Version 3.0
Effective Date: 1 July 2026
Last Reviewed: 23 June 2026

1. Introduction

IT-Pro Training Ltd trading as IT-Pro Support (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, share and protect personal data when you use our website, contact us, purchase our services or otherwise interact with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and other applicable data protection legislation.

By using our website or services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.

2. Data Controller

IT-Pro Training Ltd trading as IT-Pro Support is the Data Controller responsible for your personal data.

Business Name: IT-Pro Training Ltd trading as IT-Pro Support

Website: https://itprosupport.co.uk

Email: office@itprosupport.co.uk

Telephone: 01978 868 182

Registered Address: The Malthouse Business Centre, Regent Street, Llangollen, Denbighshire, LL20 8HS

Company Registration Number: 04323129

ICO Registration Number: ZA465903

If you have any questions regarding this Privacy Policy or how we process personal data, please contact us using the details above.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

Contact Information

• Name
• Business name
• Job title
• Email address
• Telephone number
• Postal address

Customer Information

• Service records
• Support requests
• Account information
• Device and system information
• Licensing information
• Contract information

Technical Information

• IP address
• Browser type and version
• Device information
• Operating system
• Website usage data
• Security and audit logs

Marketing Information

• Marketing preferences
• Communication history
• Event registrations
• Newsletter subscriptions

Recruitment Information

Where applicable, we may collect information relating to job applications including CVs, employment history and qualifications.

4. How We Collect Personal Data

We collect personal data through:

• Website contact forms
• Quote requests
• Telephone calls
• Emails
• Support requests
• Service agreements
• Customer onboarding processes
• Website analytics tools
• Security monitoring systems
• Recruitment applications
• Meetings and events

We may also receive information from third parties where necessary to provide our services.

5. How We Use Personal Data

We use personal data to:

• Provide IT support and managed services
• Deliver Microsoft 365 and cloud services
• Respond to enquiries
• Process quotations and contracts
• Manage customer relationships
• Deliver cybersecurity services
• Monitor and secure systems
• Manage billing and accounts
• Meet legal and regulatory obligations
• Improve our website and services
• Conduct recruitment activities
• Send relevant business communications

6. Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

Contract

Where processing is necessary to fulfil a contract with you or your organisation.

Examples include:

• IT support services
• Managed service agreements
• Microsoft 365 management
• Backup services
• Software development projects

Legitimate Interests

Where processing is necessary for our legitimate business interests and does not override your rights and freedoms.

Examples include:

• Responding to enquiries
• Providing quotations
• Maintaining customer relationships
• Service improvements
• Security monitoring
• Fraud prevention
• Business administration

Legal Obligation

Where processing is required to comply with legal obligations including:

• Tax legislation
• Employment law
• Regulatory requirements
• Law enforcement requests

Consent

Where consent is required, including certain marketing communications and optional website cookies.

You may withdraw consent at any time.

7. Managed IT Services and Client Data

As part of providing IT support and managed services, our authorised personnel may have access to information stored within customer systems.

This may include:

• Emails
• Documents
• User accounts
• Devices
• Backup data
• Security logs
• Cloud services
• Microsoft 365 environments

Where we process personal data on behalf of our customers, we act as a Data Processor and process information only in accordance with the customer’s instructions and contractual agreements.

Access to customer data is restricted to authorised personnel who require access to perform their duties.

8. Cybersecurity and Monitoring

To protect our customers and services, we may process data through cybersecurity and monitoring tools.

This may include:

• Security event monitoring
• Threat detection
• Endpoint protection
• Vulnerability management
• Audit logging
• Network monitoring
• Email security filtering

Such processing is undertaken for security, fraud prevention and service delivery purposes.

9. Marketing Communications

We may send business-related communications regarding our products and services where permitted by law.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in emails
• Contacting us directly

We will not sell your personal data to third parties for marketing purposes.

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

• Ensure website functionality
• Improve user experience
• Analyse website performance
• Protect website security

Where required by law, consent will be obtained before non-essential cookies are placed on your device.

For further information, please refer to our Cookie Policy.

11. Sharing Personal Data

We may share personal data with trusted service providers where necessary to operate our business and deliver services.

These may include:

• Microsoft
• Cloud hosting providers
• Cybersecurity providers
• Backup providers
• Accounting software providers
• Communication platforms
• Payment processors
• Professional advisers

We only share personal data where appropriate contractual and security measures are in place.

12. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where international transfers occur, we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (IDTAs)
• UK Addendum to Standard Contractual Clauses
• Adequacy Regulations
• Other legally recognised safeguards

13. Data Security

We take appropriate technical and organisational measures to protect personal data.

These measures include:

• Multi-factor authentication
• Encryption where appropriate
• Access controls
• Endpoint protection
• Security awareness training
• Secure backups
• Vulnerability management
• Logging and monitoring
• Secure disposal procedures

While we take reasonable steps to protect personal data, no method of transmission or storage can be guaranteed to be completely secure.

14. Data Retention

We retain personal data only for as long as necessary.

Typical retention periods include:

Retention periods may be extended where required by law or legitimate business needs.

15. Your Rights

Under UK GDPR, you may have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights relating to automated decision-making
• Right to withdraw consent

Requests may be submitted using the contact details provided in this policy.

We may need to verify your identity before responding.

16. Data Protection Complaints

If you have concerns regarding how we process your personal data, please contact us first.

We maintain a formal process for handling data protection complaints and will investigate all complaints fairly and promptly.

If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: https://www.ico.org.uk

17. Automated Decision Making

We do not routinely make decisions that have a solely automated legal or similarly significant effect on individuals.

Should this change, we will update this Privacy Policy and provide appropriate safeguards in accordance with applicable legislation.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updates will be published on this page and the revision date will be amended accordingly.

We encourage you to review this policy periodically to stay informed about how we protect personal data.