This privacy notice explains how ION IT Limited collects and uses personal information when you contact us, buy or use our services, visit this website or interact with systems that we operate.
Who we are
ION IT Limited is an internet service provider and IT services business based at Office 7, 180 Attercliffe Road, Sheffield, S4 7WZ. For data-protection enquiries, email info [at] ionitltd [dot] net or write to the address above.
Information we may collect
- Names, job titles, business names and contact details.
- Account, service, billing and payment-status information. Card details are handled by payment providers and are not intentionally stored by ION IT.
- Technical information needed to provide support, including device details, IP addresses, domain and DNS records, account identifiers, configuration details and service logs.
- Communications with us, support notes and records of work completed.
- Security and audit information generated by systems we manage or protect.
Why we use personal information
We use information to quote for, supply, administer, secure and support our services; communicate about incidents, renewals and planned work; issue invoices and maintain financial records; prevent abuse and fraud; meet legal and regulatory duties; and establish, exercise or defend legal claims.
Our lawful bases
Depending on the circumstances, processing is based on performance of a contract or steps requested before a contract, our legitimate interests in operating and protecting our business and services, compliance with legal obligations, or consent where the law requires it. We do not treat use of this website as blanket consent to unrelated processing.
When we act as processor
For some managed IT, hosting, backup, email or security services, our customer determines why personal data is processed and ION IT processes it on the customer's instructions. In that situation the customer is normally the controller and the relevant service agreement or data-processing terms apply.
Sharing information
We do not sell personal information. We may share the minimum necessary information with infrastructure, connectivity, domain-registry, software, cloud, payment, professional-adviser and support suppliers used to deliver our services. We may also disclose information where required by law, court order, a competent authority, or to protect systems and users from abuse.
International transfers
Some suppliers may process information outside the UK. Where UK data-protection law requires safeguards, we use an appropriate lawful transfer mechanism and assess the supplier and service involved.
Retention
We retain information only for as long as reasonably needed for the purpose collected, contractual and support requirements, security, backup cycles, and legal, tax or accounting obligations. Retention varies by record type. Data in backups may remain until the relevant backup set expires and is overwritten.
Security
We use proportionate technical and organisational measures including access control, authentication, patching, endpoint and network protection, encryption where appropriate, logging, backup and supplier controls. No internet-connected system can be guaranteed completely secure.
Your rights
Subject to the law and any applicable exemptions, you may ask for access to your personal data, correction, erasure, restriction, portability, or object to certain processing. You may also withdraw consent where processing relies on consent. We may need to verify your identity before acting.
Complaints
Please raise a data-protection concern with us first at info [at] ionitltd [dot] net. We will acknowledge a data-protection complaint within 30 days, investigate it without undue delay, keep you informed where appropriate and explain the outcome of our investigation. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
This website
This version of the site is static and does not use client-side scripts, advertising trackers or analytics cookies. Standard web-server logs may record information such as IP address, request, timestamp, response status and user agent for security, diagnosis and service operation.