Privacy Notice
Last reviewed: 27 July 2026
1. Who We Are
Concept IT Services Ltd (“Concept IT”, “we”, “our” or “us”) is committed to protecting the privacy and security of the personal information we collect and process.
Data Controller:
Concept IT Services Ltd
Tanfield Lea Business Centre
Tanfield Lea North Industrial Estate
Stanley
County Durham
DH9 9DB
Telephone: 01207 234 637
Email: support@concept-its.co.uk
2. Information We Collect
We may collect and process the following information:
Information you provide to us
- Name
- Company name
- Job title
- Email address
- Telephone number
- Postal address
- Information contained within enquiries submitted via our website, email or telephone
Information collected automatically
When you visit our website, we may collect:
- IP address
- Browser type and version
- Device information
- Website usage information
- Pages viewed
- Time and date of visits
- Referring websites
This information may be collected using cookies and similar technologies.
3. How We Use Your Information
We use personal information to:
- Respond to enquiries and requests
- Provide products and services
- Manage customer relationships
- Deliver support services
- Administer contracts and agreements
- Improve our website and services
- Manage security and fraud prevention activities
- Meet our legal and regulatory obligations
- Send marketing communications where permitted or where consent has been provided
4. Our Lawful Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
Legitimate Interests
We process personal data where necessary to:
- Respond to enquiries
- Operate and improve our website
- Deliver customer service
- Maintain network and information security
- Promote our products and services to business contacts where permitted by law
Contract
We process personal data where necessary to:
- Deliver products and services
- Manage customer accounts
- Fulfil contractual obligations
Legal Obligation
We process personal data where required to:
- Meet tax and accounting requirements
- Comply with legal, regulatory and law enforcement requirements
Consent
We rely on consent where required, including certain marketing activities and non-essential cookies.
You may withdraw consent at any time.
5. Marketing Communications
We may occasionally contact you regarding products, services, events or information that may be relevant to your business.
Where consent is required, we will obtain it before sending marketing communications.
You can opt out of marketing communications at any time by:
- Clicking the unsubscribe link in marketing emails
- Contacting us using the details in this notice
We do not sell personal information to third parties.
6. Sharing Personal Information
We may share personal information with trusted third parties who help us operate our business, including:
- Microsoft and cloud service providers
- Website hosting providers
- IT support and software vendors
- Professional advisers
- Accountants and auditors
- Regulatory or law enforcement authorities where required
All third parties are required to protect personal information and only process it in accordance with our instructions and applicable law.
7. Security of Your Information
Concept IT Services Ltd takes the security of personal information seriously and implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure or destruction.
We maintain an Information Security Management System (ISMS) certified by a UKAS-accredited certification body to ISO/IEC 27001, the internationally recognised standard for information security management. Our security controls, policies and procedures are regularly reviewed and independently audited to help protect the confidentiality, integrity and availability of the information we process.
In addition, we maintain Cyber Essentials certification and apply security best practices across our systems, networks and business processes to reduce cyber security risks and strengthen the protection of customer and business data.
While we take appropriate steps to safeguard personal information, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
8. International Data Transfers
Some of our service providers may process data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place, including:
- UK adequacy regulations
- International Data Transfer Agreements (IDTAs)
- Standard contractual clauses or equivalent safeguards
9. How Long We Keep Information
We keep personal information only for as long as necessary.
Typical retention periods include:
| Information Type | Retention Period |
|---|---|
| Website enquiries | Up to 24 months |
| Marketing records | Until consent is withdrawn or marketing activity ceases |
| Customer records | Up to 6 years following the end of the business relationship |
| Financial and accounting records | 6 years or longer where legally required |
| Security and audit logs | In accordance with operational and security requirements |
Retention periods may be extended where required by law or where necessary to establish, exercise or defend legal claims.
10. Your Rights
Subject to applicable law, you have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Restrict processing
- Object to processing
- Request transfer of your information to another organisation where applicable
- Withdraw consent where processing relies on consent
Requests can be made using the contact details provided in this notice.
11. Cookies
Our website uses cookies and similar technologies to improve user experience, maintain website functionality and analyse website performance.
These may include:
- Strictly necessary cookies
- Performance and analytics cookies
- Functional cookies
You can manage cookie preferences through your browser settings and any cookie consent tools provided on our website.
For further information, please refer to our Cookie Policy.
12. Data Protection Complaints
If you are unhappy with how we have handled your personal information, please contact us first so we can investigate and resolve the issue.
Complaints can be submitted by:
Email: support@concept-its.co.uk
Telephone: 01207 234 637
Post: Tanfield Lea Business Centre, Tanfield Lea North Industrial Estate, Stanley, County Durham, DH9 9DB
We will acknowledge and investigate complaints in accordance with our data protection complaints procedure.
13. Right to Complain to the Information Commissioner’s Office (ICO)
If you are not satisfied with our response or believe your personal information has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
Further information is available from the ICO:
Website: https://ico.org.uk
14. Third-Party Websites
Our website may contain links to third-party websites.
This privacy notice only applies to the Concept IT Services Ltd website. We encourage users to read the privacy notices and policies of any websites they visit.
15. Changes to this Privacy Notice
We may update this privacy notice from time to time to reflect changes in our business, legal obligations or regulatory guidance.
Any updates will be published on this page and the review date will be updated accordingly.