You are trusting us with a drive that may contain years of your life, and with your name and number so we can contact you about it. Here is exactly what we collect from you, why we collect it, how long we keep it for and what you can request from us.
Last updated 6 October 2026.
Your contact details (name, email, phone number and, if we are posting a device back, a return address) are provided by you through the online diagnostic tool, the contact form, email or telephone.
The contents of your device are read in full during a recovery, as we could never know ahead of time which sectors contain your files. We do not browse the media, create indexes of it or use it for any reason other than to return it to you.
| Quoting, and doing the recovery | To perform our contract with you |
| Payment and accounting records | Legal obligation |
| Website analytics | Your consent — see cookies below |
| Defending a legal claim | Our legitimate interests |
If a device contains health records or other special category information, then our basis is the establishment or defence of legal claims, or your explicit consent.
The recovery is done in-house. Your device will not be shipped to any third-party laboratory, and none of the data on it will be shared with any third parties. Your device and all of its contents remain within the UK.
Four providers necessarily handle limited amounts of data for us: our website hosting provider, couriers handling tracked returns (name and address only), our payment processor and accountant, and Google Analytics, if you choose to allow it. We do not sell data or share it for marketing, and we will only disclose it when required by law.
Google may process analytics data outside the UK, under the terms of the UK addendum to the standard contractual clauses. No other data leaves the United Kingdom.
| Recovered data on our systems | Wiped 30 days after you confirm you have it, or sooner on request |
| Enquiries that do not become jobs | 12 months |
| Job records and invoices | 6 years — the limitation period, and HMRC's requirement |
| Analytics | 14 months |
You can ask to see a copy of the information we have stored about you, have that data corrected or deleted, ask us to pause our use of it, receive it in an easily transferable format, object to our use of it where that is based on our legitimate interests, or withdraw your consent at any time.
Send your request to Building 2, Ground Floor, Guildford Business Park, Guildford, GU2 8XH or telephone 01483 901310. We will respond within one month, and there is no charge.
If we get something wrong, report it to us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Nothing is set until you make a choice. The banner asks for your consent once and stores your answer in a single entry on your own device.
If you accept, Google Analytics lets us know which pages were viewed and how visitors arrived. Should you decline, the script is never requested, rather than being loaded and told to ignore you. It is never used to identify you.
Guildford Data Recovery is the trading name of Easy Data Recovery Ltd, a company incorporated in Northern Ireland (company number NI625698), located at Building 2, Ground Floor, Guildford Business Park, Guildford, GU2 8XH. That company acts as the data controller and is registered with the ICO under number ZC173784.
No automation is involved in any decision-making about you; each quote is written by an engineer who has examined your specific device. You don’t have to give us your personal details, but without them we cannot provide quotes, recover your data or return anything to you. If this privacy notice changes, the date at the top will change with it.