Support42 Privacy Policy

Support42 Privacy Policy

Updated: June 2021

Data Collection

In order to provide our IT support services we need to record names, email addresses and phone numbers for people working for our clients in order to make contact with them to provide the required level of service. In addition we record technical information regarding IT systems required to provide our IT services and this may include IP addresses and credential information. Data is also held so we can deliver our services and so we can potentially provide useful information, for example important security update news.

Note that with prior agreement, in order to fulfil our contractual obligations and provide IT services, we may have access to personal data hosted in your systems.

In order to operate as a business, we need to keep personal data about potential customers. For example, when anyone submits their details on the contact form on our website, we need to keep a record in order to respond to them, but the data collected is only used for the purpose of dealing with that enquiry.

Data Stored

Depending on our relationship with you, we’ll hold information such as your first and last names, your email address, your phone number and your postal address. We will also possibly have details about your business and those who work for you. If you’re a client, then we may have some technical information to allow us to provide the relevant IT services.

As a responsible IT company, we store personal data on secured computer systems. Anything that is archived will be encrypted.

We use personal details and technical information stored on our systems to supply consultancy or support services to our clients. This data is not shared outside our organisation. We may also process your personal data in order to provide additional services via third parties such as email, antivirus, backups, and/or software as a service (e.g. Microsoft Office 365) at your request.

Data Location

Personal data held about you is held either on our systems in the UK, Microsoft Office 365 and/or Microsoft Azure. EU locations are used for Microsoft services. Cloud backup services are hosted in the UK only.

Data Retention

Personal and Technical data will be retained for as long as you remain an active client. When the data is no longer relevant, technical data will be archived for a period of time (usually 2 years), and personal data will be deleted, but you can request that we remove or update it at any time. We will also inform any relevant third parties of your request.

Third Parties

In order to provide additional services, as described in the ‘Data Stored’ section above, your data may be passed to third parties. This data will only be used to supply these services and will not be used, or supplied, to any third party for the purposes of marketing or any other service other than that for which it was originally collected unless required by law.

Legal Basis

Our contract with you as a client provides the legal basis for processing.

Website analytics

Our website uses Google Analytics, a service which transmits website traffic data to Google servers in the United States. Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We use reports provided by Google Analytics to help us understand website traffic and webpage usage.

By using this website, you consent to the processing of data about you by Google in the manner described in Google’s Privacy Policy and for the purposes set out above. You can opt out of Google Analytics if you disable or refuse the cookie, disable JavaScript, or use the opt-out service provided by Google.

Links to other websites

Our website may contain links to other websites. Please note that we do not have control over any site that we link to, therefore we cannot be responsible for the protection and privacy of any information that you may provide whilst visiting these sites. Any externally linked sites are not covered or included within this privacy policy and you should examine the privacy statement applicable to the website in question.


For any enquiry relating to your personal data and data protection, including to make a subject access request, please contact us.