We want to earn your trust. Your drive has likely held years' worth of memories for you, and you are also trusting us with your name and number so we can talk to you about it. Below, we have included exactly what data we collect, why we need it, how long we retain it and what you can request we do with it.
Last updated 8 October 2026.
Your contact information, including name, email, phone number, and a return address (if we are posting a device back): this is provided either through our online diagnostic tool, the contact form, via email or over the phone.
The contents of your device: we read every sector of your storage media when recovering data from that storage, since we can't tell in advance which sectors contain your files. We do not browse your storage media, index your storage media, nor do we use it for anything but returning your files to you.
| Quoting, and doing the recovery | To perform our contract with you |
| Payment and accounting records | Legal obligation |
| Website analytics | Your consent — see cookies below |
| Defending a legal claim | Our legitimate interests |
If we have a device that includes health records or other "special categories" of personal data, then the basis for processing that information would be either to establish or defend legal claims, or by way of your explicit consent.
Your device is recovered in-house, by ourselves. No third-party laboratory will receive your device, nor will any of the data from your device be shared with anyone else. Your device and its contents stay in the United Kingdom.
Four of the companies we use as service providers will necessarily process some limited information about you which we collect: our website's hosting company, courier services used to facilitate tracked returns (only name and address), our accountants and our payment processor, and Google Analytics if you allow it. We do not sell your data or share it for marketing purposes. We share your data only when required to do so by law.
Analytics data may be processed by Google in locations outside of the UK, although this is permissible because of the UK addendum to the standard contractual clauses (SCCs) that are used as part of the agreement between Google and us. However, no other data is transferred out of the UK.
| Recovered data on our systems | Removed from our systems 30 days after you inform us that you have obtained it, or at such earlier date as you notify us. |
| Enquiries that do not become jobs | 12 months |
| Job records and invoices | Retained for 6 years, in accordance with the statutory limitation period and to comply with HM Revenue and Customs’ requirements. |
| Analytics | 14 months |
You may request a copy of the information we are holding about you; you may require us to correct the information if it's incorrect, delete it, suspend its use, or provide it in a commonly used electronic format. You may also object to processing based upon our legitimate interests, or withdraw consent at any time.
You may write to 4 Redheughs Rigg, Westpoint, South Gyle, Edinburgh, EH12 9DQ or telephone 0131 202 0491. We will respond within one month and free of charge.
Please let us know first if we have made an error in respect of your data, as this enables us to rectify it. You can also refer the matter to the Information Commissioner’s Office (ICO) using the website ico.org.uk/make-a-complaint or by telephoning them on 0303 123 1113.
Nothing is set until you decide, and there is no obligation to decide now. After a banner asks the question once, the response will be recorded by your browser as one entry stored on your device.
If you agree, then Google Analytics will tell us which web pages are viewed and how you reach our website. When you decline, the Google Analytics script is never requested: it’s not downloaded and then instructed to ignore your browser. We never use Google Analytics to identify you.
Edinburgh Data Recovery is the trading name of Easy Data Recovery Ltd, a limited company that was incorporated in Northern Ireland (Company No. NI625698). The address for this company is 4 Redheughs Rigg, Westpoint, South Gyle, Edinburgh, EH12 9DQ. This company is the data controller and has been registered with the Information Commissioner's Office ("ICO") with registration reference number ZC173784.
We don't take automated decisions about you; each quote will be written based on a manual review of your equipment by one of our engineers. You are free not to provide us with your contact information. However, in order for us to send you a quote, recover something or return something to you, we require that you provide us with your personal data. If this notice changes, the date at the top changes with it.