1. Who We Are

TommyTech (“we”, “us”, “our”) provides computer, laptop, console and mobile repairs, IT support, and data recovery services.

Business address:
TommyTech (inside Post Office)
187 Uxbridge Road
London, W13 9AJ

2. What Data We Collect

We only collect the minimum data necessary to provide our services. This may include:

• • Contact details: Name, email, phone number, address.

• • Service details: Device information (make, model, serial number, fault description).

• • Repair/Recovery data: In the case of data recovery, copies of customer data may be temporarily stored securely.

• • Payment details: Processed securely via trusted third-party payment providers (we do not store full card details).

• • Marketing preferences: If you subscribe to our mailing list or promotions.

3. How We Use Your Data

We process your data only when necessary and lawfully, including:

• • To provide repair, IT support, and data recovery services.

• • To contact you regarding updates, collections, or service queries.

• • To issue invoices and meet accounting/legal requirements.

• • To improve our services and customer experience.

• • With consent, to send you relevant marketing (you can opt out anytime).

4. Lawful Basis for Processing

Under GDPR, we rely on the following lawful bases:

• • Contract: To deliver the service you request.

• • Legal obligation: To maintain financial records.

• • Consent: For marketing communications.

• • Legitimate interests: For business operations and customer service.

5. Data Recovery & Security

We understand that data is highly sensitive.

• • All recovered data is encrypted and stored offline during the recovery process.

• • Only one authorized technician handles your recovery copy.

• • Recovered data is stored for a maximum of 14 days for your review.

• • Once approved, all copies are securely deleted within 24 hours.

6. How We Share Data

We never sell your data.
We may share limited personal data with:

• • Couriers (for collection/delivery services).

• • Payment processors (for billing).

• • Trusted third-party data recovery partners: We may work with specialist recovery partners, but only with your explicit consent and after prior agreement with you.

• • Legal/regulatory authorities if required by law.

All third parties are required to comply with GDPR and process your data securely.

7. Data Retention

• • Repair & service records: Kept for up to 1 year (warranty purposes).

• • Invoices & financial records: Kept for 6 years (legal requirement).

• • Data recovery copies: Deleted within 24 hours of customer approval, or within 14 days if no approval is given. During this period, all recovered data is stored on an offline server with full encryption. Access is strictly controlled, and only one assigned technician is authorized to handle the recovery process.

•  

8. Your Rights

You have the right to:

• • Access the personal data we hold about you.

• • Request correction of inaccurate data.

• • Request deletion of your data (where legally possible).

• • Object to processing (e.g., marketing).

9. Cookies & Website Use

If you visit our website, cookies may be used to improve user experience, analyse traffic, and support marketing. You can manage or disable cookies in your browser settings.

ICO: https://ico.org.uk/ESDWebPages/Entry/ZB815576