Privacy Policy

1. Who we are

PYCO RENEW LTD (company number 16774881), trading as ServerGear, is the data controller for personal data collected through this website and in the course of our business. Our registered facility is at Unit D13, Fieldhouse Industrial Estate, Rochdale OL12 0AA. We are registered with the Information Commissioner’s Office under reference ZC018901.

For any privacy question, contact us at [email protected] or +44 7908 749694.

2. Data we collect

When you contact us or request a valuation we collect the information you choose to give us, typically:

• Your name and the organisation you represent
• Business contact details — email address and telephone number
• Collection location or postcode
• Details of the equipment you are decommissioning
• Any other information included in your message or attached asset list

Our web server also records standard technical information — IP address, browser user agent, pages requested and timestamps — as part of normal operation and security logging.

3. Data found on equipment we receive

Equipment collected from customers frequently still contains data, which may include personal data belonging to your staff, customers or service users. Our position on this is deliberately narrow:

• We do not access, read, examine, index or copy the contents of any storage media.
• All media is sanitised to NIST SP 800-88 Rev.1, or physically destroyed, as described in our data sanitisation process.
• We record only device identifiers — make, model, serial number and capacity — for the purpose of issuing certificates and reconciling your asset register.
• Media that cannot be reliably sanitised is destroyed rather than resold.

Where we process such data we act as a processor on your behalf, under your instructions. A data processing agreement is available on request.

4. Why we process your data, and our lawful basis

• To respond to enquiries and prepare valuations — necessary for steps taken at your request prior to entering a contract.
• To perform our contract with you — arranging collection, processing equipment, issuing certificates and making payment.
• To meet legal obligations — waste transfer records, tax and accounting records, and duty-of-care documentation.
• For our legitimate interests — maintaining business records, securing our website, preventing fraud, and following up on enquiries you have made. We balance these against your rights, and you may object at any time.

5. How long we keep it

• Enquiries that do not lead to business: up to 24 months.
• Customer and transaction records: 6 years after the end of the relationship, for tax and legal purposes.
• Waste transfer notes and sanitisation certificates: 6 years, as required for duty-of-care compliance.
• Web server logs: up to 12 months.

6. Who we share it with

We do not sell personal data, and we do not share it for marketing purposes. We disclose it only to:

• Service providers acting on our instructions — hosting, email and IT support, bound by contract.
• Our accountants, auditors and professional advisers.
• Regulators and enforcement bodies, including the Environment Agency and HMRC, where legally required.

Data is stored within the UK or European Economic Area. Where any transfer outside that area is necessary, it is made under UK-approved safeguards.

7. Cookies

This website does not use advertising, profiling or third-party analytics cookies. A single session cookie may be set by your browser when you submit the valuation form, purely so that your entries can be restored if the form needs correcting. It contains no tracking identifier and expires when you close your browser.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Request erasure, where no legal obligation requires us to keep it
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent, where processing is based on consent

To exercise any of these, email [email protected]. We will respond within one month. If you are unhappy with our response you may complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

9. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted transmission, access controls limited to staff who need it, vetted personnel, CCTV coverage of our processing areas, and secure destruction of records at the end of their retention period.

10. Changes

We may update this policy from time to time. The current version is always published here with the date it last changed.