Privacy Policy
1. Introduction
ITIQ Limited (“ITIQ”, “we”, “us” or “our”) is a UK-based provider of managed IT services, cybersecurity, cloud solutions and technology consultancy.
We are committed to protecting personal information and handling it responsibly, securely and transparently.
This Privacy Policy explains how we collect, use, share, retain and protect personal information when individuals visit our website, contact us, engage with our business or use our services.
It applies to website visitors, prospective customers, customer representatives, suppliers, contractors and other business contacts. Separate privacy information may apply to employees, job applicants and individuals captured by CCTV.
2. Who We Are
The organisation responsible for the personal information described in this policy is:
ITIQ Limited
First Floor, Unit 8 Ridgeway Office Park
Bedford Road
Petersfield, Hampshire GU32 3QF
United Kingdom
Website: www.itiqgroup.co.uk
Email: info@itiqgroup.co.uk
ITIQ Limited is the data controller for personal information processed for its own business purposes.
When delivering managed IT and cybersecurity services to customers, ITIQ may act as a data processor on behalf of those customers. In these circumstances, the customer generally determines the purposes and lawful basis for processing, and ITIQ processes personal information in accordance with the applicable contractual arrangements and documented instructions.
3. Personal Information We Collect
Depending on our relationship with you, we may collect and process:
- Identity and contact information: Names, job titles, organisations, business addresses, email addresses and telephone numbers.
- Business relationship information: Enquiries, proposals, contracts, correspondence, meeting notes and service requirements.
- Financial and transaction information: Billing details, payment records, purchase orders and relevant accounting information.
- Technical information: IP addresses, device identifiers, browser information, system logs and information associated with access to our website and services.
- Service and support information: Support requests, ticket correspondence, technical diagnostics and information required to deliver contracted services.
- Security information: Authentication records, access logs, security events and other information necessary to protect our systems and services.
- Website information: Information submitted through contact forms and information collected through cookies and analytics technologies, where permitted.
We seek to collect only personal information reasonably necessary for the relevant purpose.
4. How We Obtain Personal Information
We may obtain personal information:
- Directly from you when you contact us, submit an enquiry or communicate with our team.
- From your employer or organisation in connection with a business relationship or service agreement.
- Through the provision and administration of contracted IT services.
- From suppliers, professional advisers and business partners.
- From publicly available business information and professional directories, where relevant.
- Automatically through our website, systems and security infrastructure.
5. How We Use Personal Information
We process personal information for the following purposes and on the following lawful bases, as applicable:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and communicating with prospective customers | Legitimate interests; steps requested before entering a contract where applicable |
| Providing contracted services and managing customer relationships | Contract where the individual is a contracting party; otherwise legitimate interests |
| Administering contracts, invoices and payments | Contract where applicable; legitimate interests; legal obligation |
| Providing technical support and service management | Legitimate interests; contract where applicable |
| Maintaining system security, preventing fraud and investigating security incidents | Legitimate interests; legal obligation where applicable |
| Managing suppliers and professional relationships | Legitimate interests; contract where applicable |
| Meeting accounting, tax, regulatory and other legal requirements | Legal obligation |
| Improving our website and business processes | Legitimate interests or consent, depending on the activity |
| Using non-essential website analytics | Consent |
| Sending relevant business communications and marketing | Legitimate interests or consent, as appropriate under applicable marketing and privacy laws |
Where we rely on legitimate interests, these include operating and developing our business, communicating with customers and professional contacts, delivering services, maintaining effective administration and protecting our systems and assets.
We assess these interests against the rights and freedoms of affected individuals.
Where processing is based on consent, you may withdraw that consent at any time.
6. Managed IT and Cybersecurity Services
In providing managed IT, cloud and cybersecurity services, ITIQ may process personal information contained within customer systems, user accounts, devices, applications, security logs and support records.
Depending on the services provided, this may include information relating to customer employees, contractors, customers and other individuals.
Where ITIQ acts as a data processor, processing is governed by the relevant customer agreement and applicable data processing terms.
We use appropriate technical and organisational measures to protect information processed on behalf of customers and restrict access to authorised personnel and approved service providers.
Requests relating to personal information controlled by one of our customers should ordinarily be directed to that customer. We will provide reasonable assistance to customers in fulfilling their data protection obligations.
7. Sharing Personal Information
We may share personal information with third parties where reasonably necessary for legitimate business purposes, service delivery or compliance with legal obligations.
These may include:
- Cloud hosting, communications and IT infrastructure providers.
- Security monitoring and cybersecurity service providers.
- Authorised outsourced service desk and technical support partners.
- Professional advisers, accountants, auditors and insurers.
- Payment processing and financial service providers.
- Regulatory bodies, courts and law enforcement authorities where legally required or otherwise lawful.
We do not sell personal information to third parties.
Where third parties process personal information on our behalf, we require appropriate contractual, confidentiality and security protections.
8. International Data Transfers
ITIQ primarily operates from the United Kingdom. However, certain services, including outsourced technical support and helpdesk operations, may involve access to personal information from outside the United Kingdom.
Such access may constitute an international transfer of personal information under applicable data protection legislation.
Where international transfers occur, ITIQ implements appropriate safeguards in accordance with UK data protection law. Depending on the circumstances, these may include UK adequacy regulations, approved international data transfer agreements, the UK Addendum to standard contractual clauses or other lawful transfer mechanisms.
Where ITIQ acts as a data processor, international transfers are also subject to the relevant customer agreement and documented instructions.
Further information about applicable transfer safeguards may be requested by contacting info@itiqgroup.co.uk.
9. Information Security
We maintain technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
These include appropriate access controls, authentication, endpoint protection, security monitoring, staff procedures and supplier management arrangements.
Security measures are reviewed and updated in response to changing operational requirements and risks.
For security reasons, detailed information about our internal infrastructure, system configurations and security architecture is not publicly disclosed.
10. Retention of Personal Information
As a general policy, ITIQ retains personal information associated with a customer engagement for up to six months following termination of that engagement, unless a longer retention period is necessary or required.
Exceptions may include:
- Accounting, taxation and statutory financial records, which are retained for applicable legal periods.
- Information required to establish, exercise or defend legal claims.
- Information subject to legal, regulatory, contractual or audit requirements.
- Records relating to security incidents, investigations or other legitimate operational requirements.
- Information that must be retained or deleted in accordance with a customer’s documented instructions and applicable contractual terms.
Other categories of information, including website enquiries, supplier records and marketing information, are retained for periods appropriate to their purposes and applicable legal requirements.
Where information is no longer required, it is securely deleted, anonymised or otherwise disposed of in accordance with applicable procedures.
11. Your Data Protection Rights
Subject to applicable legal requirements and exemptions, individuals may have the right to:
- Request access to their personal information.
- Request correction of inaccurate or incomplete information.
- Request erasure of personal information in certain circumstances.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Request transfer of certain personal information to another organisation.
- Withdraw consent where processing is based on consent.
You have the right to object to processing of your personal information based on legitimate interests. You also have the right to object at any time to processing for direct marketing purposes.
Requests may be submitted to info@itiqgroup.co.uk.
We may need to verify your identity before responding to certain requests.
12. Marketing Communications
ITIQ may occasionally send marketing communications concerning its services, developments and relevant business opportunities.
Marketing communications are sent in accordance with applicable UK data protection and electronic marketing requirements, including consent requirements where applicable.
Recipients may opt out of marketing communications at any time using an unsubscribe facility, where provided, or by contacting info@itiqgroup.co.uk.
13. Cookies and Website Analytics
Our website uses Google Analytics to help us understand website usage, visitor activity and the performance of our website.
Google Analytics may use cookies and similar technologies to collect information about how visitors interact with the website, including pages visited, approximate location, device and browser information, and interaction patterns.
Where consent is required, Google Analytics and other non-essential technologies will only be activated after the visitor has provided consent.
Visitors must be able to decline non-essential cookies and withdraw their consent.
We do not currently use advertising cookies or advertising tracking technologies.
Further information about cookies and available controls is provided through our website’s cookie consent mechanism.
Your cookie choices
You can change or withdraw your cookie consent at any time using the options below.
14. CCTV and Premises Security
ITIQ operates CCTV surveillance at its premises for security and crime prevention purposes.
Further information about the operation of CCTV, including the categories of information recorded, purposes of processing, access arrangements and individual rights, is available in our separate CCTV Privacy Notice:
https://itiqgroup.co.uk/privacypolicy/cctv
15. Providing Personal Information
Certain information may be required to respond to enquiries, enter into agreements, deliver services, process payments or comply with legal obligations.
Where necessary information is not provided, we may be unable to complete a requested transaction, establish a business relationship or deliver some or all of the requested services.
16. Complaints
If you have concerns about our handling of personal information, please contact us at info@itiqgroup.co.uk so that we can investigate and respond.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Website: www.ico.org.uk
17. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, business operations, legal obligations or data protection practices.
The latest version will be published on our website, together with its revision date. Where required, we will separately notify affected individuals of material changes.
