Privacy Policy
Last updated: 1 September 2026
This policy explains what we do with personal information collected through this website. It is written in plain English on purpose — if anything here is unclear, ask us and we will explain it.
Who we are
This website is operated by ICRIS Managed IT Services Ltd, a company registered in England and Wales.
- Company number: 11724923
- Registered office: 62 Uphill Way, Uphill, Weston-super-Mare, Avon, BS23 4TN
- Email: info@icris.co.uk
- Phone: 020 3355 3405
For the information described in this policy, ICRIS is the data controller — the organisation that decides why and how it is used.
What this policy covers
This policy covers personal information collected through icris.co.uk: enquiry forms, emails and calls that start here, and the technical records our website creates automatically.
It does not cover information we handle inside a client’s own systems while providing IT services. That work is governed by our contract with that client, and in it we normally act as a data processor on their behalf rather than as a controller.
The information we collect
When you contact us
Our enquiry forms — the contact form, the website application form and the service enquiry form — ask for:
- Your name
- Your email address
- Your phone number, if you give it
- Your company name, if you give it
- What you would like help with, and your message
Only name, email address and your message are required. Everything else is optional, and you should not include anything sensitive or confidential in a first message to us.
If you email or ring us instead, we hold whatever you tell us in that message or call.
Automatically, when you visit
Like any website, ours creates technical records as pages load. Our hosting provider logs your IP address, the type of browser and device you are using, the pages you visited and when. These logs exist to keep the site running and secure, not to build a profile of you.
Cookies
This site sets no advertising, analytics or tracking cookies. We do not run Google Analytics or any similar service, and nothing here follows you around the internet.
The only cookies used are the essential ones WordPress sets when a member of our own team logs in to manage the site. If you are simply reading the site, no cookies are set that need your consent.
The client portal
Not yet live. We are building a client portal so existing clients can log and track support jobs. When it launches it will hold account details, the support requests you raise and the correspondence about them. We will update this policy before the portal opens, and clients will be told when that happens.
Why we use your information, and our legal basis for it
To answer your enquiry and provide a quote
Our legal basis is legitimate interests — you contacted us and we need your details to reply usefully. Where the conversation is heading towards a contract, our basis is taking steps at your request before entering into a contract.
To keep the website working and secure
Our legal basis is legitimate interests — running a site that stays up and is not abused.
To keep proper business and accounting records
Where you become a client, our legal basis is legal obligation for the records we are required to keep, and contract for the rest.
We do not use website enquiries to send marketing. If we ever want to, we will ask you first and you will be able to say no.
Who we share it with
We do not sell your information and we do not share it for advertising. We do use a small number of suppliers who process information on our behalf, under contract:
- Web3Forms — delivers our enquiry forms to our inbox. Form submissions pass through and are stored on their systems. See the Web3Forms privacy policy.
- 20i — hosts this website and its server logs.
- Microsoft 365 — carries and stores the emails we exchange with you.
- Google Fonts — this site loads its typefaces from Google’s font service, which means your IP address reaches Google when a page loads.
We may also disclose information where the law requires it, or to establish or defend legal claims.
Where your information is held
Our suppliers are not all based in the UK. In particular, form submissions handled by Web3Forms are stored on infrastructure in more than one country, and that company operates from India. Where personal information leaves the UK, it is protected by the contractual safeguards those suppliers commit to, including their data processing agreements.
If you would rather not send your details through the form, email or ring us instead — the contact details are at the top of this policy.
How long we keep it
- Enquiries that do not become work: 6 months , then deleted.
- Enquiries that become client work: kept for the life of the relationship, and then for as long as we are required to keep business records — normally six years after the relationship ends.
- Form submissions held by Web3Forms: deleted automatically after a maximum of three years, and sooner where we remove them ourselves.
- Website server logs: kept for a short period by our hosting provider for security and troubleshooting, then overwritten.
Your rights
Under UK data protection law you can ask us to:
- Tell you what personal information we hold about you, and give you a copy
- Correct anything that is wrong or incomplete
- Delete information we no longer have a good reason to keep
- Restrict how we use it, or object to us using it under legitimate interests
- Provide it in a portable, machine-readable format where that right applies
To exercise any of these, email info@icris.co.uk or write to us at the registered office above. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Keeping it safe
The site is served over an encrypted connection (HTTPS). Access to enquiry emails is limited to the people who need it, protected by strong authentication. We choose suppliers who encrypt data in transit and at rest. No system is perfect, but security is the work we do for a living and we hold our own systems to the standard we recommend to clients.
Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect information about anyone under 18 through it.
Links to other sites
Where we link out to another organisation’s website, that site has its own privacy policy and we are not responsible for it.
Changes to this policy
If we change how we use personal information — for example when the client portal launches — we will update this page and change the date at the top. Significant changes will be flagged to clients directly.
How to contact us
Email info@icris.co.uk, call 020 3355 3405, or write to ICRIS Managed IT Services Ltd, 62 Uphill Way, Uphill, Weston-super-Mare, Avon, BS23 4TN.