Legal pack v0.1 was reviewed without amendment and this notice is now in force. The scheduled retention job runs daily and currently operates in a reporting-only mode while its deletion behaviour is proved against live records.
Who is responsible for your information
Robert Campbell trading as RMC Device Repairs is the controller for this service. You can contact the service at repairs@rmcdevicerepairs.co.uk.
Mail-in service only — no walk-ins or public drop-offs. Do not post a device until your request has been accepted in writing and you have received the packing instructions.
Information collected by the request form
- Your name, email address and optional phone number.
- Device category, make and model, but not its serial number or IMEI.
- Your description of the fault, power state, impact or liquid exposure and prior repair.
- A battery-safety answer and a data-importance handling cue.
- The policy versions you accepted, a random submission token and an opaque website request reference. The token distinguishes separate form submissions and does not contain your customer, device or account details.
The form does not ask for a postal address, password, passcode, account credential, file or photo. Hosting and security providers may process limited technical information such as IP address, browser information and timestamps in operational logs, under their own retention settings.
Why the information is used
Email and optional photos
Resend is intended to send the owner notification and acknowledgement; replies go to the Fasthosts mailbox at repairs@rmcdevicerepairs.co.uk. You may reply with up to three useful photos, but should not include passwords, passcodes, private screens, personal documents or other sensitive information.
Manual RepairOS record
The website does not create a RepairOS booking or call a public repair API. Only after an accepted device physically arrives do I create the ordinary internal Book-In record manually. I copy only the contact details needed for the job, the unverified device description, your issue wording, the data-preference cue and the opaque website reference.
I do not copy credentials, raw form or email dumps, website technical logs, unrelated postal information, uploads, payment state, internal costs or website acceptance as RepairOS terms.
Credentials needed later for testing
If a specific functional test requires access, I request the minimum credential later through a safer channel, explain why it is needed and obtain your testing consent. Credentials are removed after the device is returned. Do not put credentials in the website form or an unsolicited email.
Service providers and transfers
The providers are Netlify for hosting and form submissions, Resend for transactional email, and Fasthosts for the reply mailbox and DNS. Google Analytics is not currently enabled and would only ever run after consent. Some of these providers process data outside the UK under their own published safeguards; if you want the current detail for a specific provider, ask and I will supply it.
How long information is kept
- Netlify form submissions: automatically removed after 30 days, including verified and spam submissions.
- Declined or abandoned request correspondence: removed after six months.
- Accepted repair, warranty and financial records: kept for the warranty period and then for as long as HMRC requires business records to be retained.
- Google Analytics event data: configured for two-month retention where the control is available.
- Access credentials requested later: removed after return of the device.
Analytics choice
The Google tag is not loaded and no Google request, cookie or cookieless ping is sent before you actively accept analytics. Rejecting analytics does not affect the website or repair service. Advertising storage and personalisation remain denied, and Google Signals and user IDs are not used. See the cookie notice for the controls.
Your data-protection rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or portability, and may withdraw analytics consent at any time. Email repairs@rmcdevicerepairs.co.uk with enough information to identify the relevant request. I may need to verify your identity without collecting more information than necessary.
You can also complain to the Information Commissioner’s Office. Contacting me first may allow me to resolve the issue more quickly, but it is not a requirement.
Changes to this notice
The live notice will show its effective date and policy version. A material change affecting an existing repair will be supplied in an appropriate durable form rather than silently replacing the terms already agreed.