Privacy, with the short version at the top.

Who we are. The company behind this site is Easy Data Recovery Ltd, registered in Northern Ireland under number NI625698 and trading as Maidenhead Data Recovery; its entry on the Information Commissioner's register is ZC173784. Data-protection correspondence goes to the bench our parcels arrive at: Guildford Data Recovery, Building 2, Ground Floor, Guildford Business Park, Guildford, GU2 8XH — address it to that name, because it is the one the building carries. Our number is 0800 6890668. Revised 18 August 2026.

What is kept here, and why it is kept

Enquiry details. When you ring or send the form, we are left with your name, a telephone number, an email address and a description of what went wrong. Those are needed to answer you, look at the device, price the work and carry the case through. Lawful basis: steps taken at your request before a contract, then performance of it.

Case records. Job references, correspondence, quotations, approvals and despatch notes. These exist so the work can be done and so our accounts and statutory duties hold up. Lawful bases: contract, together with legal obligation.

What is on the device. Files cannot be recovered unless an engineer handles them. A file is opened only where the recovery requires it, nobody browses your material, and nothing found on a disk is put to any use beyond returning it to you. The lawful basis here is performance of a contract. Should special category data appear, it is processed no further than the technical recovery you commissioned requires.

Practices we avoid

• There is no mailing list and no newsletter, and nothing of yours is sold or passed to advertisers.
• This site sets no tracking or advertising cookies at all; it works perfectly well without following you across the web.
• Neither device nor data goes abroad. All of it is handled in our own UK laboratory.

Who else has sight of it

Only where the work allows no alternative. The mail service that brings your enquiry form to us sits with Hostinger, who host this site. A courier moves the parcel and reads the label on it. Our accountants see invoices and never the data itself. Each of them is contractually bound and acts solely on our instruction. Nothing goes to the authorities unless the law requires it.

Retention: the timetable

After your files have reached you, the working copies remain under lock for a further thirty days, so that a second pass is possible if anything needs revisiting, and are then securely destroyed. If a device is left unpaid for or uncollected inside that same period, the Terms explain what follows. Enquiry and case records are held for six years, which is what tax, legal and warranty duties require, and are deleted after that.

Your rights under UK GDPR

The full set of statutory rights applies here. A subject access request will produce a copy of what is held, and alongside it sit rectification, erasure, restriction, objection and portability. Exercise one on the telephone or in writing to the address given above, and an answer is owed within a calendar month. If that answer does not satisfy you, the ICO at ico.org.uk takes complaints, though allowing us to put the matter right is generally faster.

Physical security of the device

From the moment it books in, your device carries a single case reference and keeps that reference until it is despatched. It is held in locked storage, and only the engineers working the case go near it. Recovered files travel out on fresh media, while the copies retained here are erased to the timetable above. If your rights were ever put at risk by a breach, the ICO would hear within 72 hours, and you would hear just as quickly, in plain language.

Also worth reading: Terms & Conditions (PDF) · Contact us.