You’ve trusted us with a hard drive containing years of your history. We want you to be assured of who has access to this and how we store your name and phone number so we can communicate with you about the work we’ll do on the hard drive. This includes exactly what we collect, why, for how long and what actions you can take regarding each item.
Last updated 5 August 2026.
Your contact details: your name; email; phone number; return address (if we post an item back). You provide this to us via the online diagnostic form; contact form; email & telephone.
The contents of your device: a “recovery” means scanning all of the items stored on the media. We can’t possibly determine before-hand which sectors contain your files. Once scanned, we do not browse them; create indexes of them; nor use them for any purpose other than to restore your items back to you.
| Quoting, and doing the recovery | To perform our contract with you |
| Payment and accounting records | Legal obligation |
| Website analytics | Your consent — see cookies below |
| Defending a legal claim | Our legitimate interests |
When a device contains health records (or other special category data) our legal basis for processing this data is either to establish/defend legal claims or when we have received explicit consent from you.
The recovery is done in-house. Your device will not be sent to another laboratory. Nor will the data contained within your device be transferred to another entity. Your device & all of its content remains within the United Kingdom at all times.
Four service providers must process limited amounts of data on our behalf: our website host; couriers used to transport returned devices (limited to name & address); payment processor & accountant; and Google Analytics (if accepted by you). We do not sell data nor share data for marketing purposes. We will only disclose data pursuant to applicable laws requiring disclosure.
Any data collected for Google Analytics may be processed outside of the United Kingdom (as per the UK addendum to the standard contractual clauses). All other data will remain within the United Kingdom.
| Recovered data on our systems | Wiped 30 days after you confirm you have it, or sooner on request |
| Enquiries that do not become jobs | 12 months |
| Job records and invoices | 6 years — the limitation period, and HMRC's requirement |
| Analytics | 14 months |
You are able to request a copy of what we are holding, request that the information be corrected or removed, require us to pause processing, obtain a transferable format of your data, and/or object to processing based upon our legitimate interests. At any time you may also withdraw consent for processing.
Please write to Castlemead, Lower Castle Street, Bristol, BS1 3AG or contact 0117 332 1137. We will respond within one calendar month, and there is no charge.
First please inform us if you believe we have processed your personal data incorrectly. If you wish to submit a complaint regarding your personal data, you may also submit the complaint to the Information Commissioner’s Office via ico.org.uk/make-a-complaint or by calling 0303 123 1113.
None of the options are set until you select to enable/accept them. The initial option will display as a banner; when clicked, the answer will remain stored in a single entry located on your own browser/device.
If accepted, Google Analytics allows us to view the most viewed page(s) from your visit to our website and how visitors arrived at those pages. Should you refuse or decline to accept cookies, the script is never requested, rather than being loaded and instructed to ignore you. Regardless of whether you accept or refuse cookies, we will never use the analytics script to personally identify you.
“Bristol Data Recovery” is the trading name of Easy Data Recovery Ltd, a company formed in Northern Ireland (Company No.: NI625698), at Castlemead, Lower Castle Street, Bristol, BS1 3AG. This company is the “Data Controller,” registered with the ICO (Information Commissioner’s Office) under reference ZC173784.
We don’t automatically make any decisions about you. All of our quotes are created by an engineer after they look at the device(s) you’re using. No matter what, you have the option to provide us with your details; however, we cannot quote, retrieve, or return any information if we can’t identify you. The date listed at the beginning of this statement will be changed when this document changes.