Privacy notice

Last updated: 25 August 2026

1. Who we are

PK Tech Gurus Ltd ("we", "us", "our") is a private limited company registered in England and Wales under company number 16207856, with its registered office at 2 Hawkes Close, Langley, Slough, England, SL3 8BN.

For the personal data described in this notice we act as the data controller, except where we process data on your behalf while delivering services to you — in that case we act as a data processor and section 6 applies.

Questions about this notice or about your data: support@pktechgurus.pro.

2. What this notice covers

This notice applies to:

• visitors to pktechgurus.pro;
• people and organisations who contact us with an enquiry;
• clients for whom we deliver consultancy, repair or support services;
• suppliers and contacts we deal with in the ordinary course of business.

3. What we collect

Information you give us

• Contact details — your name, email address, telephone number if you provide one, and the organisation you represent.
• Enquiry content — whatever you choose to include in your message: the fault, the device, the systems involved, deadlines and budget.
• Engagement records — quotes, scopes, job records, correspondence, and the notes we make while diagnosing and fixing a problem.
• Billing details — invoicing address, purchase order references and payment records. We do not store card numbers.

Information we encounter while working

• Device and system data — configuration, logs, diagnostics, error reports, licence keys and network details needed to diagnose or deliver the work.
• Incidental access to content — while repairing a device or supporting a system we may unavoidably see files, mail or account information belonging to you or to third parties. We access only what the task requires and we do not read, copy or retain it otherwise.
• Credentials — where you provide access credentials, they are used solely for the agreed work and we ask that they are rotated when the engagement ends.

Information collected automatically

This website sets no cookies and runs no analytics, advertising or tracking scripts of any kind. Our hosting provider keeps standard server logs (IP address, timestamp, requested URL, user agent) for security and diagnostics. See the cookie notice for detail.

The site loads its typefaces from Google Fonts. When a page loads, your browser requests those font files from Google's servers, which necessarily discloses your IP address and user agent to Google. No other third-party resource is loaded.

4. Why we use it, and our lawful basis

• Responding to enquiries — legitimate interests (answering people who contact us), or steps taken at your request prior to entering a contract.
• Delivering the services — performance of a contract with you.
• Invoicing, accounting and tax records — legal obligation, and legitimate interests in running the business.
• Keeping job records and documentation — legitimate interests in being able to support what we have built, evidence what was agreed and defend legal claims.
• Security and fraud prevention — legitimate interests in protecting our systems and yours.

We do not use your data for automated decision-making or profiling, and we do not send marketing email unless you have asked us to.

5. Data on devices left with us

This deserves its own section, because it is the part people most reasonably worry about.

• Devices are logged in on receipt and stored securely while in our possession.
• We access only what is necessary to diagnose, repair and verify the fault.
• Where a repair risks data loss we will tell you before starting, and take a backup image if you ask us to.
• Any working copy or diagnostic image we take is kept only until you confirm the job is complete, then securely erased. If you want it kept longer, say so in writing.
• We will not access personal content beyond the repair — and if we encounter material we are legally obliged to report, we will comply with that obligation.
• Devices are returned with their data intact unless you have asked for a wipe, in which case we erase to a recognised standard and record that we did.

6. When we act as a processor

Where we manage systems containing personal data belonging to your customers, staff or service users, you remain the controller and we act on your documented instructions. For ongoing engagements of that kind we will put a written data processing agreement in place covering scope, security measures, sub-processors, breach notification and what happens to the data when the engagement ends.

7. Who we share it with

We do not sell personal data. We share it only where necessary:

• Service providers — email and file hosting, website hosting, accounting software, and payment processing, each bound to confidentiality and data protection terms.
• Specialist subcontractors — for example a clean-room data recovery lab or a manufacturer warranty channel. We tell you before a device or its data goes anywhere else.
• Professional advisers — accountants, insurers or legal advisers where genuinely required.
• Authorities — where we are legally obliged to disclose.

8. International transfers

We prefer UK or EEA hosting. Where a provider processes data outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, together with any additional safeguards the transfer requires.

9. How long we keep it

• Enquiries that do not become work — up to 12 months, then deleted.
• Client records, quotes and job records — for the engagement plus 6 years, matching the limitation period for contract claims.
• Accounting and tax records — 6 years from the end of the relevant accounting period, as required by law.
• Diagnostic images and working copies — deleted once the job is confirmed complete, unless you have asked otherwise in writing.
• Server logs — short retention set by our hosting provider, typically weeks rather than months.

10. How we protect it

• Access on a need-to-know basis, with multi-factor authentication on business accounts.
• Encryption in transit, and full-disk encryption on the machines we work from.
• Devices in our care held in secured storage, logged in and out.
• Secure erasure of working copies and of any drive being retired or returned.
• Prompt patching of our own systems — we would be poor advisers otherwise.

No system is perfectly secure. If a breach occurs that is likely to risk your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours where required, and tell you without undue delay where the risk to you is high.

11. Your rights

Under the UK GDPR you have the right to:

• be informed about how your data is used — this notice;
• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have data erased where there is no continuing lawful reason to keep it;
• restrict processing in certain circumstances;
• data portability, where processing is by consent or contract and carried out by automated means;
• object to processing carried out on the basis of legitimate interests;
• withdraw consent at any time, where consent is the basis we relied on.

Email support@pktechgurus.pro to exercise any of these. We respond within one month and there is no charge for a reasonable request.

12. Complaints

Please raise any concern with us first — most things are resolved quickly. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office, at ico.org.uk, by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or by telephone on 0303 123 1113.

13. Changes to this notice

We update this notice when our practices or the law change. The date at the top shows the current version. Material changes affecting existing clients will be communicated directly.