Privacy Policy

Who’s responsible for your data

Clayton Sampere, trading as Rye Tech and Repairs, contactable at [email protected], is the data controller for this site.

What we collect

We only collect personal data you actively provide when submitting a repair request:

• Name — used to address correspondence and identify your repair.
• Email address — used to send repair updates and your invoice.
• Phone number — in case we need to contact you quickly about your repair.
• Postal address (address lines, city, postcode, country) — used to return your item after repair and to issue invoices.
• Item and fault description — the device type and the problem you have described. This is not personal data in itself but is linked to your customer record.
• Cookie preference — a single strictly-necessary entry recording whether you accepted or declined optional cookies.

We do not collect, process, or store any card or payment data. Invoices are settled via a Tide payment link — a plain URL — and all card processing is handled entirely by Tide. We never see or retain your card details.

How we store it

Customer personal data (name, email, phone, and address) is stored in an AES-256-encrypted PostgreSQL database hosted on Neon (a managed cloud PostgreSQL provider). Data at rest is encrypted, and all connections to the database are encrypted in transit. Repair records, invoices, and email logs are stored in the same database and retained for business accounting purposes.

Repair confirmation and update emails are sent using Google Workspace (Gmail) as our email provider. We don’t sell, rent, or share your personal data with anyone else, and we don’t use it for advertising.

How long we keep it

Customer personal data is retained for 3 years after the repair is closed. After this period, or on a valid erasure request (see below), all personal data fields are permanently removed from our systems. Repair records, parts, and invoice data are retained indefinitely for financial and business record purposes, but without any personally identifying information once erased.

Your rights (GDPR / UK GDPR)

If you’re in the UK or EU, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure (right to be forgotten) — request that we permanently erase all personal data linked to your customer record. We will null all PII fields (name, email, phone, address) from our database. The repair and invoice records themselves are retained for business purposes but will contain no personal data. To request erasure, email [email protected] with your repair reference code.
• Restriction — ask us to restrict processing of your data.
• Portability — request a machine-readable copy of your data.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email [email protected]. You can also lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you’re in the UK.

Your rights (CCPA / CPRA)

If you’re a California resident, you have the right to know what personal information we hold about you, request its deletion, correct inaccuracies, and opt out of the sale or sharing of it. We don’t sell or share personal data, so there’s nothing to opt out of — but you can still exercise any of these rights by emailing [email protected]. We won’t discriminate against you for exercising them.

Cookies

The only cookie/local storage entry this site sets by default records your cookie banner choice — it’s strictly necessary and doesn’t require consent. Nothing else is set unless you click “Accept all”, and you can change your mind at any time via “Cookie Settings” in the footer.

Children’s privacy

This site isn’t directed at children, and we don’t knowingly collect data from them.

Changes to this policy

If this policy changes, we’ll update the date at the top of this page.

Contact

Questions about this policy or your data? Email [email protected].