Privacy Policy
How Sussex Technology Solutions collects, uses, and protects your personal information.
1. Introduction
Sussex Technology Solutions (“STS”, “we”, “us”) respects your privacy. This policy explains how we handle personal data when you visit our website, contact us, or use the customer portal.
We process personal data in accordance with UK GDPR and the Data Protection Act 2018.
2. Data controller
The data controller is Sussex Technology Solutions. To exercise your rights or ask a privacy question, please use our contact form and mark your enquiry as a privacy request.
3. Personal data we collect
Website contact enquiries
When you submit our contact form, we may collect:
- name and email address;
- phone number and company name (if provided);
- service or product interest;
- your message;
- IP address (for security and abuse prevention).
Customer portal
If you have a portal account, we process login credentials and account details necessary to authenticate you and provide portal services.
Cookies and similar technologies
See our Cookie Policy for details of cookies and how to manage consent.
4. How we use your data
- Respond to enquiries — lawful basis: legitimate interests (running our business and responding to prospects) or steps prior to a contract.
- Provide portal access — lawful basis: contract or legitimate interests.
- Security and fraud prevention — lawful basis: legitimate interests.
- Legal compliance — lawful basis: legal obligation where applicable.
We do not sell your personal data.
5. How long we keep data
Contact form submissions are retained for as long as needed to handle your enquiry and for a reasonable period afterwards for business records (typically up to 24 months unless a longer period is required for an ongoing relationship or legal obligation).
Portal account data is kept while your account is active and for a limited period after closure where required for audit or legal purposes.
6. Sharing your data
We may share data with:
- hosting and IT infrastructure providers who process data on our instructions;
- professional advisers where required (for example, lawyers or accountants);
- regulators or law enforcement when legally required.
Some third-party services (such as Google Fonts, if you consent to functional cookies) may receive technical data including your IP address. Their privacy policies apply to that processing.
7. International transfers
Where data is transferred outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR.
8. Your rights
Under UK GDPR you may have the right to:
- access the personal data we hold about you;
- request correction or erasure;
- restrict or object to certain processing;
- data portability where applicable;
- withdraw consent where processing is consent-based;
- lodge a complaint with the ICO (ico.org.uk).
9. Security
We apply appropriate technical and organisational measures to protect personal data, including access controls, secure hosting practices, and staff confidentiality obligations.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.