Privacy Policy

Spaxec Solutions Ltd ("Spaxec", "we", "us") provides managed IT support, cybersecurity, compliance, and web development services to small and medium-sized businesses and healthcare providers across Greater Manchester and the North West. This policy explains how we collect and use personal data through this website, and how we handle data in the course of delivering our services.

Data controller: Spaxec Solutions Ltd, registered in England & Wales (company number: 17313070). Registered office: Bartle House, 9 Oxford Court, Manchester, M2 3WQ.

What information we collect

Through this website, we collect the information you provide directly when you contact us or book a free review: your name, email address, phone number, organisation, the category that best describes you, and the content of your message.

Where you consent to analytics cookies, we also collect technical information about your visit through Google Analytics, such as the pages you view and how you arrived at the site. This is covered in full in our Cookie Policy.

We do not collect payment information through this website, and this site is not directed at children. We do not knowingly collect personal data from children.

How and why we use your information

We use the information you submit through our contact form to respond to your enquiry, arrange a free review, or otherwise answer your question. Our lawful basis for this is legitimate interest: it's reasonably necessary for us to process your details in order to respond to you.

If you go on to become a client, we use your information to deliver, manage, and invoice our services to you, and to meet our own legal and regulatory obligations. Our lawful basis here is performance of a contract, and, where relevant, compliance with a legal obligation.

When we act as a data processor

Our services include managing IT systems, cybersecurity, and compliance for clients, some of whom hold sensitive data of their own, such as a GP practice's patient records or a care home's resident information. Where our work gives us access to that kind of data, we are acting as a data processor on our client's behalf, not as the controller, and that processing is governed by a separate data processing agreement with the client concerned, not by this policy.

This policy only covers personal data we collect directly, through this website and our own records of our relationship with you as an enquirer or client.

How long we keep information

Enquiry data that doesn't lead to a client relationship is retained for 12 months from your last contact with us, then deleted. Client data is retained for the duration of our engagement and for a reasonable period afterwards, in line with our service agreement and any regulatory or tax record-keeping requirements that apply to us.

Who we share information with

We do not sell or rent personal data. We share information only with trusted service providers who support our operations, each bound by their own data protection obligations, including our website hosting provider, our email provider, and, where you consent to analytics cookies, Google Analytics. See our Cookie Policy for details on analytics specifically.

Some of these providers, including Google, may process data outside the UK. Where that happens, we rely on appropriate legal safeguards, such as standard contractual clauses, to keep your information protected to UK standards.

Keeping your information secure

As a cybersecurity business ourselves, we take the security of the data we hold seriously. We use appropriate technical and organisational measures, including access controls and encryption where appropriate, to protect personal data against unauthorised access, loss, or misuse.

Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, to object to or restrict certain processing, and to request a copy of your data in a portable format. To exercise any of these rights, contact us at hello@spaxec.co.uk.

Cookies

See our Cookie Policy for full details on how this website uses cookies and similar technologies, and how to manage your preferences.

Contact us and complaints

If you have any questions about this policy or how we handle your data, contact us at hello@spaxec.co.uk.

If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

We may update this policy from time to time, for example if our services or the tools we use change. Any changes will be reflected on this page with an updated "last updated" date.