Privacy Policy
This policy explains how we use personal information when you contact us, buy from us, use our services or visit our website and shop.
Who we are
Kuda PC is the trading name of Simon Freeburn, a sole trader and the data controller responsible for the information described in this policy. “We”, “us” and “our” mean Kuda PC.
Contact: simon@kudapc.co.uk
Postal address: 38 Kerr Street, Glasgow, G40 2QP.
Information we collect
We collect the information you give us, including contact details, account information, messages, orders and payment records. For payment plans, we also request a passport or driving licence and proof of address.
We receive relevant information from your devices during agreed work, our repair partner, solicitors and payment providers. This includes device details, repair history, diagnostics, updates and support records. Website information includes IP addresses, browser and device details, pages visited, visit dates and times, and cookie choices. Our shop cameras record CCTV images.
How we use your information
Orders and enquiries
We use your details to answer enquiries, prepare quotations, manage orders and accounts, take payments and provide support. RBS handles bank transfers, PayPal POS handles card payments, and FreeAgent supports invoicing and bookkeeping. We send necessary messages about your orders, repairs and payment arrangements.
Payment plans
We use identity and address documents to verify your details and administer your plan. We share necessary information with Jonathan Paul Solicitors for review, administration, legal advice and any recovery work. They are responsible for their own legal records, as explained in the separate privacy notice supplied with your plan.
Repairs
For laptop, tablet, phone and general electronics repairs, we share the necessary contact, device and job details with Ultrabytes and Kuda Ltd, our repair subcontractor, with your express permission. Your contract remains with us. Device content is accessed only as needed for the agreed work. The company is responsible for its own legal and accounting records.
Device monitoring and remote support
Where agreed, we use Level.io to monitor device health, collect diagnostics and install updates in the background. Interactive remote access is for business customers only, with approval from you or an authorised contact for each session. We keep records of access and work completed. When handling personal data on a business customer’s instructions, we act under our data-processing agreement.
Customer accounts and email marketing
Wix hosts our website and customer accounts. Promotional emails require your separate consent; declining does not affect your service. Unsubscribe using the option in each email, by replying or by contacting us.
CCTV
We operate CCTV at 134 Sword Street, Glasgow, G31 1SF to protect people and property and investigate incidents. Only the business owner can access the system. Footage is stored locally on an offline recorder, without audio.
Footage is overwritten after 30 days, except for extracts needed for an investigation, claim or legal duty. Necessary footage may be shared lawfully with police, insurers, legal advisers or people exercising information rights, while protecting other people’s privacy.
Our legal reasons for using information
Contract: to arrange and provide purchases, repairs, payment plans and agreed support, including requested quotations.
Legitimate interests: to verify identity, prevent fraud, maintain useful repair and work records, protect people and systems, operate CCTV, handle complaints and manage legal claims. We balance these needs against your privacy rights. This also covers necessary contact with business customers’ representatives.
Legal obligation: to retain customer invoices and payment records as required by tax law, and comply with other legal requirements.
Consent: for promotional emails and optional functional, marketing and analytics cookies. You can withdraw consent at any time.
If you do not provide information needed for a service or payment plan, we may be unable to offer it. Contact us to discuss alternative identity checks.
Sharing and protecting information
We also use Microsoft 365 for email and document storage, and Google Analytics for website statistics with your consent. Providers process information as needed to deliver their services.
We share necessary information with contractors, warranty providers, professional advisers, insurers, authorities or courts where there is a lawful reason.
We protect information with access controls and appropriate security measures. Some providers process data outside the UK, including in the United States. Transfers use UK adequacy arrangements or approved contractual safeguards where required, with additional protections where needed. Contact us for details or copies.
How long we keep information
Enquiries and unsuccessful applications. We keep these for 12 months after closure or last contact. ID documents follow the shorter period below.
ID and proof of address. We delete these when the final payment has cleared, or earlier if no longer needed. If a plan does not proceed, we delete them within 30 days of closure.
Payment agreements and acceptance records. We keep these for six years after the plan ends. We retain a minimal verification record instead of unnecessary ID copies.
PC build, repair and support records. We keep these for six years after the purchase or last relevant repair or support work, and longer only where an active warranty, support arrangement or specific claim requires it.
Routine monitoring and diagnostics. We delete these when no longer needed. Level.io device records are removed when support ends, you request removal, or a device is retired or reported lost, broken or stolen. Necessary work or incident evidence is retained separately.
Temporary device copies and credentials. We delete these as soon as the work no longer needs them, normally within seven days of completion. Ongoing backups are agreed separately.
Customer invoices and payment records. We keep these for at least five years after the relevant 31 January tax-return filing deadline, and longer where tax rules or an ongoing enquiry require.
Marketing preferences. We keep these while your consent remains current, with review after two years without engagement. Minimal consent and opt-out records are kept to evidence and honour your choice.
We keep necessary information longer for a specific dispute, investigation or legal duty and review that need. We remove personal links from technical history when they are no longer needed.
Restricted backup and recovery copies are retained only until they expire under the relevant provider’s retention schedule.
Your rights and complaints
Depending on the circumstances, you can ask to access, correct or delete your information, restrict its use, or receive eligible information in a portable form. You can withdraw consent at any time without affecting earlier lawful use.
Your right to object: You can object to direct marketing at any time, and to processing based on legitimate interests for reasons relating to your circumstances.
Contact us using the details at the start of this policy to exercise your rights or raise a complaint. We normally answer rights requests within one month, subject to lawful extensions.
You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Policy updates
We update this policy when our practices change and bring significant changes to your attention where required.
Cookie Policy
This policy explains the cookies and similar technologies used on our website and how to control them.
What cookies do
Cookies store small amounts of information on your device. They help the website work, remember choices, measure website use and support advertising. This policy also covers similar technologies, such as local storage and tracking tags.
Essential cookies
Wix uses essential cookies for website security, account login and remembering privacy choices. These are always enabled and cannot be switched off through the cookie settings.
Functional cookies
These remember your choices and preferences to personalise your website experience. They are used only with your consent.
Marketing cookies
These measure advertising performance and help show advertisements relevant to your interests. They are used only with your consent.
Analytics cookies
With your consent, Google Analytics collects page visits, interactions and device or browser details to help us understand website use and improve the site.
Your choices
Only essential cookies are enabled before you make a choice. Functional, marketing and analytics cookies are off unless you switch them on. You can accept or reject each optional category in Advanced Cookie Settings and change or withdraw your consent at any time. Save your preferences after making changes. Rejecting optional cookies does not prevent you from using the main website services.
You can also block or delete cookies in your browser, although blocking essential cookies may affect features such as account login.
Wix cookie lifetimes
Wix publishes the following standard platform cookies. Cookies are set according to the features used. The lifetimes below are Wix's defaults; session cookies last for the browser session.
Session cookies. XSRF-TOKEN detects fraudulent requests, hs supports legacy Hive security, and TS* detects attacks. The server-session-bind and client-session-bind cookies protect API requests, oAuthState identifies the session, and sec-fetch-unsupported identifies browser security limitations.
24-hour cookies. SSR-caching improves page rendering performance, and bSession measures platform effectiveness.
Six-month cookies. _wixAB3|* supports platform experiments.
12-month cookies. svSession and wixSession support site security and operation, while fedops.logger.sessionId monitors session errors.
Further details: Wix cookie information.
Google Analytics cookies and retention
Google Analytics cookies _ga and _ga_<container-id> distinguish visitors and maintain session information. Google's default expiry is two years, refreshed on return visits; browsers may shorten this.
We use Google's two-month retention setting for user- and event-level Analytics data. New activity may restart the period for user identifiers. Expired data is deleted through Google's monthly process. Standard aggregated reports may remain longer.
Changes and contact
We update this policy when our use of cookies changes and ask for fresh consent where required. For our contact details, information about data sharing and your privacy rights, see the Privacy Policy above.
These policies were last updated 10 October 2026