Privacy Policy

Sole trader — Ben Gilmour, trading as Geeky Gilmour Tech Services, based at 5 Mar Terrace, Clackmannan, FK10 4JE.

Ben is the "data controller" for the personal data described in this policy — the person responsible for deciding how and why it's used.

Contact: [email protected]

Enquiries via our contact form: your name, email address, and the content of your message.

If you become a client (e.g. Managed IT Support, Business Launch): additional information needed to deliver that service — which may include business name, billing details, device information, email accounts, and Microsoft 365 tenant details, depending on the service.

Website browsing: our website does not use analytics, advertising, or tracking cookies. We do not collect any personal data simply by you browsing the site.

• ▸Responding to your enquiry — legal basis: legitimate interests (replying to people who contact us)
• ▸Providing a service you've purchased — legal basis: performance of a contract
• ▸Meeting our legal and tax obligations (e.g. invoicing, accounting records) — legal basis: legal obligation

We do not use your data for automated decision-making or profiling, and we do not sell or rent personal data to third parties.

We use the following third parties to help us run our business. Each only receives the data needed to perform their function:

• ▸Resend (resend.com) — sends emails on our behalf, e.g. replying to contact form submissions
• ▸Hetzner (hetzner.com) — hosts the servers that run our website and store account and content data for our website and client services
• ▸Cloudflare — stores portfolio/content images, and for Business Launch clients also provides domain DNS and email routing setup
• ▸Domain registrars — for Business Launch clients, to register a domain on your behalf

We do not share your data with anyone else unless required by law.

Hetzner hosts our servers in Germany, and Cloudflare stores portfolio/content images in its EU region — both within the European Economic Area, which the UK government recognises as providing an adequate level of data protection, so these transfers don't require any extra safeguards.

Resend is based in the United States. We rely on their Standard Contractual Clauses to ensure your data stays protected to UK standards when it passes through their systems.

• ▸Contact form enquiries that don't turn into a client relationship: kept for 12 months, then deleted
• ▸Client records: kept for the duration of the service relationship plus 6 years, to meet standard UK accounting and tax record-keeping obligations

Under UK GDPR you have the right to:

• ▸be informed about how your data is used (this policy)
• ▸access the personal data we hold about you
• ▸have inaccurate data corrected
• ▸have your data erased, where there's no legal reason for us to keep it
• ▸restrict or object to certain processing
• ▸request a copy of your data in a portable format
• ▸withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact [email protected].

If you're unhappy with how we've handled your data, you can complain to us directly, or to the UK's data protection regulator:

• ▸Information Commissioner's Office (ICO)
• ▸ico.org.uk
• ▸0303 123 1113

We may update this policy from time to time. The "last updated" date below will always reflect the latest version.