Privacy policy

Last reviewed: [DATE]

Not yet complete. The factual detail below reflects how the ticketing system actually works, but the bracketed items need your input and the whole document should be reviewed by someone qualified before you publish it. Do not launch with the placeholders in place.

Who we are

Virtual IT Support Ltd, registered in Scotland, company number 15022976. Registered office: [ADDRESS]. For anything about your personal data, contact [EMAIL].

We are registered with the Information Commissioner's Office under reference [ICO NUMBER].

What we collect when you log a ticket

Your name, email address, and optionally your phone number and company name
The subject and description of your IT problem, and anything you send us afterwards
Your browser's user agent string
A one-way salted hash of your IP address — we do not store the address itself

The IP hash exists only to limit abuse of the form. It cannot be reversed to recover your address.

Why we can use it

We process this to perform our contract with you, or where you are not yet a client, because we have a legitimate interest in responding to an enquiry you chose to send us.

Where it is held

Ticket data is stored on Supabase infrastructure in the London (eu-west-2) region, within the United Kingdom. Access is restricted to our staff and controlled by row-level security in the database. [CONFIRM: any other processors — email provider, accounting, CRM.]

How long we keep it

[TO COMPLETE. You need a stated period — for example, closed tickets deleted after 24 months. "Indefinitely" is not a lawful answer under UK GDPR.]

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Email [EMAIL] and we will respond within one month. If you are unhappy with our response you can complain to the ICO at ico.org.uk.