Privacy Policy
**Rebbles Limited | IT Solutions & Technology Services**
**Website:** https://wearerebbles.co.uk
**Last Updated:** 1 November 2026
1. Who We Are
Welcome to Rebbles Limited.
At Rebbles Limited, we are committed to protecting your privacy and ensuring that your personal information is handled securely, responsibly and transparently.
We provide professional IT solutions and technology services to businesses, including IT support, managed IT services, cloud solutions, cybersecurity, website solutions and IT consultancy.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, enquire about our services or engage with our business.
Our website address is:
https://wearerebbles.co.uk
For the purposes of applicable data protection legislation, Rebbles Limited is the data controller for personal information collected directly through our website and business enquiries, where we determine how and why that information is processed.
Where we process personal information on behalf of our business clients as part of delivering IT services, we may act as a data processor under the instructions of those clients.
2. Information We Collect
We may collect and process different types of personal information depending on how you interact with our website and services.
**Information You Provide Directly**
When you contact us, submit an enquiry, request a quotation or engage with our services, we may collect:
- Your full name
- Business or organisation name
- Email address
- Telephone number
- Business address
- Information submitted through website contact forms
- Details about your IT requirements or service enquiries
- Any additional information you voluntarily provide
**Technical and Website Usage Information**
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on our website
- Referring websites and traffic sources
- Cookie information and website usage data
This information helps us maintain website security, improve performance and provide a better user experience.
**Information Collected Through Our IT Services**
Where relevant to the services we provide, we may process technical and operational information, including system configurations, support requests, device information, diagnostic logs and authorised access records.
Such information is processed only where necessary to deliver, maintain, support or secure the agreed IT services.
3. How We Use Your Information
We use personal information for legitimate business purposes, including:
- Responding to enquiries and providing quotations
- Delivering IT solutions, technical support and managed services
- Managing client relationships and service agreements
- Providing technical assistance and troubleshooting
- Monitoring and improving website performance
- Maintaining the security of our website, systems and services
- Processing invoices, payments and business administration
- Sending relevant service updates and operational communications
- Sending marketing communications where permitted by law
- Meeting legal, regulatory and contractual obligations
We will only use your personal information where we have a lawful basis for doing so.
4. Legal Basis for Processing Personal Data
Under the UK General Data Protection Regulation (UK GDPR), we rely on one or more of the following lawful bases when processing personal information:
**Contractual Necessity**
Where processing is necessary to provide services you have requested or to fulfil our contractual obligations.
**Legitimate Interests**
Where processing is necessary for our legitimate business interests, such as responding to enquiries, improving services, preventing fraud and maintaining IT security, provided these interests do not override your rights and freedoms.
**Legal Obligations**
Where we are required to process or retain information to comply with applicable laws and regulations.
**Consent**
Where you have provided consent for specific processing activities, such as certain marketing communications or non-essential website cookies.
Where processing is based on consent, you may withdraw that consent at any time.
5. Cookies and Website Tracking
Our website may use cookies and similar technologies to ensure it operates correctly, enhance user experience and understand how visitors interact with our content.
Cookies are small text files stored on your device when you visit a website.
**Essential Cookies**
These cookies are necessary for the basic operation, functionality and security of our website.
**Analytics Cookies**
Where enabled, analytics cookies help us understand how visitors use our website, identify popular pages and improve website performance.
**Functional Cookies**
These cookies may remember user preferences and settings to improve your browsing experience.
**Third-Party Cookies**
Some website features, including embedded videos, external applications or integrated services, may use cookies provided by third parties.
Where required by law, we will obtain your consent before placing non-essential cookies on your device.
You can manage or disable cookies through your browser settings or through our website's cookie preference controls, where available.
6. Contact Forms and Business Enquiries
When you submit an enquiry through our website, we collect the information you provide to respond to your request.
This may include your name, email address, telephone number, company name and details of your enquiry.
We use this information to:
- Respond to your questions
- Provide information about our IT solutions
- Prepare quotations or service proposals
- Arrange consultations or technical discussions
- Follow up on business enquiries where appropriate
We do not sell personal information submitted through our contact forms.
Information may be processed using trusted email, customer relationship management (CRM) or other business communication systems where necessary.
7. Comments and User-Generated Content
If our website allows visitors to leave comments or submit content, we may collect the information entered into the relevant form.
We may also collect the visitor's IP address and browser information to assist with spam prevention, website security and moderation.
Where the Gravatar service is enabled, an anonymised representation of your email address may be shared with Gravatar to determine whether you use that service.
You can review Gravatar's privacy information at:
https://automattic.com/privacy/
Approved comments and associated profile images may be publicly visible where commenting functionality is enabled.
8. Media and Uploaded Files
If you upload images, documents or other files to our website or provide them as part of an IT support request, we recommend ensuring they do not contain unnecessary personal or confidential information.
Images may contain embedded metadata, including geographical location information (EXIF GPS data).
Where uploaded images are publicly accessible, other visitors may be able to download and extract this information.
Files submitted in connection with our IT services will be handled in accordance with applicable confidentiality, security and data protection requirements.
9. Embedded Content and Third-Party Websites
Our website may include embedded content or links to external websites, including videos, maps, social media platforms and third-party applications.
Embedded content may behave in the same way as if you had visited the external website directly.
These third-party websites may collect information about you, use cookies or monitor your interactions with their content.
Rebbles Limited is not responsible for the privacy practices or content of external websites.
We recommend reviewing the privacy policies of any third-party services you access.
10. Who We Share Your Information With
We respect your privacy and do not sell or rent your personal information to third parties.
Where necessary, we may share personal information with trusted third-party service providers who assist us in operating our business and delivering our services.
These may include:
- Website hosting and infrastructure providers
- Cloud hosting and cloud software providers
- IT support and technical service partners
- Email and business communication platforms
- Customer relationship management systems
- Payment processing and accounting providers
- Website analytics and security providers
- Professional advisers, where necessary
- Regulatory authorities or law enforcement agencies where legally required
We only share information where there is an appropriate legal basis and, where required, suitable contractual and security safeguards.
Where third parties process personal data on our behalf, we seek to ensure that they handle that information securely and in accordance with applicable data protection legislation.
11. Data Security
Protecting information is an important part of our business.
As an IT solutions provider, we recognise the importance of maintaining appropriate technical and organisational security measures.
Depending on the nature of the information and services involved, these measures may include:
- Access controls and user authentication
- Secure communication protocols
- Encryption where appropriate
- System monitoring and security updates
- Restricted access to confidential information
- Secure data storage and backup procedures
- Security incident management processes
- Appropriate access permissions for employees and authorised service providers
While we take reasonable steps to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.
We continually review our security practices to address evolving risks and business requirements.
12. How Long We Retain Your Information
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including meeting legal, contractual, accounting and regulatory requirements.
Retention periods may vary depending on the type of information and the services provided.
For example:
- **Business enquiries:** Retained for as long as necessary to manage the enquiry and any appropriate follow-up.
- **Client records:** Retained for the duration of the business relationship and any applicable legal or contractual retention period.
- **Financial records:** Retained in accordance with applicable UK tax and accounting requirements.
- **Technical support information:** Retained according to operational requirements, service agreements and applicable retention policies.
- **Website analytics:** Retained in accordance with the settings and policies of the relevant analytics service.
- **Website comments:** Where enabled, comments and associated metadata may be retained to support moderation and future interactions.
When personal information is no longer required, we will securely delete or anonymise it where appropriate.
13. Your Data Protection Rights
Under UK data protection legislation, you may have the following rights regarding your personal information:
**Right of Access**
You can request a copy of the personal information we hold about you.
**Right to Rectification**
You can request that inaccurate or incomplete personal information be corrected.
**Right to Erasure**
You can request the deletion of your personal information in certain circumstances.
**Right to Restrict Processing**
You can request that we limit how your personal information is processed in certain circumstances.
**Right to Data Portability**
Where applicable, you can request to receive your personal information in a structured, commonly used and machine-readable format.
**Right to Object**
You may object to certain types of processing, including processing based on legitimate interests and direct marketing.
**Rights Relating to Automated Decision-Making**
You have rights relating to certain decisions made solely through automated processing, including profiling.
**Right to Withdraw Consent**
Where processing relies on your consent, you can withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided in this Privacy Policy.
We will respond to valid requests in accordance with applicable data protection legislation, normally within one calendar month.
14. International Data Transfers
Some of the third-party technology providers and cloud services we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that suitable data protection safeguards are in place.
These may include UK adequacy regulations, approved contractual safeguards or other lawful transfer mechanisms recognised under UK data protection legislation.
15. Marketing Communications
We may occasionally contact existing or prospective business customers with information about our IT solutions, service updates or relevant business offerings.
We will only send marketing communications where permitted under applicable UK data protection and electronic marketing laws.
Where consent is required, we will obtain it before sending marketing communications.
You can opt out of receiving marketing communications at any time by following the unsubscribe instructions included in our messages or by contacting us directly.
Opting out of marketing communications will not prevent us from sending essential service-related or contractual communications.
16. Data Processing on Behalf of Clients
As an IT solutions provider, Rebbles Limited may access or process information belonging to our business clients when delivering technical support, managed IT services, cloud solutions or other contracted services.
In these circumstances, the client may act as the data controller, while Rebbles Limited acts as a data processor.
We will process such information in accordance with applicable contractual agreements, documented instructions and relevant data protection legislation.
Where required, appropriate data processing agreements will be established to define responsibilities, confidentiality requirements and security obligations.
17. Data Breaches and Security Incidents
We take data security incidents seriously.
Where a personal data breach occurs, we will assess the nature and potential impact of the incident and take appropriate steps to contain, investigate and address it.
Where legally required, we will notify the Information Commissioner's Office (ICO), affected individuals or relevant client organisations within the applicable timeframes.
We maintain appropriate procedures for managing security incidents and reducing the risk of recurrence.
18. Children's Privacy
Our website and IT services are primarily intended for businesses and professional users.
We do not knowingly collect personal information from children through our business enquiry services.
If we become aware that personal information relating to a child has been collected inappropriately, we will take reasonable steps to address the situation in accordance with applicable law.
19. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our business operations, technology services, legal requirements or data protection practices.
Any updates will be published on this page with a revised "Last Updated" date.
We encourage visitors to review this Privacy Policy periodically to stay informed about how we handle personal information.
20. Contact Us
If you have any questions about this Privacy Policy, how we process your personal information or wish to exercise your data protection rights, please contact us.
**Rebbles Limited – IT Solutions & Technology Services**
Website: https://wearerebbles.co.uk
Email: [Insert your privacy or business contact email address]
Business Address: [Insert your registered business address]
We will endeavour to respond to privacy-related enquiries promptly and in accordance with applicable data protection legislation.
21. Complaints and Regulatory Authority
If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can investigate and address your concerns.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
**Information Commissioner's Office (ICO)**
Website: https://ico.org.uk
Telephone: 0303 123 1113
Further information about your rights and UK data protection legislation is available on the ICO website.