Privacy Policy

This Privacy Policy explains how Geek Fix ("we", "us", "our") collects, uses and protects personal data about you when you visit geekfix.uk or use our services. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are (Data Controller)

Geek Fix is the data controller for the personal data described in this policy.

• Trading address: 18 Queens Road, Knaresborough, HG5 0AT, United Kingdom
• Telephone: 01423 209018
• Email: info@geekfix.uk
• VAT Reg No. 402 5724 28

2. The personal data we collect

2.1 When you enquire or book

• Your name, email address, telephone number, postcode and property/site address.
• Details of the service you require and any context you share with us (free‑text "tell us more" field).
• Records of our correspondence (emails, call notes, WhatsApp messages).

2.2 When we deliver services

• Photographs of the install (cabinets, cabling, kit) which we may use for our portfolio (anonymised, with no identifying details, unless you give consent).
• Equipment details, network configuration notes, SSID names and other technical details required to support your network. We do not retain Wi‑Fi passwords, admin passwords or credentials after a job unless you specifically ask us to keep them for ongoing support.
• Payment information processed by our payment provider — we do not store full card details on our systems.

2.3 When you visit the website

• Standard log information from your browser (IP address, user agent, referrer, pages visited and time stamps) for security and analytics.
• Information collected by Cloudflare Turnstile on form submissions, used solely to prevent automated abuse of our contact forms.

3. Cookies and similar technologies

We use a minimal set of essential cookies and similar technologies:

• Strictly necessary: Cloudflare Turnstile sets a short‑lived token to verify that your form submission is human. This is required for the form to work.
• Functional: Local browser storage may be used to remember UI preferences (e.g. dismissed banners). No personal data is sent to third parties via these.

We do not use advertising cookies or cross‑site tracking. If we add analytics or marketing cookies in future we will request your consent through a cookie banner first.

4. Why we use your data and the legal basis

• To respond to your enquiry and provide a quote — legal basis: steps taken at your request prior to entering a contract (UK GDPR Art. 6(1)(b)).
• To deliver the services you have engaged us for — legal basis: performance of a contract (Art. 6(1)(b)).
• To invoice you and keep accounting records — legal basis: legal obligation under UK tax and company law (Art. 6(1)(c)).
• To diagnose problems and improve our service — legal basis: legitimate interests in running and improving our business (Art. 6(1)(f)).
• To prevent fraud and abuse of our website — legal basis: legitimate interests (Art. 6(1)(f)).
• To send service updates or follow‑up emails — legal basis: legitimate interests where you are an existing customer (and you can opt out at any time), or consent where you have signed up to a newsletter.

5. Who we share your data with

We do not sell your personal data. We share data only with the following categories of recipient and only where strictly necessary:

• Resend — our transactional email provider, used to deliver enquiry forms to our inbox.
• Cloudflare — provides Turnstile bot protection on our forms.
• MongoDB Atlas / our hosting providers — store enquiry records securely on our behalf.
• Accountants and HMRC — for tax and accounting purposes as required by law.
• Payment processors (e.g. Stripe, bank) — to take payment for our services.
• Law enforcement, regulators or our legal advisers — only where required by law.

Where these providers process data outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or adequacy regulations.

6. How long we keep your data

• Enquiry data where you do not become a customer: up to 12 months, then deleted.
• Customer job records (install notes, diagrams, correspondence): 6 years after the last interaction, in line with UK warranty, contract and tax requirements.
• Accounting records (invoices, receipts): 6 years after the end of the relevant accounting period, as required by HMRC.
• Website server logs: up to 90 days.

7. Your rights

Under UK GDPR you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data, subject to legal retention obligations.
• Restriction — ask us to limit how we use your data.
• Portability — receive a copy of the data you provided in a structured, machine‑readable format.
• Object — object to processing based on our legitimate interests, including direct marketing.
• Withdraw consent — at any time where we rely on consent.

To exercise any of these rights, email info@geekfix.uk with the subject line "Data request". We will respond within one month.

8. How to complain

If you are unhappy with how we have handled your personal data you can complain to the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, of course, appreciate the chance to put things right first.

9. Security

We use industry‑standard technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted access to our systems, and secure password management for any customer credentials we are entrusted with. No internet transmission is 100% secure, but we take any breach seriously and will notify affected customers and the ICO where required by law.

10. Children

Our services are aimed at adults (homeowners, property managers and businesses). We do not knowingly collect personal data from children under 13. If you believe we have, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent version. Material changes will be highlighted where appropriate.