You are trusting us with a storage device that may contain years of your life. So that we can reach out to you regarding this device, you provide us with your name and phone number. Below is an exact description of the information we will be collecting, why we need it, how long we intend to retain it and the requests you can make to us about it.
Last updated 7 October 2026.
Your contact details: name, email address, telephone number and return address (if we need to send the device back via post). You provide us with your contact information either through the online diagnostic process, the contact form, by email or by phone.
The contents of your device: a recovery means reading every sector on the media, since we cannot predict in advance which sectors of the media contain your files. The contents of your device will never be browsed, indexed or used for any reason except to return your data to you.
| Quoting, and doing the recovery | To perform our contract with you |
| Payment and accounting records | Legal obligation |
| Website analytics | Your consent — see cookies below |
| Defending a legal claim | Our legitimate interests |
The information contained within your device regarding your medical history or other 'special category' data will be held on the basis of either the establishment or defence of legal claims, or your express permission for such use.
The recovery is done in-house. The device is never sent to any external partner laboratories, nor does any of the information from the device get transmitted or provided to anyone else. The device itself and all of its contents remain entirely within the UK.
Four suppliers are required to deal with minimal information about you: our web hosting supplier, courier services used for tracked returns (your name and delivery address only), our accountancy and payments provider and Google Analytics if you permit this. We don't sell any data or pass any data on to third parties for marketing purposes. We will disclose data only as required by law.
The analytics data may be processed by Google outside of the United Kingdom, under the UK addendum to the standard contractual clauses. All other data remains within the UK.
| Recovered data on our systems | Wiped 30 days after you confirm you have it, or sooner on request |
| Enquiries that do not become jobs | 12 months |
| Job records and invoices | 6 years — the limitation period, and HMRC's requirement |
| Analytics | 14 months |
You can obtain a copy of the data we hold about you, have any inaccuracies corrected or any data held deleted, request that we pause using your personal details, obtain a transferable version of your personal data, object to us using your personal details for our own legitimate interests, or withdraw your permission to use your personal details at any point.
Please contact us at Compass House, Vision Park, Chivers Way, Cambridge, CB24 9AD or telephone 01223 655015. We will respond within one month, and there is no charge for making a request.
If we get something wrong, tell us first so that we can rectify any errors. If you wish to make a complaint to the Information Commissioner's Office regarding the way in which we have dealt with your personal data, please refer to ico.org.uk/make-a-complaint or call 0303 123 1113.
Nothing is installed until you choose. A banner will ask one time and remember your response in a single record on your personal device.
If you agree, Google Analytics provides us with information regarding what specific pages are being viewed and from where visitors arrive. If you refuse, the script is never requested, rather than being loaded and instructed to disregard you. The script will never be used to identify you.
Cambridge Data Recovery is the trading name of Easy Data Recovery Ltd, a company that was incorporated in Northern Ireland (Company Number NI625698), of Compass House, Vision Park, Chivers Way, Cambridge CB24 9AD. That company is the data controller, registered with the UK Information Commissioner's Office (ICO) under registration number ZC173784.
No automated decisions are made about you; each quotation is written individually by an engineer who has physically examined your device. While we do not require you to provide your personal information, we cannot submit a quote, perform recovery, or return anything to you unless we receive it. If this notice changes, the date at the top will change too.