Inside the lab · your files
Privacy. The plain version first, the formal one below.
In brief: we ask for the few details a recovery job cannot run without, and nothing beyond them. Whatever is on your media is seen by the engineer assigned to it and by nobody else in the building. None of it is ever sold, shared or used to market anything to you. Working copies here are securely wiped once thirty days have passed since delivery. Fuller detail follows below.
Who we are. Reading Data Recovery is the name this site trades under. The company is Easy Data Recovery Ltd: Northern Ireland registration NI625698, ICO registration ZC173784. Write about data protection to the address our parcels use — Oxford Data Recovery, John Eccles House, Oxford Science Park, Oxford, OX4 4GP — or ring 0800 6890668. Revised 18 August 2026.
What we keep on you, point by point
What an enquiry leaves behind. A call or a form submission puts four things on file — who you are, an email address, a telephone number, and your account of what the device is doing. Each earns its place: strip any one out and nobody can get back to you, judge the media, price the work or return it afterwards. We hold them to take the steps you asked for before a contract exists, and then to perform that contract.
The case file. Against your reference sit the emails and calls, the written quotation, your approval of it, and the postage trail at both ends. That file is how the job is run from day to day, and it is also the record examined when accounts and statutory returns are inspected. Two lawful bases apply: performance of the contract, and legal obligation.
The contents of your media. Files cannot be recovered without an engineer working with them, and that handling is the service you are buying. Beyond it, nothing happens. Folders are not browsed, disks are not examined out of interest, and what comes off the disk reaches you alone. Contract performance is the lawful basis. Where sensitive personal material turns up during a job it is recovered exactly as the rest of the disk is, looked at no harder, and kept no longer.
What we will never do
- No mailing list is kept, no newsletter goes out, and nobody buys or sells your details.
- Nothing is set here for advertising, and nothing follows you between sites. Where you go once the tab closes is not recorded, and is not our business.
- All of it stays in Britain. Nothing is sent abroad and nothing is subcontracted: your media, and every copy taken from it, remains inside our own lab.
Who else ever handles this
Only those a job cannot be done without, and the list is short. Hostinger provide the hosting, and the mailbox our contact form feeds into is theirs as well. The courier moves the parcel and sees nothing beyond the label. The accountants get invoices, never files. Each of them works under a contract that limits them to that one purpose, and your details reach a public authority only where the law compels it.
How long we keep anything
Your recovered data is delivered first. The copies made during the job then stay in access-controlled storage for thirty days, which exists so a second pass is possible if you want one, and are securely erased at the end of that window. A device left unpaid or uncollected past it is dealt with under the Terms. Paperwork from the enquiry and the case has a longer life — six years, set by tax, legal and warranty obligations — after which it too is securely disposed of.
The rights you can exercise
Nothing in this policy reduces what the law gives you. You may ask for a copy of the data held about you, which is a subject access request, and you may equally ask for it to be corrected, deleted, restricted or transferred, or object to what is done with it. Telephone, or write to the address above; a reply is due inside one calendar month. If our answer does not settle it, a complaint can be taken to the Information Commissioner; the route is ico.org.uk. Coming back to us a second time is usually quicker.
Your device while it is here
Booking in puts one case reference on your device, and it carries that reference until the day the parcel goes back out. In between it lives in access-controlled storage and is handled by the engineers on that case and by nobody else. Recovered data always goes home on fresh media, never on the drive it came from, and our copies are erased to the schedule set out above. Should an incident occur that put your rights at risk, the ICO would hear from us within 72 hours and so would you, in plain wording and without delay.
Next: Terms & Conditions (PDF) · Contact us.