GDPR

IT Workhouse Ltd – Privacy Policy 

This privacy policy covers your usage of itworkhouse.co.uk (‘website’) and interactions with IT Workhouse as a potential customer, active customer and old customers. In this Privacy Policy ‘IT Workhouse’, ‘we’, ‘us’ and ‘our’ refer to IT Workhouse Ltd. IT Workhouse act as a data controller and, by law, are required to provide you with information about the company, about why and how we use your data, and about the rights you have over your data.   

IT Workhouse Ltd is an IT Services Provider. Our main office is registered to The Old Workhouse, Higher Union Road, Kingsbridge, Devon, TQ7 1EQ. Our Company Number is 12045999 and our VAT Number is GB327646092. Our principal email address is contact@itworkhouse.co.uk. 

Personal data means any information that we hold about you from which you can be identified either directly or indirectly and it may include your name; contact details; job title, employer organisation and professional activities, references provided by third parties, and results of other due diligence carried out. 

We collect and store your personal information when you interact with our website, contact us directly, corresponding with us in relation to a sale, order, product or service, as an on-going customer or when applying for any career opportunities with us. 

If you are a business contact, a trade supplier, or professional adviser we will hold limited amounts of personal data about you such as your name, contact details, job title, and employer organisation. 

If you are a contractor or consultant, we will hold personal data about you including the information set out below in this section, as well as your date of birth, bank account details and VAT number (to the extent applicable). 

We use the information and assets you provide primarily for the provision of the requested services to you and for related purposes including: 

• Keeping and updating customer records, so, for example, we know who owns the devices we look after and who/where to send invoices 

• Installing, maintaining, troubleshooting and repair of those IT devices and/or services 

• Legal and regulatory compliance 

• For our own administrative purposes or conducting internal audits 

Our use of that information is subject to your instructions, data protection law and our duty of confidentiality. We will not sell your personal data to others. We never have and never will. 

We may use your information to send you training material, updates and news concerning IT Workhouse and its business, activities and events which we feel will be of interest to you. If you wish not to receive these updates please notify us by clicking the unsubscribe option on the email you have received or by replying to the email itself. 

In order to store, hold and process your data lawfully we rely on one or more of the following legal grounds: 

• Your consent to processing activities. For example, where you have consented to us using your information for marketing purposes; or  

• Our legitimate interests in running our business. For example, if we enter into a transaction involving you, whether it completes or not, it may be necessary for us to process your personal information for the purpose of performing that contract and/or for complying with our legal and regulatory obligations; 

• Our compliance with a legal obligation to which IT Workhouse is subject. For example, we have a duty to investigate and respond to complaints made against us and may need to process your personal information as part of such investigation; or 

• If you are a party to a contract, because processing your personal data is necessary for the performance of that contract. 

Please note that our work for you may require us to pass on such information to third party tools and/or software. We may also give such information to others who perform services for us, such as bookkeeping and accountancy. Our premises may be audited or checked by our accountants or our regulator, or by other organisations. All such third parties are required to maintain confidentiality in relation to your data.  

Potential sub-processors of your information 

• SyncroMSP  

• Splashtop 

• 3CX  

• Xero   

• GoCardless 

• Stripe  

• Microsoft Office 365 

• Linode or Akamai 

• Azure 

• Synergi 

• UniFi 

• Pax8 

• Bitwarden 

• Backblaze 

• Squarespace 

• Jamf

From time to time, we may transfer your personal data to a third party in countries outside the UK including outside of the EEA for further processing in accordance with the purposes set out in this Privacy Policy. In particular, your personal data may be transferred to our outsourced service providers located abroad, and this may include companies, offices or data centres. In these circumstances we will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, organisational, contractual or other lawful means.  Please contact us if you would like more information about how your personal data may be transferred by us and the safeguards that we have put in place. 

You have a right of access under data protection law to the personal data that we hold about you. We seek to keep that personal data correct, up to date and for no longer than necessary. You should let us know if you believe the information we hold about you needs to be corrected or updated. 

IT Workhouse will take all reasonable steps to: 

• Safeguard all personal information that you provide to us 

• Ensure that the information remains confidential and secure 

• Ensure that personal privacy is respected 

Data protection law provides individuals with certain rights, including the right to: access, rectify, withdraw consent, erase, restrict, transport, and object to the processing of, their personal information. Individuals also have the right to lodge a complaint with the relevant data protection authority if they believe that their personal information is not being processed in accordance with the law. Further information about your rights is set out below: 

• Right to obtain a copy of your personal information. You may have the right to obtain a copy of the personal information we hold about you 

• Right to rectification. You may request that we rectify any inaccurate and/or incomplete personal information.  If we disagree and believe the information to be accurate and complete, we will advise you and include a notation on the record that you dispute the information’s accuracy 

• Right to withdraw consent. You may, as permitted by law, withdraw your consent to the processing of your personal information at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. 

• Right to object to processing. You may request that we stop processing your personal information. 

• Right to erasure. You may request that we erase your personal information and we will comply, unless there is a lawful reason for not doing so. 

• Right to lodge a complaint with the supervisory authority. You have the right to complain about the use of your personal information to the relevant supervisory authority, which in the UK is the Information Commissioner’s Office. 

We have appointed Alex Robertson, Director as our representative for the purposes of the Data Protection Act. Any request under this section should be submitted in writing to the Data Protection Officer at alex@itworkhouse.co.uk. We would also suggest that you contact us if you have any questions or if you have a complaint in relation to how we process your personal information. However, you do have the right to contact the relevant supervisory authority as noted above in this section. 

Data Protection – Your Obligations 

If you send us personal data about anyone other than yourself you will ensure you have any appropriate consents and notices in place to enable you to transfer that personal data to us, and so that we may use it for the purposes for which you provide it to us.