Privacy policy

Last updated: 28 May 2026

This policy explains how Longstone IT collects, uses and looks after personal information when you use our website, contact us, book a call, ask for support or work with us.

We have written it in plain English because privacy information should be useful, not buried in legal language. If anything here is unclear, please contact us and we will be happy to help.

Who we are

Longstone IT is based at The Shed, 12 Kenwith Drive, Kingsbridge, TQ7 1DU.

You can contact us by email at info@longstoneit.com or by phone on +44 (0)1548 800 008.

For personal information collected through this website, enquiries and general client administration, Longstone IT is usually the data controller. Where we provide IT services to a client and process personal information on that client’s behalf, we may act as a processor and the client’s own privacy information and service agreement will also apply.

Information we collect

We may collect and use:

• your name, business name, role and contact details;
• details you send through forms, email, phone calls, support requests or booking tools;
• information about the services you ask us about or receive from us;
• basic website and device information, such as IP address, browser type, pages visited, dates, times and cookie choices;
• security and performance information from our website, hosting, firewall and Cloudflare logs;
• billing, contract and administration details where we work together.

Please only send us personal information that is relevant to your enquiry or the work we are doing together.

How we use your information

We use personal information to:

• respond to enquiries, support requests and booking requests;
• prepare quotes, proposals and recommendations;
• provide, manage and improve our IT services;
• keep our website, systems and clients secure;
• understand how the website is used and improve its content;
• send service messages and useful updates where this is allowed by law;
• meet legal, accounting, tax and regulatory obligations;
• protect our rights, our clients and our business.

Our lawful bases may include legitimate interests, contract, steps before entering into a contract, legal obligation and consent. Where we rely on consent, you can withdraw it at any time.

Cookies and similar technologies

Our website may use cookies and similar technologies. Some are necessary for the site to work properly, keep it secure, remember privacy choices or deliver a service you have requested. These essential cookies do not normally require consent.

Where we use non-essential cookies, such as analytics or marketing cookies, we will ask for consent first.

You can also control cookies through your browser settings. Blocking some cookies may affect how the website works.

Cloudflare and website security

We use Cloudflare to help deliver, protect and improve the website. Cloudflare may process technical information such as IP addresses, request data, traffic routing data, browser and device information, security events and similar logs. This helps with performance, availability, bot protection, abuse prevention and security monitoring.

Cloudflare may process information outside the UK. Where this happens, we expect appropriate safeguards to be used, such as Cloudflare’s data processing terms and recognised transfer mechanisms.

Who we share information with

We do not sell personal information. We only share it where there is a sensible reason to do so, such as with:

• trusted suppliers who help us run the website, hosting, email, forms, scheduling, security, consent management or business systems;
• professional advisers, such as accountants, insurers or legal advisers;
• public authorities, regulators or law enforcement where we are legally required to do so;
• service partners where this is needed to deliver agreed work for a client.

Where suppliers process personal information for us, we expect them to protect it and only use it for the agreed purpose.

International transfers

Some suppliers may process personal information outside the UK. Where this happens, we will look for appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU standard contractual clauses, or another lawful transfer mechanism.

How long we keep information

We keep personal information only for as long as we need it. This depends on the type of information and why we collected it.

• Enquiries are kept for a reasonable period so we can respond properly and manage the relationship.
• Client, contract and billing records are kept for as long as needed for service delivery, accounting, legal and tax purposes.
• Website security logs are usually kept for a limited period unless we need them to investigate an issue or protect the website.

When information is no longer needed, we will delete it, anonymise it or securely archive it where we have a valid reason to keep it.

Your rights

Under UK data protection law, you may have rights to:

• be informed about how your personal information is used;
• access a copy of your personal information;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information in certain circumstances;
• ask us to restrict how we use information in certain circumstances;
• object to certain uses of your information;
• ask for information to be transferred where data portability applies;
• withdraw consent where we rely on consent.

Some rights depend on the circumstances and may not apply every time. To make a request, contact us at info@longstoneit.com.

You also have the right to complain to the Information Commissioner’s Office. The ICO’s website is ico.org.uk.

Automated decision-making

We do not use website enquiry information to make solely automated decisions that have legal or similarly significant effects on people.

Changes to this policy

We may update this policy when our website, suppliers, services or legal requirements change. The latest version will always be available on this page.