1. Who We Are

TPRS Tarleton LTD is the data controller for your personal information. We are a phone and laptop repair business located at:

1a Tarleton Office Park, Windgate, Tarleton, Preston PR4 6JF

Phone: 01772 812333
Email: info@tarletonfones.co.uk

2. Personal Data We Collect

We may collect and process the following personal information:

• Contact Details: Name, email address, phone number from inquiries, bookings, or repairs
• Device Information: Model, serial number, issue description for repair purposes
• Payment Information: Processed securely through payment providers (we do not store card details)
• Communication Records: Emails, phone call notes, and repair status updates
• Device Data: Personal data stored on your device (only accessed with your permission for repair purposes)

This data is collected directly from you when you contact us, book a repair, or visit our workshop.

3. How We Use Your Data

We use your personal data for the following purposes:

• Service Provision: To carry out repairs on your device and provide customer support
• Communication: To communicate with you regarding your repair (status updates, quote completion, collection notifications)
• Business Operations: To manage our business operations, accounting, and record-keeping
• Legal Compliance: To comply with our legal obligations and maintain business records
• Service Improvement: To improve our services and customer experience

Legal Basis for Processing: Our lawful basis for processing your data is the performance of a contract (to provide repairs) and our legitimate interests in running our business effectively.

4. Data Sharing and Third Parties

We do not share your personal data with third parties for marketing purposes. We may share data in the following circumstances:

• Courier Services: With courier companies if you use mail-in repairs, solely for delivery purposes
• Payment Processors: With secure payment providers to process transactions
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfer: In the event of a business sale or merger (with appropriate safeguards)

All third parties we work with are contractually bound to protect your data and only use it for the specified purpose.

5. Data Security and Retention

Data Security: We implement appropriate technical and organisational measures to protect your personal data, including:

• Secure storage systems with restricted access
• Encrypted communications where appropriate
• Staff training on data protection
• Regular security reviews and updates

Data Retention: We keep your data secure, accurate, and up to date. We retain your information for up to 7 years for business and legal record-keeping purposes, after which it is securely destroyed. This retention period aligns with standard business practice for financial and service records and takes into account legal obligations.

6. Your Data Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request access to the personal data we hold about you
• Right to Rectification: Request correction of any inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Request a copy of your data in a usable format
• Right to Object: Object to our use of your data in certain circumstances
• Right to Withdraw Consent: Withdraw consent at any time (where applicable)

To exercise these rights, please contact us using the details provided in section 9.

7. Cookies and Website Analytics

Our website may use cookies to enhance your user experience. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Improve our website functionality

You can control cookie settings through your browser preferences. We do not use cookies for advertising tracking.

8. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information immediately.

10. Complaints and Regulatory Body

If you have concerns about how we have handled your personal data, you have the right to lodge a complaint with us first. If you are not satisfied with our response, you can contact the Information Commissioner's Office (ICO), the UK's independent body for data protection.

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: www.ico.org.uk

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The latest version will always be available on our website. We will notify you of any significant changes by email or prominent notice on our website.

This Privacy Policy was last updated on November 30, 2025 and complies with UK GDPR requirements.