The lab · privacy notice
Privacy, and the one-paragraph version first.
In brief: nothing is gathered beyond what the recovery requires, the contents of your device remain yours and only yours, we sell nothing to anybody, and thirty days after your files go home the working copies are wiped. The detail sits underneath.
Who we are. Easy Data Recovery Ltd (company no. NI625698) runs this site and trades as Milton Keynes Data Recovery; its Information Commissioner's Office registration is ZC173784. Anything data-protection related goes to the bench that takes our deliveries: Oxford Data Recovery, John Eccles House, Science Park, Robert Robinson Ave, Littlemore, Oxford OX4 4GP — put that name on the envelope, since it is what the building answers to. Phone: 0800 6890668. Revised 18 August 2026.
What is held here, and the reason for it
Enquiry details. A call or a submitted form leaves us your name, phone number, email and an account of the failure. We need those to reply, examine the device, price the work and see the case through. Lawful basis: steps taken before a contract at your request, followed by performance of that contract.
Case records. Reference numbers, messages, quotes, sign-offs and despatch details. These exist so the job can be done and so our books and legal duties stand up. Lawful bases: contract, plus legal obligation.
The contents of your device. Files cannot be recovered without an engineer handling them. Nothing gets opened unless the recovery calls for it, nobody reads through your material, and nothing found there is used for any purpose other than handing it back. The lawful basis is performance of a contract. If special category data turns up, it is handled only as far as the technical recovery you asked for demands.
Things we do not do
- No mailing list, no newsletter, and nothing of yours sold on or handed to advertisers.
- No advertising or tracking cookies are set by this site. It runs fine without following you around the web.
- Nothing leaves the country — device or data. It is all handled in our own UK lab.
Who else sees anything
Only where the job leaves no choice. Hostinger, our hosting provider, carries the mail service that delivers your enquiry form. A courier handles the parcel and reads the address on it. Our accountants see invoices, never your data. Each is bound by contract and acts on our instruction alone. Information reaches the authorities only when the law compels it.
How long anything is kept
Once your files are back with you, the working copies stay in locked storage a further thirty days, in case something has to be revisited, and are then destroyed securely. Where a device is neither paid for nor collected within that same window, our Terms set out what happens. Enquiry and case records run to six years, as tax, legal and warranty obligations require, and go afterwards.
The rights UK GDPR gives you
UK GDPR gives you the usual set of rights and all of them apply here: a subject access request for a copy of what we hold, plus rectification, erasure, restriction, objection and portability. Raise one by phone, or in writing to the address above, and a reply is due inside a calendar month. Not satisfied with it? The ICO at ico.org.uk will hear a complaint, although letting us fix it is usually quicker.
Keeping the device itself safe
Your device is tagged with one case reference the moment it books in, and keeps it until it ships back. Storage is locked, and only the engineers on the job go near it. Recovered files leave on new media; the copies here are erased to the timetable above. Should a breach ever put your rights in danger, notification reaches the ICO inside 72 hours, and you hear from us just as fast, in plain English.
Also worth a look: Terms & Conditions (PDF) · Contact us.