Privacy Policy

1.Who we are

Live IT is an independent IT support and consultancy business based in Leigh, Wigan, WN7, United Kingdom, run by Liam Vernon. For the personal data described in this policy, Live IT is the data controller unless stated otherwise.

You can reach us on 01942 909091 or at liam@liveit-uk.net. We are registered with the Information Commissioner's Office (ICO), registration number ZA294876.

2.What this policy covers

This policy explains how we handle personal data when you enquire, when you become a client, when we support your systems, and when you use this website. It sits alongside our terms of sale, which cover the commercial side of what we sell.

3.Personal data we collect

• Contact and enquiry details, your name, business name, email address, phone number and the description of what you need, submitted through our contact form, health check form, phone or email.
• Client and billing records, contact details for authorised people, site addresses, purchase orders, quotes, invoices and payment records.
• Technical and support data, device names, usernames, IP addresses, asset and licence records, monitoring alerts, patch and backup status, antivirus detections, and notes and correspondence about support tickets.
• Credentials and access, administrative accounts and access we hold to support your systems, stored in an encrypted password manager and never shared outside Live IT.
• Website usage data, aggregated, privacy-friendly analytics about pages visited and referring sites, with no advertising or cross-site tracking.

4.Why we use it, and our legal basis

• To answer enquiries and prepare quotes, on the basis of our legitimate interest in responding to business enquiries, or steps taken before entering a contract.
• To deliver the services you have bought, monitoring, support, security, backup and projects, on the basis of performing our contract with you.
• To invoice, take payment and keep accounting records, on the basis of our contract with you and our legal obligations.
• To protect systems and investigate security incidents, on the basis of our legitimate interest and yours in keeping systems secure.
• To send occasional service updates and advice relevant to clients, on the basis of legitimate interest, with an opt-out in every message. We do not sell data or send unrelated marketing.

5.When we act as processor rather than controller

While supporting your IT, we often handle personal data that belongs to your organisation, for example staff mailboxes, files and user accounts. For that data you are the controller and we are your processor. We only process it to deliver the service you have asked for, we act on your instructions, and we do not use it for our own purposes.

A short written data processing summary is available on request if your own compliance work requires one.

6.Who we share data with

We share personal data only where it is needed to run the service, and only with suppliers who are bound by their own data protection obligations. Categories include:

• Software and platform providers that power monitoring, remote support, endpoint security, backup, ticketing and password management.
• Cloud and productivity platforms where your accounts are hosted, such as Microsoft 365 or Google Workspace, when we administer them on your behalf.
• Hardware and licence distributors, where a name, delivery address or licensed user is needed to fulfil an order.
• Accounting, invoicing and payment providers, for billing and statutory records.
• Professional advisers, insurers or authorities, where we are legally required to share information.

7.Where data is stored

We use reputable business platforms to deliver support. Some of those providers operate internationally, and where personal data is transferred outside the UK it is protected by an approved transfer mechanism, such as the UK addendum to the standard contractual clauses, or an adequacy decision.

8.How long we keep it

• Enquiries that do not lead to work, up to 12 months, then deleted.
• Client records, support history and documentation, for the life of the relationship and then up to 6 years, so we can handle queries, warranties and disputes.
• Invoices and accounting records, 6 years plus the current financial year, as required by UK tax law.
• Monitoring and alert data, retained in line with the platform's standard retention, typically 12 months.
• Backups, retained for the retention period agreed in your service, with a 90 day standard retention for cloud backup unless otherwise agreed.
• Credentials, deleted from our password manager when your service ends and access is no longer needed.

9.How we protect it

• Multi-factor authentication on all administrative accounts and business systems.
• Encrypted storage for credentials and documentation, with access limited to what is needed to deliver the service.
• Managed endpoint security, patching and monitoring on the devices we use to support you.
• Encrypted backups of our own business records, with restores tested.
• Prompt investigation of suspected incidents, and notification to you and, where required, to the ICO.

10.Your rights

Under UK GDPR you can ask us to give you a copy of the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or transfer it to another provider. You can also withdraw consent where we relied on consent, and opt out of service emails at any time.

Email liam@liveit-uk.net to make a request. We respond within one month. If you are unhappy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put it right first.

11.Cookies and website analytics

This website does not use advertising or cross-site tracking cookies. We use privacy-friendly, aggregated analytics to understand which pages are useful, which does not identify individual visitors or build profiles. Forms on this site are used only to contact you about your enquiry.

12.Children

Our services are sold to businesses and organisations, and this website is not aimed at children. We do not knowingly collect personal data from children.

13.Changes to this policy

We update this policy when our services or suppliers change. The current version is always published on this page, with the date it was last updated shown at the top.