Legal
Privacy & Cookies Policy
Last updated: 24 July 2026
Spaxec Solutions Ltd ("Spaxec", "we", "us") provides managed IT support, cybersecurity, compliance, and web development services to small and medium-sized businesses and healthcare providers across Greater Manchester and the North West. This policy explains how we collect and use personal data through this website, including our use of cookies, and how we handle data in the course of delivering our services.
Data controller: Spaxec Solutions Ltd, registered in England & Wales (company number: 17313070). Registered office: Bartle House, 9 Oxford Court, Manchester, M2 3WQ.
What information we collect
Through this website, we collect the information you provide directly when you contact us or book a free review: your name, email address, phone number, organisation, the category that best describes you, and the content of your message.
Where you consent to analytics cookies, we also collect technical information about your visit through Google Analytics, such as the pages you view and how you arrived at the site. See "Cookies and similar technologies" below for full details.
We do not collect payment information through this website, and this site is not directed at children. We do not knowingly collect personal data from children.
How and why we use your information
We use the information you submit through our contact form to respond to your enquiry, arrange a free review, or otherwise answer your question. Our lawful basis for this is legitimate interest: it's reasonably necessary for us to process your details in order to respond to you.
If you go on to become a client, we use your information to deliver, manage, and invoice our services to you, and to meet our own legal and regulatory obligations. Our lawful basis here is performance of a contract, and, where relevant, compliance with a legal obligation.
When we act as a data processor
Our services include managing IT systems, cybersecurity, and compliance for clients, some of whom hold sensitive data of their own, such as a GP practice's patient records or a care home's resident information. Where our work gives us access to that kind of data, we are acting as a data processor on our client's behalf, not as the controller, and that processing is governed by a separate data processing agreement with the client concerned, not by this policy.
This policy only covers personal data we collect directly, through this website and our own records of our relationship with you as an enquirer or client.
How long we keep information
Enquiry data that doesn't lead to a client relationship is retained for 12 months from your last contact with us, then deleted. Client data is retained for the duration of our engagement and for a reasonable period afterwards, in line with our service agreement and any regulatory or tax record-keeping requirements that apply to us.
Who we share information with
We do not sell or rent personal data. We share information only with trusted service providers who support our operations, each bound by their own data protection obligations, including our website hosting provider, our email provider, and, where you consent to analytics cookies, Google Analytics.
Some of these providers, including Google, may process data outside the UK. Where that happens, we rely on appropriate legal safeguards, such as standard contractual clauses, to keep your information protected to UK standards.
Keeping your information secure
As a cybersecurity business ourselves, we take the security of the data we hold seriously. We use appropriate technical and organisational measures, including access controls and encryption where appropriate, to protect personal data against unauthorised access, loss, or misuse.
Automated decision-making
We do not use the information you provide to make automated decisions that might affect you.
Your rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you
- Rectification of information that's inaccurate or incomplete
- Erasure of your information in certain circumstances (the "right to be forgotten")
- Restrict or object to certain processing
- Data portability, where we process your information by automated means under consent or contract
To exercise any of these rights, contact us at hello@spaxec.co.uk. We aim to respond within one month. There may be circumstances where we can't fully action a request, for example where we have a legal obligation to retain certain records, and we'll explain why if that applies.
What are cookies?
Cookies are small text files placed on your device when you visit a website. They're widely used to make sites work, work more efficiently, and to provide information to the site owner. Some of what's described below is stored in your browser's local storage rather than as a traditional cookie, but it works the same way and is covered by this policy.
The cookies and similar technologies we use
| Name | Purpose | Duration | Set by |
|---|---|---|---|
spaxec_cookie_consent(browser local storage, not a cookie) |
Remembers your cookie choice (accepted or rejected) so we don't ask you again on every visit | 6 months | Spaxec Solutions |
_ga, _ga_<container-id> |
Google Analytics: distinguishes users and sessions to give us anonymised statistics on site usage. Only set if you accept analytics cookies | Up to 2 years |
This table will be updated as our use of cookies changes.
Essential storage
The record of your cookie choice is required for the banner to work as intended (so we don't ask you again every time you visit) and doesn't require your consent, since the site can't function as intended without it.
Analytics cookies
We use Google Analytics to understand how visitors use this site: which pages are popular, how people navigate, and where we can improve. This involves Google Analytics setting cookies on your device and sharing some data with Google.
These cookies are not set until you agree to them. You'll see a short banner when you first visit the site, where you can choose to accept or reject analytics cookies. You can change your choice at any time, see "Managing your preferences" below.
We do not currently use advertising or third-party marketing cookies.
Managing your preferences
On this site: click "Manage cookie preferences" in the footer at any time to change your consent choice.
In your browser: most browsers let you block or delete cookies through their settings. Blocking essential cookies may affect how parts of this site work. Guidance for common browsers:
Opting out of Google Analytics specifically: you can install the Google Analytics Opt-out Browser Add-on.
Complaints
If you're unhappy with how we've handled your data, please contact us directly in the first instance at hello@spaxec.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Changes to this policy
We may update this policy from time to time, for example if our services or the tools we use change. Any changes will be reflected on this page with an updated "last updated" date.