collection to what is necessary and honouring the choices available on our website.

For full and current details of the cookies and similar technologies actually deployed—including provider, purpose and duration—please see our Cookie Policy or the cookie-settings panel on the website.

7. Marketing communications

We do not sell personal information or mailing lists.

We send marketing emails or text messages to individuals only where we have valid consent or where the PECR soft opt-in applies to our own similar services. Every electronic marketing message will provide a straightforward way to opt out. You can also opt out at any time by emailing info@a2zcomputersolutions.co.uk.

We may keep a minimal suppression record after an opt-out so that we can respect the request. Service messages about an active booking, repair, payment, safety issue or warranty are not marketing.

8. Who we share information with

We disclose only the information reasonably necessary for the relevant purpose. Recipients may include:

• website hosting, maintenance, security, communications and email providers;

• booking, customer-management, accounting and invoicing providers;

• payment processors and banks;

• parts suppliers, specialist repairers, data-recovery providers or IT contractors where needed for the requested service;

• analytics and advertising providers, including Google, where the relevant service is enabled and any required consent has been obtained;

• professional advisers, insurers, auditors and debt-recovery providers; and

• courts, regulators, law-enforcement bodies, tax authorities or other parties where disclosure is required by law or reasonably necessary to protect rights, property or safety.

Where a supplier processes personal information for us, we require appropriate confidentiality, security and data-protection commitments. A specialist provider may sometimes act as a separate controller and will be responsible for its own privacy information.

We may disclose relevant information as part of a proposed sale, transfer or restructuring of our business, subject to appropriate safeguards.

9. International transfers

Some technology providers may store or access personal information outside the United Kingdom. Where UK data protection law restricts such a transfer, we use an appropriate safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism. We also consider supplementary technical and organisational safeguards where appropriate.

You may contact us for more information about the safeguards relevant to your information.

10. How we protect personal information

We use technical, operational and policy measures appropriate to the nature of the information and the risks involved. These measures include, as appropriate:

• encrypted HTTPS connections for our website and data in transit;

• password protection, multi-factor authentication where supported, and access limited according to job responsibilities;

• device locking, security updates, anti-malware and firewall protection on business systems where appropriate;

• restricted physical access to customer devices and records, with secure storage while devices are in our custody;

• collection of only the information reasonably needed for each purpose;

• confidentiality requirements and data-protection guidance for people who handle customer information;

• checks on service providers and written data-processing terms where required;

• backups and recovery measures appropriate to our business systems;

• secure deletion or destruction of information and media when no longer needed;

• procedures for identity verification, rights requests, security incidents and personal-data breaches; and

• periodic review of access, risks, retention and the effectiveness of safeguards.

No system is completely secure. If a personal-data breach occurs, we will investigate, contain and document it, notify the Information Commissioner’s Office where legally required, and notify affected individuals where the breach is likely to create a high risk to their rights and freedoms.

11. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose collected, including legal, accounting, warranty, security and dispute requirements. Our usual periods are:

Record	Usual retention period
Enquiries that do not become a booking or sale	Up to 12 months after the last contact
Repair, booking, sale, invoice and payment records	Up to 7 years after the end of the relevant financial year or transaction, where needed for tax, accounting, warranty or legal claims
Routine customer-service and complaint correspondence	Up to 6 years after closure where needed to manage disputes or legal claims
Device passwords, PINs or temporary access details	Deleted as soon as they are no longer needed for the authorised service, normally on completion or collection
Temporary copies created for data transfer or recovery	Normally deleted within 30 days after completion or collection, unless a different period is agreed or needed for a dispute
Marketing consent and preferences	While marketing continues; suppression records may be kept as long as needed to honour an opt-out
Website security logs	Normally up to 12 months, unless needed longer to investigate security, fraud or legal issues
Analytics and advertising data	According to the settings and retention periods shown in our cookie information and the relevant provider controls

We may keep information for longer if required by law, a regulator, court proceedings, fraud prevention or an active dispute. We may retain information in anonymised form where it can no longer identify an individual.

12. Your data protection rights

Depending on the circumstances, you may have the right to:

• be informed about how your personal information is used;

• request access to your personal information;

• ask us to correct inaccurate or incomplete information;

• ask us to erase information;

• ask us to restrict processing;

• object to processing based on legitimate interests and object at any time to direct marketing;

• receive information you provided in a structured, commonly used, machine-readable format and ask for it to be transferred where the right to data portability applies;

• withdraw consent at any time, without affecting processing carried out before withdrawal; and

• not be subject to a decision based solely on automated processing that has legal or similarly significant effects, subject to legal exceptions.

We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

To exercise a right, contact us using section 1. We normally respond without charge and within one month, although the law permits an extension in certain cases. We may request information necessary to confirm identity and protect personal information. We will not insist on a passport or driving licence where a less intrusive method is sufficient.

13. Complaints

Please contact us first if you have a concern so that we can try to resolve it.

You also have the right to complain to the UK Information Commissioner’s Office (ICO):

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Children

Our website and services are not directed at children, and we do not knowingly collect children’s personal information through the website for marketing. A parent, guardian or other authorised adult should arrange a repair or purchase on behalf of a child. If you believe a child has provided personal information without appropriate authority, please contact us.

15. External links

Our website may link to third-party websites or services. Those organisations control their own processing, and their privacy policies apply. We are not responsible for third-party privacy practices.

16. Changes to this policy

We review this policy regularly and update it when our services, suppliers, technology or legal obligations change. The latest version will be published on this page with a revised “last updated” date. If a change materially affects how we use information already collected, we will provide additional notice where required.