Privacy Policy
This privacy policy sets out how Starling IT Services uses and protects any information that you give us when you use this website or use our services.
Starling IT Services may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
Change Notes
- 08/06/2018: Sections added pertaining to Stripe payments and functions required for our online store.
What personal data we process:
Starling IT Services may collect the following personal data about our customers:
- Your full name
- Your Email address
- Your Email correspondence
(Communications between yourself and us conducted via Email) - Your address
(Both Billing & Shipping) - Your phone number
- Phone records
(When you have called us or when we have called you. (This does not include audio recordings of phone calls)) - SMS (Text) Messages correspondence
(Communications between yourself and us conducted via SMS) - Your answers to form questions
(For example: What do you want your new PC to be able to do?) - Records of goods & services we have provided to you
(This includes the serial numbers and make/models of equipment we supply to you) - Payment records
(when you have paid us, how much you have paid us, the payment method, and what you have paid us for) - Bank transfer records
(The Amounts, Dates of the transfers and payment references of payments made to us)
Lawful Bases for our data processing:
We are legally required to document Lawful Bases for the data processing we do.
Legal Obligation:
Starling IT Services has a legal obligation to process the following data, in order to be able to prove (if required) that we have provided accurate information to HMRC and to perform actions such as refunds.
- Your full name
- Your address
- Your phone number
- Records of goods & services we have provided to you
(This includes the serial numbers and make/models of equipment we supply to you) - Payment records
(when you have paid us, how much you have paid us, the payment method, and what you have paid us for) - Bank transfer records
(The Amounts, Dates of the transfers and payment references of payments made to us)
Contractual Basis:
The "Contract" lawful basis for processing is valid when we need to process the data in order to satisfy the terms of a contract we have with a customer or when we need to process the data in order to complete an initial first step (like providing a quote) before a contract is in place.
It is important to note that, according to law, "a contract" in this context can take the form of terms have been offered and accepted that both parties intend to be legally binding and where an element of exchange is involved (usually goods/services for money).
It is Starling IT Services' position that we have Contractual Bases to process the following data
- Your full name
- Your Email address
- Your Email correspondence
(Communications between yourself and us conducted via Email) - Your address
(Both Billing & Shipping) - Phone records
(When you have called us or when we have called you. (This does not include audio recordings of phone calls)) - SMS (Text) Messages correspondence
(Communications between yourself and us conducted via SMS) - Your answers to form questions
(For example: What do you want your new PC to be able to do?)
Website Activity Data:
There are systems in use on our website to track when the pages on our website have been visited.
These systems do not allow us to identify the pages any individual has looked at.
We use this data to assess how effective our website is.
Who we share your information with:
Our quotes, invoicing and receipts are all created, managed and delivered (via email) using Xero Cloud Based Accounting Software.
For this reason we store your full name, email address, address (both shipping and billing) and phone number in Xero along with your invoices and quotes and records of your payments to us.
We may also attach documentation relevant to your purchase (which may contain the serial numbers of equipment we have supplied to you) to our Xero invoices. We only store personal details in the Xero system when we generate an Invoice or Quote for you.
We generate invoices when we have carried out a paid service to you or when you have purchased a product from us.
We generate quotes when you have requested pricing information regarding a bespoke product or service. (This could be via one of our forms) You can find Xero's full privacy policy here.
We offer the option to make payments to us via Stripe. When you choose this option, details of your order are sent to stripe so that they can process the transaction. We do not receive any card information when this happens. You can find stripe's privacy policy here.
We will not sell, distribute or lease your personal information to any other third parties unless we have your permission or are required by law to do so.
During our repairs:
When work is carried out on your devices, we may need the ability to log-in to your system.
When this is the case, Starling IT Services will only perform actions that are strictly relevant to diagnosing and repairing reported (or observed) faults.
We will not make make copies of any of your data onto our systems.
We will not make a record of any of your passwords.
Data Recovery:
We do not keep copies of any data that we have moved or recovered from your device.
Form Submissions:
Starling IT Services only uses information sent to us via the forms on our website to us to carry out any services that have been requested.
The form submissions are not stored on the website.
How we protect the information we process:
We have made sure that all connections to our website are encrypted using SSL.
We only store your information in places where appropriate encryption is utilised.
When we share information with third parties, we make sure that they have appropriate encryption and security measures.
We keep an eye out for data breaches involving any third parties that we share information with.
We keep all of our devices up to date with security patches.
We make sure all of our devices have appropriate malware protection.
We make sure to use secure passwords for all of our accounts.
Controlling your personal information:
You have a legal right to request details of what personal information that we hold about you. If you would like a copy of the information held on you please email services@starling-it.co.uk.
If you believe that any information we are holding on you is incorrect, please email us as soon as possible at services@starling-it.co.uk.
We will promptly correct any information found to be incorrect.
Links to other websites:
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.