The lab · privacy
Our privacy notice, starting with the short version.
The short version: we collect only what the job needs, what lives on your device stays yours alone, no information is ever sold, and our working copies are destroyed thirty days after your files are returned. Everything longer follows below.
Who we are. This website belongs to Easy Data Recovery Ltd, company no. NI625698, trading as Exeter Data Recovery, with Information Commissioner's Office registration ZC173784. For anything data-protection related, write to the intake laboratory: Bristol Data Recovery, Ground Floor, Building 2, Castlemead, Bristol, BS1 3AG — that is the name the building answers to, so it goes on the envelope. Phone: 0800 6890668. Revised 18 August 2026.
What we keep, and why we keep it
Enquiry details. When you phone or send a form we record your name, number, email and your description of what went wrong. That lets us answer you, diagnose the device, quote and run the case. Lawful basis: pre-contract steps taken at your request, then performance of the contract itself.
Case records. Case references, correspondence, quotes, approvals and delivery details — kept to do the work itself and to satisfy accounting and legal requirements. Lawful bases: contract, and legal obligation.
The contents of your device. There is no way to recover files without an engineer touching them. We open nothing the recovery does not require, go browsing through nothing, and use nothing on the device for any purpose except returning it to you. Lawful basis: performance of a contract. Where special category data is present, our handling of it goes no further than the technical recovery you instructed.
What never happens here
- No newsletters, no mailing lists — and your details are never sold on or passed to advertisers.
- No tracking or advertising cookies run on this site. It manages fine without following you about.
- Everything happens in our own UK lab; neither your device nor its data crosses a border.
The few others involved
Only what the job forces: our hosting provider (Hostinger) runs the mail service your enquiry form arrives through; a courier company sees the parcel and the address it is travelling to; our accountants see the invoices we raise and nothing of your files. Every one of them works under contract and acts purely on our instruction. The authorities receive information solely where the law itself requires it.
Retention: the timescales
Once your files are back with you, our working copies sit in secure storage for thirty days — insurance in case something needs re-checking — and are then securely destroyed. Where a device stays unpaid or uncollected past thirty days, our Terms govern what happens to it. Enquiry and case records are held for up to six years to meet tax, legal and warranty obligations, then deleted.
Your rights under UK GDPR
You hold the standard UK GDPR rights — access via a subject access request, rectification, erasure, restriction, portability and objection. Use the phone number or postal address above to exercise any of them; we reply within one calendar month. If our answer falls short, the ICO takes complaints at ico.org.uk, though we would rather fix the problem ourselves first.
How your device is protected
From the day it arrives to the day it leaves, your device wears one case reference, lives in secure storage, and is handled only by our engineers. Recovered data travels home on fresh media; our copies are wiped to the schedule above. If a breach ever put your rights at risk, we would notify the ICO within 72 hours and tell you promptly, in plain words.
Related reading: Terms & Conditions (PDF) · Contact us.