Intro
This Privacy Policy explains how iCrack, operated by Icrack (“we”, “us”, “our”), collects, uses and protects your personal information. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.
Information we collect
We may collect: your name and contact details (phone, email, address); device details and fault information; repair, purchase and transaction history; proof of ID or ownership where required for buy/sell/trade-in; CCTV footage in our stores; and website usage data via cookies (see our Cookie Policy).
How we use your information
We use your information to: provide quotes and carry out repairs; process buy, sell and trade-in transactions; contact you about your device or order; honour warranties; keep records for legal and accounting purposes; prevent fraud and verify ownership; and, where you’ve agreed, send you marketing.
Lawful basis
We process your data under: contract (to provide the services you request); legal obligation (e.g. accounting, preventing handling of stolen goods); legitimate interests (running and improving our business, fraud prevention); and consent (for marketing, which you can withdraw at any time).
Your data & repairs
For hardware repairs we do not routinely access the contents of your device. You are responsible for backing up your data. Where diagnostics or data recovery require access, this is carried out confidentially and only as necessary. Devices bought, sold or traded in are securely wiped.
Sharing your information
We do not sell your data. We may share it with: parts and service suppliers where needed to complete a repair; IT, payment and communications providers acting on our behalf; and law enforcement or authorities where legally required (including reporting suspected stolen devices).
Data retention
We keep personal data only as long as necessary for the purposes above, including legal and accounting requirements (typically [6] years for transaction records). CCTV is retained for [30] days unless needed for an incident.
Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent. To exercise any right, contact us using the details below. You also have the right to complain to the ICO (ico.org.uk).
Security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.
Changes
We may update this policy from time to time. The latest version will always be published on this page.