We realise you are entrusting us with one or more drives that may hold many years’ worth of your life, along with your name and phone number to speak to you about it. The information below outlines specifically what data we collect, why, how long we retain it and what you may request from us.
Last updated 6 October 2026.
Your contact details: name, email address, telephone number, return postage address (if we are posting a device back). This contact information comes to us via the online diagnostic process, the contact form, email or telephone.
The contents of your device will all be read by our recovery process as we can’t determine which areas contain your files prior to starting. We are not browsing your content, creating an index, or using your content in any way but to return it back to you.
| Quoting, and doing the recovery | To perform our contract with you |
| Payment and accounting records | Legal obligation |
| Website analytics | Your consent — see cookies below |
| Defending a legal claim | Our legitimate interests |
If your device contains health records or any form of special category data then the basis for this recovery would be either the establishment or defence of legal claims or your explicit consent.
The recovery is done in-house. Your device will never be sent to a partner laboratory and your device’s content will never be transferred to another third party. Both your device and its contents remain within the United Kingdom.
There are four suppliers who need to access some of our data: our web-site hosting supplier, courier services that provide tracked returns (just name and address); payment provider and accountants; and Google Analytics if you have accepted their tracking. We neither sell any data nor transfer it for advertising purposes. We will only pass data when required by law.
Under the terms of the UK addendum to the standard contractual clauses, the Google analytics data may be processed outside of the UK, but nothing else will leave the country.
| Recovered data on our systems | Wiped 30 days after you confirm you have it, or sooner on request |
| Enquiries that do not become jobs | 12 months |
| Job records and invoices | 6 years — the limitation period, and HMRC's requirement |
| Analytics | 14 months |
You can request that we provide you with your personal information, correct or delete it, request that we temporarily cease from further processing, transfer your information to another service provider, express objections regarding how your data are being used by us due to our legitimate business interest or withdraw your consent at any time.
Please write to Oxford Data Recovery, John Eccles House, Oxford Science Park, Robert Robinson Avenue, Littlemore, Oxford, OX4 4GP or telephone 01865 593000. All requests are responded to within one month and there is no charge to make such a request.
Let us know first if we have made an error so that we can correct this. Alternatively, you may wish to contact the Information Commissioner’s Office by visiting ico.org.uk/make-a-complaint or by calling 0303 123 1113.
None of our cookies are set until you choose. The banner will ask you once, and your answer will be remembered using a single entry stored on your own device.
Accepting the cookie will allow Google Analytics to tell us which pages visitors view and how they reached our site. Declining will mean the script is never requested: no load, no reporting. It will also never be used to find out who you are.
Oxford Data Recovery is a trading name for Easy Data Recovery Ltd, a company incorporated in Northern Ireland (NI625698) based at John Eccles House, Oxford Science Park, Robert Robinson Avenue, Littlemore, Oxford, OX4 4GP. The company is registered as the data controller with the Information Commissioner’s Office (ICO) under registration number ZC173784.
We make no automated decisions about you; each quote is generated by an engineer who has actually viewed your device. You don’t need to provide us with your contact information unless you wish us to quote, recover or return something from your device. If this notice changes, the date at the top will change too.