The lab · your privacy
Privacy, with the short version at the top.
The short version: we take no more than the recovery needs, all data on your device is yours alone, we never sell any data to another party, and thirty days after your files have been returned to you, we will erase any working copies made by us. All of the details follow below.
Who we are. The company behind this website is called Easy Data Recovery Ltd, and it was incorporated in Northern Ireland under number NI625698 and also trades as Maidenhead Data Recovery. It appears on the Information Commissioner's register under registration number ZC173784. Correspondence about personal data protection should be sent to the bench our parcels arrive at: Guildford Data Recovery, Building 2, Ground Floor, Guildford Business Park, Guildford, GU2 8XG (address it to that name, since it is the one the building bears). Our contact number is 0800 6890668. Updated on 18 August 2026.
What is kept here, and why it is kept
Enquiry details. When you ring us or complete the form, we retain your name, telephone number, email address and how your device failed. We need these details to get back to you, view the equipment, price the job and take care of the process. Lawful basis: taking steps at your request prior to entering into a contract with you, and then performing that contract.
Case records. This includes job numbers, communications, quotes, approvals and despatch documents. They exist so the work gets done and so our financial records are in order and our other statutory obligations are met. Lawful bases: contract & legal obligation.
What is on the device. An engineer will handle files that can be recovered from your device. The engineer will open a file only when it is required for the recovery process. No one will look through your files, and anything that was found on a disk will be used for nothing beyond returning it to you. The lawful basis for processing your personal data is the need to perform a contract. If special category data appears during the recovery process, we will only process it as necessary to complete the technical recovery process you requested.
Practices we avoid
- We do not have a mailing list, and there is no email newsletter sent out. Your information will not be sold or passed on to advertisers.
- We set no tracking or advertising cookies at all, and it makes no difference to how this website works: it runs perfectly well without following you across the web.
- None of the devices or data you submit to us leaves the United Kingdom. Everything we do with your devices takes place in our UK-based laboratory.
Who else has sight of it
Only when absolutely necessary. The email system that delivers your enquiry to us is hosted by Hostinger (who also host this website). A courier moving your parcel reads the address label on the package. Our accountants may see the invoice but they don't see your data. They are all contractually bound to follow instructions only from us. Any time we must provide data to a government agency, it would only be because the law requires it.
Retention: the timetable
Once your files are delivered back to you, we keep the working copies locked up for a further thirty days. That way, should something need to be looked at again, we can make another pass at recovering some items. At the end of that thirty-day period, we securely destroy those working copies. In addition, if a device remains unpaid for or unclaimed within that same thirty-day timeframe, please refer to our terms regarding what happens next. Enquiry and case records are kept for six years, as tax, legal and warranty duties require, and are deleted after that.
Your rights under UK GDPR
All statutory entitlements apply in this instance. As such, submitting a subject access request will provide you with a copy of all information that we hold. Alongside the copy of data we hold are your rights to rectification, erasure, restriction, objection and portability. You can exercise any of these rights either by telephone or in writing to the address provided above. An answer is required from us within a calendar month of receipt. Should our response be insufficient for your needs, the ICO at ico.org.uk accepts complaints regarding data protection issues; however, it is usually quicker to let us resolve the issue directly.
Physical security of the device
Once booked in, each of your devices will have been allocated a unique case reference number and this number will remain assigned to your device until it has been dispatched. Your device will be stored securely in locked storage and only those engineers assigned to work your case will come into contact with it. Any recovered files will leave us on new media, whereas any copies retained by us will be deleted from our systems according to the schedule outlined above. In the event of a breach occurring which may compromise your rights, we would report this to the ICO within 72 hours and you would receive notification just as quickly, in clear terms.
For additional information click here: Terms & Conditions (PDF) · Contact us.