The lab · your data
Privacy. Plain words before the legal ones.
The short of it: nothing is collected beyond what the job calls for, whatever is on your device stays between you and the engineer, none of it goes to a buyer, and our working copies are wiped thirty days from the moment your files land back with you. Fuller wording is below.
Who we are. The name on this site is Cardiff Data Recovery; the company behind it is Easy Data Recovery Ltd, company number NI625698, a Northern Ireland registration. We sit on the ICO register as ZC173784. Data protection post should be sent to the lab that takes in our parcels: Castlemead, Lower Castle Street, Bristol, BS1 3AG, addressed to Bristol Data Recovery, which is the name on the building. Our line is 0800 6890668. Last revised 18 August 2026.
Everything we hold on you, item by item
Your enquiry. Ring us or send the form and we end up holding your name, a phone number, an email address and your account of what went wrong. Without all four we cannot reply to you, assess the device, quote for it or carry the job to a finish. Lawful basis: the steps you asked us to take ahead of a contract, and then that contract.
The case file. A reference number, the emails and letters, the quote, your approval, the despatch paperwork. It is what lets the job be carried out, and what keeps our accounts and our statutory duties fit for inspection. Lawful bases: contract, and legal obligation.
The contents of your device. No file comes back without an engineer's hands on it. We open only what the work makes necessary, no one reads your material out of curiosity, and whatever turns up on a disk goes back to you and nowhere else. The lawful basis is, again, performance of a contract. Special category material, if any is sitting there, gets the technical recovery you commissioned and nothing further.
Lines we do not cross
- There is no newsletter here and no mailing list, and nobody buys or is sold your details.
- This site sets no advertising or tracking cookie of any kind. Where you go after you leave is not our business.
- Neither your device nor your data leaves the country. All of the work happens in our own UK lab.
Who else is in the chain
Only those the job cannot proceed without. Form submissions arrive through the mail service of Hostinger, who host this site. A courier sees the box and its label. Invoices go to our accountants; files never do. Each is under contract, and none of them may do anything we have not asked of them. Nothing goes to any authority unless the law requires it.
The clock on everything we hold
Your files land with you first; the working copies then wait thirty days in locked storage — a margin, in case anything wants a second look — before secure destruction. Any device left unpaid or uncollected during that window is dealt with as the Terms describe. Paperwork from the enquiry and the case lasts six years, the period demanded by tax, legal and warranty obligations, and is deleted when that runs out.
What you can ask us for
You keep every statutory right in full. A copy of what we hold is yours for the asking — a subject access request — and alongside it sit rectification, erasure, restriction, portability and objection. Ring, or write to the address above; an answer is owed you within one calendar month. If that answer falls short, the Information Commissioner takes complaints at ico.org.uk, though raising it with us first is usually quicker.
Where your device sits while it is here
One case reference is written on your device as it books in and stays with it to the day it goes back in the post. It is kept locked up, and the only hands on it belong to the engineers running that case. What we recover goes out on fresh media; what we keep is wiped on the timetable given above. Should a breach ever threaten your rights, we would report it to the ICO inside 72 hours and tell you as well — quickly, and in plain English.
Where to go next: Terms & Conditions (PDF) · Contact us.