The lab · privacy
Privacy policy — plain English version included.
Short version: we collect only what a recovery needs, we treat the data on your device as yours alone, we sell nothing to anyone, and our working copies are destroyed thirty days after your data goes home. The longer version follows.
Who we are. Easy Data Recovery Ltd (company no. NI625698), trading as Brighton Data Recovery. We are registered with the Information Commissioner's Office under registration ZC173784. Postal address for data-protection matters: Guildford Data Recovery, Building 2, Ground Floor, Guildford Business Park, Guildford, GU2 8XH — our intake laboratory, and the name post should be addressed to. Phone: 01273 964902. Last updated: 18 August 2026.
What we collect, and why
Enquiry details. When you use our forms or call, we collect your name, phone number, email address and your description of the fault — to respond, diagnose, quote, and run your case. Lawful basis: taking steps at your request before, and performance of, a contract.
Case records. Case references, correspondence, quotes, approvals and delivery details — kept to run the job and meet our legal and accounting obligations. Lawful bases: contract and legal obligation.
The data on your device. Recovering your data necessarily means our engineers process it. We access it only as the recovery requires, we never browse beyond the job, and its contents are never used for anything except returning it to you. Lawful basis: performance of a contract. Where a device holds special category data, our processing is limited to the technical recovery you have instructed.
What we don't do
- No marketing lists, no newsletters, no selling or sharing of data for advertising — ever.
- No tracking or advertising cookies on this website. It works without following you around.
- No offshoring of your device or its data — recovery happens in our own UK lab.
Who we share with
Only what the job requires: our email is delivered through our hosting provider's mail service (Hostinger) when you use a form; couriers carry your device and delivery details; our accountants see invoices, not data. Each acts under contract and only on our instructions. We disclose information to authorities only where the law requires it.
How long we keep things
Working copies of recovered data are held securely for thirty days after your data is returned — your safety net if anything needs re-checking — and then securely destroyed. Devices unpaid or uncollected after thirty days may be handled as our Terms set out. Enquiry and case records are retained for up to six years to meet legal, tax and warranty obligations, then deleted.
Your rights
You have the usual UK GDPR rights: access (a subject access request), rectification, erasure, restriction, portability and objection. Ask by phone or post using the details above and we'll respond within one calendar month. If you're unhappy with our answer, you can complain to the ICO at ico.org.uk — though we'd rather fix it first.
Security, briefly
Devices are logged under case references from arrival to return, stored securely, and handled only by our engineers. Recovered data travels back to you on new media, and our copies are destroyed on the schedule above. If a breach ever put your rights at risk, we would notify the ICO within 72 hours and tell you promptly and plainly.
Related reading: Terms & Conditions (PDF) · Contact us.