01. Who we are

This website and the services described in this policy are operated by Joel Senior-Watson, trading as Poulton PC’s, a sole-trader computer services business based in Poulton-le-Fylde, Lancashire.

For the purposes of UK data protection law, Joel Senior-Watson, trading as Poulton PC’s, is the data controller responsible for deciding how and why personal information is used in connection with the business.

We provide custom PC builds, computer repairs, upgrades, servicing, refurbished computers, technical support and related membership services.

02. Information we collect

The information we collect depends on how you interact with us. It may include:

Contact and identity information

Name, address, email address and telephone number.
Contact details supplied through website forms, customer accounts, email, telephone, WhatsApp Business or social media.

Orders, payments and business records

Products or services purchased, quotations, orders, invoices and payment records.
Delivery, collection and billing details.
Payment status and transaction references supplied by payment providers. We do not intentionally store customers' full payment card numbers or security codes.

Computer and repair information

Computer specifications, component details, serial numbers and device information.
Reported faults, diagnostic findings, repair notes, service history and technical support records.
Photographs and other evidence relating to the condition of equipment or work carried out.
Temporary access credentials where these are genuinely necessary for a particular job. We aim to delete temporary passwords and PINs as soon as they are no longer required.

Website accounts and memberships

Account registration details and information you manage through your Squarespace account.
Membership tier, subscription status, support history, PC details, benefits used and relevant payment records.

Communications and preferences

Messages, attachments and correspondence sent to us, including through WhatsApp Business and, occasionally, Facebook Messenger or Instagram Direct Messages.
Marketing preferences, consent records, opt-outs and review-related correspondence.

Website and technical information

Website usage and analytics information collected through cookies or similar technologies where permitted.
Technical information such as browser, device and website interaction information supplied by the website and analytics services.

CCTV information

Our Tapo video doorbell may capture motion-triggered video around the approach to our workshop. Audio recording is disabled. We do not operate cameras inside the workshop.

03. How we collect your information

We may collect information directly from you when you:

Visit or use our website, create an account or place an order.
Request a quotation, book a repair or bring equipment to us.
Purchase or manage a membership.
Contact us by telephone, email, WhatsApp Business or social media.
Send us photographs, documents or other information about your computer or repair.
Choose to receive marketing communications or submit a review.

We may also receive information through payment providers, delivery providers, review platforms and other service providers involved in providing our services.

Our website is hosted and operated using Squarespace. Customers can create their own website accounts and provide information through the available account and checkout facilities.

04. How we use your information

We use personal information for the following purposes:

To respond to enquiries and provide quotations.
To process orders, payments, deliveries and collections.
To carry out computer builds, repairs, upgrades, diagnostics and technical support.
To maintain customer, equipment, repair and service records.
To create and administer website accounts and memberships.
To provide membership support, monitor benefits used and manage subscriptions.
To communicate about appointments, jobs, orders, payments, warranties and aftercare.
To send review invitations following completed work.
To send promotional marketing where we have the required consent.
To maintain business accounts, meet tax and legal obligations and resolve disputes.
To protect our premises, equipment, customers and business through CCTV and appropriate security measures.
To understand and improve website performance through permitted analytics.

05. Our lawful bases for processing

UK data protection law requires us to have a lawful basis for using personal information. Depending on the activity, we rely on the following bases:

Contract

Where processing is necessary to provide a quotation, fulfil an order, carry out a repair, administer a membership or take steps you request before entering into an agreement.

Legal obligation

Where we must retain or provide information to meet legal, tax, accounting or regulatory requirements.

Legitimate interests

Where processing is necessary for legitimate business purposes, provided those interests are not overridden by your rights and interests. This may include maintaining service and repair records, protecting our business, responding to customer issues, keeping appropriate transaction records and requesting feedback about completed work.

Consent

Where you have actively agreed to a particular use of your information, such as receiving promotional email marketing or accepting non-essential analytics cookies. You can withdraw consent at any time.

We consider the purpose and circumstances of each activity when selecting a lawful basis. Where we rely on legitimate interests, we should be able to explain the interest pursued and how we have considered its impact on individuals.

06. Marketing communications and review requests

Promotional marketing

We send promotional email marketing only where we hold a record of valid consent for that purpose. We collect marketing preferences through optional, unticked choices, including our customer paperwork and website checkout.

We record relevant consent information, including the date, source and current status where available. We do not currently rely on the customer soft opt-in for promotional email marketing.

You can withdraw your consent at any time by using the unsubscribe option in a marketing email or by contacting privacy@poultonpcs.com. We will update our marketing records so that you are no longer sent promotional emails.

Review invitations

After a completed job, we may send an email asking you to leave an honest review of your experience. Our current process sends this request approximately three days after the job is completed.

These review requests are separate from promotional marketing. They are intended to request feedback and do not include promotional offers, discounts or sales material. We send the invitations using our own email process; Trustpilot is the review platform and does not send these invitations on our behalf.

If a review request includes promotional material in the future, we will treat it in accordance with the applicable electronic marketing rules.

07. Photographs, reviews and testimonials

Repair and diagnostic photographs

We may take photographs of computers, components or equipment to document their condition, support diagnostics, record work carried out and maintain repair history.

These photographs may be stored in the relevant customer's Google Drive job folder and retained in accordance with our retention schedule. Access is restricted to authorised business users.

We aim to avoid capturing unnecessary personal information, such as private documents, account details, notifications or information displayed on a customer's screen.

Promotional photographs and testimonials

We may wish to use customer feedback, testimonials or photographs of completed builds for promotional purposes. We will seek permission before using identifiable customer material for advertising, social media or other promotional purposes.

We do not treat permission to carry out a repair as permission to use photographs or testimonials for marketing.

If you believe we are displaying material about you without appropriate permission, please contact us so that we can review it.

08. Remote support

We use Zoho Assist to provide remote technical support where appropriate. Remote sessions may allow us to view a customer's computer screen and interact with settings, applications, files or system information relevant to the support request.

Remote support is initiated with the customer's knowledge and permission. We do not use unattended access to connect to customer computers.

We aim to limit access to what is reasonably necessary to carry out the requested support. Customers should close private documents and applications that are not relevant to the support session before allowing access.

Zoho may process technical and personal information as part of providing its remote support service. Further information is available in Zoho's own privacy information and contractual documentation.

09. Google services and AI tools

We use Google Workspace services for business email, document and file storage, spreadsheets, calendars and related business activities. These services may include Gmail, Google Drive, Google Sheets, Google Calendar, Google Meet and Google Gemini.

Customer information may be stored or processed in these services where necessary to manage enquiries, quotations, jobs, repair records, communications and business administration.

We use Google Analytics 4 to understand how visitors use our website, subject to the website's cookie consent settings. The measurement ID currently identified on our website is G-X87P3M58XP.

Where AI-assisted tools are used, we aim to use them appropriately and avoid submitting unnecessary customer personal information. Information entered into third-party services may be processed under those providers' terms and privacy arrangements.

11. How long we keep your information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including legal, accounting, warranty and dispute-resolution requirements.

Our intended retention schedule is set out below. It is being adopted and implemented across our business records; some existing records may not yet have been reviewed against every period.

Record type	Intended retention period
Customer intake forms and job sheets	6 years after job completion
Repair and diagnostic records	6 years after job completion
Repair photographs and evidence	Normally 6 years after job completion
Unaccepted quotations	12 months after last contact
Invoices, receipts and payment records	At least 5 years after the relevant Self Assessment deadline, where required for tax records
Customer accounts	While active, with a review after 2 years of inactivity
Job-related correspondence	6 years
Other correspondence	Reviewed after 12 months
Temporary passwords and PINs	Deleted as soon as they are no longer needed
Temporary data held on external drives for transfer	Deleted after successful transfer, where applicable
CCTV footage	Normally up to 30 days through Tapo Care, unless needed for an incident

We may retain relevant information for longer where necessary to deal with a complaint, dispute, legal claim, investigation or other legal requirement. Where information is no longer needed, it should be securely deleted or otherwise disposed of.

12. Keeping your information secure

We take reasonable steps to protect personal information against accidental loss, unauthorised access, alteration or disclosure.

Measures include restricting access to business records to authorised users, using password-protected business accounts and using established service providers for email, cloud storage, customer management and payment processing.

Access to customer information across our business systems is restricted to the business owner and their authorised partner. We do not maintain a separate independent backup system for Google Drive records; we use Google's standard cloud storage service.

No method of electronic storage or transmission is completely secure. If we become aware of a personal data breach, we will assess it and take appropriate steps, including notifying affected individuals or the Information Commissioner's Office where legally required.

13. Your privacy rights

Under UK data protection law, you may have the following rights, depending on the circumstances and the lawful basis for processing:

Right of access: To request a copy of the personal information we hold about you.
Right to rectification: To ask us to correct inaccurate or incomplete information.
Right to erasure: To ask us to delete personal information where the legal conditions apply.
Right to restriction: To ask us to restrict how we use your information in certain circumstances.
Right to data portability: To request certain information in a portable format where the right applies.
Right to object: To object to processing based on legitimate interests. You have an absolute right to object to direct marketing.
Right to withdraw consent: Where we rely on consent, you can withdraw it at any time. This does not affect processing carried out before withdrawal.

These rights are not absolute in every situation. For example, we may need to retain certain financial or repair records to meet legal obligations or establish, exercise or defend legal claims.

To exercise a right, email privacy@poultonpcs.com. You can also write to us at the postal address in the Contact section below.

We may need to verify your identity before responding. We will respond within the time limits set by applicable data protection law.

14. Making a complaint

If you have a concern about how we use your personal information, please contact us first using the details in this policy. We will consider your concern and try to resolve it.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Website: ico.org.uk/make-a-complaint

Telephone: 0303 123 1113

15. International data transfers

Some of the service providers we use may process or store personal information outside the United Kingdom. This may include services used for website hosting, cloud storage, customer management, communications, analytics and remote support.

Where personal information is transferred outside the UK, the transfer must be supported by an appropriate legal mechanism under UK data protection law. Depending on the circumstances, this may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another permitted safeguard.

Google Workspace and Squarespace have data-processing terms that form part of our arrangements with those providers. We have requested further data-processing documentation from Zoho, and its specific hosting location and contractual arrangements have not yet been confirmed.

If you would like further information about international transfers relevant to your information, contact privacy@poultonpcs.com.

16. Cookies and website technologies

Our Squarespace website uses cookies and similar technologies to operate the website, remember preferences and, where permitted, understand website performance.

Necessary cookies

Some cookies are required for essential website functions, such as security, navigation, account features and checkout. These are used where necessary to provide the service you request.

Analytics cookies

We use Google Analytics 4 to understand how visitors use our website and help us improve its performance. Analytics cookies are not intended to be enabled until you accept the relevant performance or analytics option in the website's cookie controls.

The Google Analytics 4 measurement ID identified on our homepage is G-X87P3M58XP. Our homepage source check also showed an analytics consent setting that defaults to denied and is updated according to the Squarespace performance-cookie choice.

Your choices

Our cookie banner provides options to accept all, manage cookies or decline all non-essential cookies. Necessary cookies remain enabled where required for the website to function.

You can use the website's cookie controls to change your preferences. You can also manage cookies through your browser settings, although blocking certain cookies may affect website functionality.

Other tracking technologies

At the time of our homepage source checks, we did not detect Google Tag Manager, Meta/Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar, Microsoft Clarity or Mouseflow. These findings relate to the homepage checks carried out and are not a guarantee that no such technology could be added to other pages or in the future.

We did not identify embedded YouTube videos, Google Maps, social-media feeds or other externally embedded content during our review of the website.

For more detail about the cookies used on our website and how to manage them, please also read our separate Cookie Policy.

17. Business customers

When providing services to a business customer, we generally work on computer hardware, software and technical diagnostics. We do not routinely access or process personal information belonging to the business customer's employees or customers as part of ordinary repair work.

If a particular job requires us to access personal information on behalf of a business customer, the parties may need to agree appropriate instructions, responsibilities and data-processing terms before that work is undertaken.

18. Children's information

Our services and website are not specifically directed at children. Where a parent or guardian provides information on behalf of a child in connection with a purchase, repair or enquiry, we will use that information only as reasonably necessary to provide the relevant service and meet our legal obligations.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can review the matter.

19. Automated decision-making

We do not currently make decisions about customers based solely on automated processing, including profiling, where those decisions produce legal effects or similarly significant effects on individuals.

We may use automated features within third-party business systems for routine administration, such as sending a scheduled review-request email after a job is completed. This does not make significant decisions about customers.

20. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, systems or legal obligations.

When we make changes, we will update the date below. We encourage you to review this page periodically.

Last updated: 9 November 2026

21. Contact us

If you have questions about this policy, want to exercise your privacy rights or need to raise a data protection concern, please contact us using the details below.

Poulton PC’s – Privacy Enquiries

Data controller: Joel Senior-Watson, trading as Poulton PC’s

Privacy email: privacy@poultonpcs.com

General enquiries: info@poultonpcs.com

Telephone: 01253 224676

Postal address:
12 Westwood Avenue
Poulton-le-Fylde
FY6 7EN
United Kingdom

Website: www.poultonpcs.com