1. General

This policy explains how we collect, use, store, and protect personal data, and the rights you have in relation to it.

2. Visitors to Our Website

We may collect and process personal data in the following ways:

• 2.1.1 When you complete forms on our website (e.g., name, address, email, phone number).
• 2.1.2 When you report a problem with our site or contact us (we may keep a record of correspondence).
• 2.1.3 Details of your visits to our site (traffic data, location data, weblogs, resources accessed — including cookies).
• 2.1.4 Whenever you disclose information to us via our site.

2.2 Additional Data Collection

• IP Address: We may collect information about your device (including IP address) for fraud protection and system administration. This does not identify individual users.
• Cookies: Our site uses cookies to enhance user experience and for analytical purposes (see our Cookie Policy for more information).

2.3 Purpose of Using Personal Data

We may use personal data for legitimate interests, including:

• Providing services you requested.
• Enabling participation in interactive features.
• Improving our site and services.
• Responding to complaints or inquiries.
• Marketing purposes, if you have opted in (see Section 6).

3. Customers

When you order goods or services, we collect your name, address, phone number, and email to process your order and fulfil our contractual obligations.

• We may share personal data with third parties (e.g., payment providers such as PayPal/Barclays; couriers such as Royal Mail/DPD) to assist with order processing and delivery.
• We may feature feedback on our website and marketing materials with your consent.
• We retain data for the duration of our contract and for 6 years afterwards for accounting purposes.

4. Suppliers

We collect personal data (e.g., employee names and contact details) to facilitate business transactions, retaining this information for 6 years following the provision of goods or services.

5. If You Fail to Provide Personal Data

Failure to provide necessary personal data may prevent us from fulfilling contractual obligations and could lead to cancellation of a product or service.

6. Marketing

We may use your personal data for marketing if you have subscribed to our mailing list or shown interest in our services. You can opt out at any time by email: dpo@retro-it.co.uk

7. Monitoring and Recording

We may monitor and record communications for training, fraud prevention, and compliance purposes. CCTV is in place at our premises for security reasons.

8. Legal Basis for Processing

We process personal data based on:

• Performance of a contract
• Compliance with legal obligations
• Legitimate interests
• Protection of vital interests

9. Disclosure to Third Parties

We may disclose personal data to:

• Employees and affiliated entities
• IT service providers and professional advisers
• HMRC and regulatory authorities
• Parties involved in a business sale/merger/acquisition
• Police or other authorities when required by law

10. Data Security

We implement physical, technical, and organisational measures to safeguard personal data. However, no method of transmission over the internet or electronic storage is 100% secure. Always keep passwords confidential.

11. Access, Update, Delete & Restrict

You have the right to access, update, delete, or restrict the use of your personal data. Please contact: dpo@retro-it.co.uk

12. Withdrawal of Consent

You can withdraw consent at any time where we rely on it to process your data. Please contact: dpo@retro-it.co.uk

13. Changes to This Privacy Policy

We may update this policy at any time. Changes will be posted here, and we will notify you of any significant updates.

14. Contact Us

If you have questions or concerns about your data, contact our Data Protection Officer at dpo@retro-it.co.uk.