Computerko Limited is committed to protecting personal data and handling it lawfully, fairly, securely, and transparently.
This Privacy Policy explains how Computerko Limited collects, uses, stores, shares, and otherwise processes personal data when you visit our website, contact us, request a quotation, purchase goods or services, receive support from us, or otherwise interact with us.

This website and the goods and services made available through it are intended for business use only.

1. Who we are

Computerko Limited is a company registered in England and Wales.
For the purposes of data protection law, Computerko Limited may act as either:
Registered office: 27 Old Gloucester Street, London, WC1N 3AX, United KingdomContact email: support@computerko.co.uk

• a data controller, where we decide why and how personal data is used; or
• a data processor, where we process personal data on behalf of a customer and in accordance with that customer’s instructions.

Our role depends on the service being provided and the context in which personal data is processed.

2. Who this policy applies to

This Privacy Policy applies to:

• visitors to our website;
• people who contact us by email, forms, or telephone;
• prospective business customers;
• customers and customer representatives;
• users of our services and support channels;
• supplier, distributor, and partner contacts; and
• any other individual whose personal data we collect or receive in connection with our business activities.

3. The personal data we may collect

Depending on how you interact with us, we may collect and use:

• name;
• job title;
• company name;
• business email address;
• business telephone number;
• billing and account details;
• delivery and service address details;
• order, contract, and transaction information;
• payment-related information;
• communications with us;
• support tickets, service requests, and related records;
• login, account, and user profile information;
• device, browser, and IP information;
• website usage and analytics information;
• marketing preferences;
• security, access, audit, and diagnostic logs; and
• any other personal data you choose to provide to us.

We do not intentionally collect more personal data than is reasonably necessary for the relevant purpose.

4. How we collect personal data

We may collect personal data:

• directly from you;
• from your employer or organisation;
• when you fill in forms on our website;
• when you contact us by email, telephone, or support channels;
• when you request quotations or place orders;
• when you use our services;
• from cookies and similar technologies, subject to our Cookie Policy;
• from suppliers, distributors, finance providers, or service partners where relevant to fulfilment or service delivery; and
• from publicly available business sources where lawful and appropriate.

5. How we use personal data

We may use personal data to:

• respond to enquiries;
• provide quotations;
• process and fulfil orders;
• deliver goods and services;
• manage customer accounts;
• provide support and service communications;
• administer contracts and billing;
• process payments and direct debits;
• administer finance-related arrangements for DaaS and TaaS;
• register and manage domain names;
• provide hosting, cloud, email, backup, and managed IT services;
• monitor, maintain, and secure our systems and services;
• handle warranties, returns, faults, and service issues;
• manage suppliers and logistics;
• send business communications where lawful;
• improve our website, services, and customer experience;
• detect, prevent, and investigate fraud, misuse, and security incidents;
• comply with legal and regulatory obligations; and
• establish, exercise, or defend legal claims.

6. Lawful bases for processing

Where we act as a controller, we rely on one or more of the following lawful bases:

• contract — where processing is necessary to take steps at your request or perform a contract;
• legal obligation — where we must comply with applicable law;
• legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms;
• consent — where consent is required, for example in relation to certain marketing or cookie activities; and
• vital interests — where exceptionally necessary to protect someone’s vital interests.

7. When we act as controller

We generally act as a controller when we process personal data for our own business purposes, including:

• operating our website;
• managing enquiries, quotes, customer relationships, and accounts;
• processing orders, billing, and payments;
• maintaining supplier and partner records;
• sending service and account communications;
• operating our internal business systems;
• carrying out security monitoring for our own systems and services;
• managing recruitment and administration; and
• meeting legal, regulatory, and audit obligations.

8. When we may act as processor

For some managed services, we may process personal data on behalf of a customer and under that customer’s instructions. This may apply where we provide managed IT, hosting, cloud, support, monitoring, backup, endpoint, domain, email, or related technical services and the customer remains responsible for determining the purposes and means of the processing.

Where we act as a processor, we do so under the relevant contractual framework and only on documented instructions unless otherwise required by law.

9. Who we share personal data with

We may share personal data where necessary with:

• distributors, wholesalers, and fulfilment providers;
• manufacturers, warranty issuers, repair, replacement, and returns providers;
• payment processors and direct debit providers;
• finance brokers in connection with DaaS and TaaS arrangements;
• couriers, delivery partners, and logistics providers;
• domain name providers and related service partners;
• hosting, cloud, infrastructure, communications, security, support, monitoring, backup, and software providers;
• professional advisers, including legal, compliance, audit, and insurance advisers;
• regulators, law enforcement bodies, courts, and public authorities where required; and
• other parties where disclosure is lawful and necessary.

We only share personal data where there is a lawful basis and a legitimate business, contractual, legal, or operational reason to do so.

10. Third-party providers and sub-processors

We use a number of third-party providers to support order fulfilment, payments, finance, domain services, cloud infrastructure, hosting, and communications.

Where personal data is processed by a third-party provider on our behalf or as part of our services, we take reasonable steps to ensure that the arrangement is appropriate to the service being provided.

11. International transfers

Some of the providers and systems we use may process, store, host, back up, or support personal data outside the United Kingdom.

Where personal data is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data protection law.

12. Cookies and similar technologies

Our website may use cookies and similar technologies for essential website functionality, analytics, preferences, security, and other operational purposes.

Where required, we will request consent before using non-essential cookies or similar technologies.

Please see our separate Cookie Policy for more information.

13. Marketing communications

We may send business-related updates, service communications, and, where lawful, marketing communications.

Where consent is required by law, we will seek it. Where consent is not required, we will rely on another lawful basis where permitted and will provide an appropriate opt-out or unsubscribe mechanism.

14. Security and monitoring

We use reasonable technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration, or disclosure.

We may also use logging, monitoring, diagnostic, and security tools to maintain service availability, integrity, and security, investigate faults, and detect abuse or misuse.

15. AI and automation

We may use automation and AI-assisted tools at a computational, operational, and infrastructure level to support service delivery, monitoring, optimisation, and efficiency.

We do not use identifiable personal data to train AI models as part of our standard operations.

AI-assisted outputs remain subject to human oversight and review.

16. Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

• to provide goods and services;
• to manage the customer relationship;
• to comply with legal, accounting, tax, regulatory, and audit obligations;
• to resolve disputes;
• to investigate incidents; and
• to establish, exercise, or defend legal claims.

Retention periods may vary depending on the category of data, the service involved, contractual requirements, regulatory requirements, and operational needs.

17. Your rights

Where applicable under data protection law, you may have the right to:

• be informed about how your personal data is used;
• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing in certain circumstances;
• request data portability in certain circumstances; and
• withdraw consent where processing is based on consent.

If we are processing personal data on behalf of a customer as processor, rights requests may need to be referred to the relevant customer as controller.

18. Complaints

If you have any questions or concerns about how we handle personal data, please contact us first at:

support@computerko.co.uk

You also have the right to make a complaint to the Information Commissioner’s Office if you believe your personal data has been handled unlawfully or unfairly.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, systems, legal obligations, or operational practices.

Any changes will be posted on this page together with an updated revision date.

20. Contact us

If you have any questions about this Privacy Policy or our handling of personal data, please contact:

Computerko Limited
27 Old Gloucester Street
London
WC1N 3AX
United Kingdom
Email: support@computerko.co.uk