Data protection
Most of what I do involves your data: the spreadsheet with the customer list in it, the database behind the app. This is what I hold, why, where it lives, how long I keep it, and what you can ask of me.
- Controller
- Help Technical Ltd
- ICO registration
- C1747316
- Contact
- chris@helptechnical.co.uk
- Last reviewed
- 24 August 2026
What I hold, and why
| What | Why | How long |
|---|---|---|
| EnquiriesYour name, email address and message from the contact form, plus any emails or calls that follow. | To answer you and scope the work. | Six months if we do not go ahead, then deleted. |
| Client recordsContact names, business address, contracts, invoices and payment records. | To deliver the work, invoice for it and meet accounting obligations. | Six years after the last transaction, as HMRC requires, then deleted. |
| ReviewsName, company and the review text you submit through the invite-only review form. | To publish your review on this site, word for word, with your consent. | For as long as the review is published. Ask and it comes down. |
| Your project dataSpreadsheets, databases, exports and systems you give me access to during a job. | To do the job. I process this on your instructions, as your processor. | Deleted from anything I hold when the job closes, unless we agree a support period in writing. |
For enquiries, client records and reviews, Help Technical Ltd is the data controller. For your project data, you are the controller and I act as your processor: I do what you instruct, and nothing else with it.
This website
It sets no cookies and runs no tracking scripts. The contact and review forms send what you type to me by email, via Netlify, and nowhere else. If I add analytics in future it will be privacy-respecting, aggregate visit counts with no cookies (Netlify Analytics or similar), and this page will say so.
Where it lives
The systems I use, named. Several are US companies. Where data leaves the UK it does so under the provider's data processing agreement and the UK International Data Transfer Addendum.
- Microsoft 365Email, files and Teams, in my own tenant.
- FreeAgentAccounting. The only system that holds client billing details.
- NetlifyHosts this site and receives form submissions.
- GitHubHolds the site source, including published reviews.
- Anthropic, Microsoft Copilot, OpenAIAI tools. Your project data goes to none of these without your written agreement. See how I use AI.
How it is protected
- Multi-factor authentication on every account that touches your data.
- A password manager and a unique password for every service.
- Full-disk encryption on every device that touches your data.
- Least-privilege access to your systems: I ask for the minimum role the job needs, and for it to be removed when the job ends.
- Your data stays in your own tenant wherever the job allows. I work inside your Microsoft 365 or Power Platform environment rather than taking copies.
If something goes wrong, I will tell you without undue delay, and report to the ICO within 72 hours where the law requires it.
Your rights
Under UK GDPR you can:
- Ask what I hold about you and get a copy.
- Have it corrected if it is wrong.
- Have it deleted, where I have no legal duty to keep it.
- Object to, or restrict, how I use it.
- Take it with you in a usable format.
- Withdraw consent at any time, for example to a published review.
Email chris@helptechnical.co.uk and I will respond within a month. If you are not happy with how I have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Your organisation has its own rules?
Send them over. I have worked under UK GDPR, EU GDPR and HIPAA, and I will work to whatever your organisation requires.
Get in touch