Privacy Policy

1. Who we are

IT Support & Security Ltd ("ISS", "we", "us", "our") is a managed IT services provider based in Cranleigh, Surrey. We provide IT support, cybersecurity and technology services to businesses across Surrey, Sussex and the South-East.

For the purposes of UK data protection law, ISS is the data controller for personal data collected through our website and in connection with our services.

Registered company: IT Support & Security Ltd
Address: 2 Williams Court, Littlemead Industrial Estate, Cranleigh, Surrey GU6 8NE
Email: info@iss-it.co.uk
Phone: 01483 268477

2. What data we collect

When you contact us or submit an enquiry

When you fill in a contact form, book a call or send us an email, we collect:

• Your name
• Your email address
• Your phone number (if provided)
• Your company name and job title (if provided)
• The content of your message

When you use our website

We use Google Analytics to understand how visitors use our site. This collects anonymised information including:

• Pages visited and time spent on each
• How you arrived at the site (search engine, referral, direct)
• Your approximate location (country/region level)
• Device type and browser

We do not collect your name or email address through analytics. IP addresses are anonymised before being processed by Google.

When you become a client

If you engage ISS as your IT provider, we may also collect information needed to deliver our services, including contact details for your team, details of your IT systems and infrastructure, and billing information. This is covered in your service agreement.

3. How we use your data

We use the information we collect to:

• Respond to your enquiries and booking requests
• Provide and manage IT support services
• Send you information you've specifically requested (e.g. proposals, guides)
• Improve our website and understand how people use it
• Comply with our legal and regulatory obligations

We do not sell your personal data. We do not use it for automated decision-making or profiling. We do not send unsolicited marketing emails.

4. Our legal basis for processing

Under UK GDPR, we process your personal data on the following legal bases:

• Legitimate interests — responding to enquiries, improving our services, and understanding how our website is used
• Contract — where processing is necessary to fulfil a service agreement with you or your business
• Legal obligation — where we are required to process data to comply with the law
• Consent — for non-essential cookies and any optional marketing communications (you can withdraw consent at any time)

5. Who we share your data with

We do not sell or rent your data to third parties. We may share your information with trusted third-party service providers who help us operate our business, including:

• Google Analytics — website analytics (anonymised data)
• WPForms / WordPress — contact form submissions
• Microsoft 365 — email and internal communication
• Our helpdesk and ticketing platform — for managing support requests

All third-party providers are required to handle your data securely and in accordance with applicable data protection law. We only share what is necessary for them to perform their services.

We may also disclose your data where required to do so by law, or to protect the rights, property or safety of ISS, our clients or others.

6. How long we keep your data

We retain personal data for as long as is necessary for the purposes for which it was collected, or as required by law. In practice:

• Enquiry and contact data — retained for up to 2 years from last contact, unless you become a client
• Client data — retained for the duration of the client relationship and for 7 years thereafter, in line with our legal and tax obligations
• Analytics data — retained by Google Analytics for 26 months by default

When data is no longer needed, we delete or anonymise it securely.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your data in certain circumstances
• Right to restriction — you can ask us to restrict how we use your data
• Right to portability — you can ask for your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at info@iss-it.co.uk. We will respond within one calendar month.

8. Cookies

Our website uses cookies — small text files stored on your device — to help the site function and to understand how it is used.

Essential cookies

These are necessary for the website to work and cannot be turned off. They do not store any personally identifiable information.

Analytics cookies

We use Google Analytics to collect anonymised information about how visitors use our website. These cookies help us improve the site over time. Analytics cookies are only set with your consent.

Managing cookies

When you first visit our site, you'll be asked to accept or decline non-essential cookies. You can change your preferences at any time via your browser settings. Note that disabling cookies may affect how some parts of the site work.

9. Security

We take the security of your personal data seriously. As an IT security company, we apply the same standards to our own systems that we recommend to our clients — including access controls, encrypted communications, regular patching and monitoring.

No method of transmission over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.

10. Contact and complaints

If you have any questions about this policy or how we handle your data, please contact us:

IT Support & Security Ltd
2 Williams Court, Littlemead, Cranleigh, Surrey GU6 8NE
info@iss-it.co.uk
01483 268477

If you are not satisfied with our response, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
ico.org.uk
0303 123 1113