Last Updated: 9 November 2026
Introduction
Harvey IT (“we”, “us” and “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us or use our services. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws.
Data Controller
Harvey IT is the data controller responsible for your personal data.
Website: harveyit.co.uk
Email: privacy@harveyit.co.uk
If you have any questions regarding this Privacy Policy or your personal data, please contact us using the details above.
What Information We Collect
We may collect and process the following categories of personal information:
Information You Provide
When you contact us through a contact form, email or other communication methods, we may collect:
- Name
- Email address
- Telephone number
- Company name
- Any information included in your enquiry
Technical Information
When you visit our website, we may automatically collect certain information, including:
- IP address
- Browser type and version
- Device information
- Operating system
- Date and time of visits
- Pages visited
- Referring website addresses
Comments
When visitors leave comments we collect:
- Information entered into the comments form
- IP address
- Browser user agent information
This information helps us detect and prevent spam.
How We Use Your Information
We use personal information to:
- Respond to enquiries and requests
- Provide IT support and related services
- Improve our website and services
- Maintain website security
- Detect and prevent fraud, abuse and malicious activity
- Comply with legal and regulatory obligations
We do not sell personal information to third parties.
Legal Basis for Processing
Under UK GDPR, we process personal data under one or more of the following legal bases:
Legitimate Interests
We process personal information where necessary for our legitimate business interests, including:
- Responding to enquiries
- Managing customer relationships
- Securing our website and systems
- Improving our services
Contract
Where you engage us to provide services, we process your information as necessary to fulfil our contractual obligations.
Legal Obligation
We may process personal data to comply with legal, regulatory, taxation or accounting requirements.
Consent
Where required by law, we will obtain your consent before placing non-essential cookies or processing personal data for specific purposes.
Cookies
Our website uses cookies to improve functionality and user experience.
Cookies are small text files stored on your device by your web browser.
Essential Cookies
These cookies are necessary for the website to function correctly and cannot be disabled.
Examples include:
- Login authentication
- Security features
- Session management
- Load balancing
Analytics Cookies
If analytics services are enabled, these cookies help us understand how visitors use the website.
Analytics cookies will only be used where appropriate consent has been obtained.
You can control or delete cookies through your browser settings.
Contact Forms
When you submit a contact form, we collect the information you provide in order to respond to your enquiry and maintain records of communications.
Contact form submissions may be retained for up to 12 months unless a longer retention period is necessary for business or legal purposes.
Analytics
We may use website analytics services to understand visitor behaviour and improve website performance.
Analytics information is typically collected in aggregated or pseudonymised form and is used solely to improve our website and services.
Where legally required, analytics technologies will only be activated after obtaining your consent.
Third-Party Services
We may use trusted third-party providers to assist in operating our website and business.
Depending on the services used, these providers may process personal data on our behalf. Examples may include:
- Website hosting providers
- Email service providers
- Spam filtering services
- Security monitoring services
- Analytics providers
All third-party processors are required to maintain appropriate security measures and process personal data only for authorised purposes.
Embedded Content
Pages on this website may include embedded content from third-party websites such as:
- YouTube
- Vimeo
- Microsoft
- Other content providers
Embedded content behaves in the same way as if you had visited the third-party website directly.
These providers may collect data, use cookies and monitor your interaction with their content. We encourage you to review their privacy policies.
Spam Detection
Visitor comments and form submissions may be checked through automated spam detection services to help protect the website from abuse and malicious activity.
Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected.
Typical retention periods include:
| Data Type | Retention Period |
|---|---|
| Contact form submissions | Up to 12 months |
| Business correspondence | Up to 7 years where relevant |
| Website security logs | Up to 90 days |
| Customer records | Duration of service relationship and legal retention requirements |
| Website comments | Until removed or requested for deletion |
Retention periods may be extended where required by law or for legitimate business purposes.
Data Security
We implement appropriate technical and organisational measures designed to protect personal information against:
- Unauthorised access
- Accidental loss
- Alteration
- Disclosure
- Destruction
While no online system can be guaranteed completely secure, we take reasonable steps to safeguard personal data.
International Transfers
Some third-party service providers may process personal data outside the United Kingdom.
Where such transfers occur, we ensure appropriate safeguards are in place and that personal data receives an equivalent level of protection as required under UK GDPR.
Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict processing
- Object to processing
- Request transfer of your data
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details provided in this policy.
Complaints
If you are unhappy with how we process your personal information, we would appreciate the opportunity to address your concerns first.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
ICO Website: https://ico.org.uk
ICO Helpline: 0303 123 1113
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology or our business practices.
Any updates will be published on this page and the revision date will be updated accordingly.