Privacy Policy

Last updated: 29th December 2025

Privacy at a Glance

• We are an IT support company, not a managed service provider
• We process personal data to respond to enquiries and deliver contracted IT support services
• We only collect data that is necessary, relevant, and lawful
• We do not sell personal data or use it for unsolicited marketing
• We apply appropriate technical and organisational security measures
• You have rights under UK GDPR, including access, correction, and erasure
• Privacy enquiries: ciaran@nocturnait.co.uk

1. Who We Are

Nocturna IT Ltd ("Nocturna", "we", "us") is a UK-based IT support company providing out-of-hours and specialist technical support services to businesses, MSPs, and organisations.

We do not provide fully managed IT services. Our role is limited to providing technical support, troubleshooting, and assistance in accordance with client instructions.

We are committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Nocturna IT Ltd is the data controller for personal data processed in connection with:

• Enquiries, sales, and relationship management
• Contract management, billing, and compliance
• Operation and security of our website and internal systems

As data controller, we determine what personal data is collected, why it is collected, and how it is used.

2.1 Data Processor Role

When delivering IT support services, Nocturna IT Ltd may act as a data processor on behalf of its clients.

In these circumstances:

• The client remains the data controller
• We process personal data only on documented client instructions
• Processing is limited to what is necessary to provide the support services

Such processing is governed by the applicable service agreement and Data Processing Agreement (DPA), which take precedence over this Privacy Policy in the event of any conflict.

3. Personal Data We Collect

3.1 Data You Provide

• Name
• Business email address
• Telephone number
• Organisation name and job role
• Information contained in emails, support tickets, or communications

3.2 Data Collected Automatically

• IP address
• Browser and device information
• Pages visited and usage data

This data is used for security, performance, and website administration.

4. How We Use Personal Data

We use personal data to:

• Respond to enquiries and communications
• Deliver contracted IT support services
• Manage client relationships
• Maintain security and service quality
• Meet legal and regulatory obligations

We do not use personal data for automated decision-making, profiling, or unsolicited marketing.

5. Lawful Bases for Processing

We rely on the following lawful bases:

• Contract
• Legitimate interests
• Consent (where applicable)
• Legal obligation

6. Cookies

Our website uses cookies for essential functionality and performance monitoring. You can manage cookies through your browser settings.

7. Sharing Personal Data

We may share personal data with:

• Hosting and infrastructure providers
• Communication and support platforms
• Professional advisers
• Regulators or law enforcement where required by law

All third parties are subject to appropriate data protection obligations.

8. International Transfers

We do not routinely transfer personal data outside the UK. Where required, appropriate safeguards are applied.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data. While no system is completely secure, we maintain breach response procedures and comply with legal notification requirements.

10. Data Retention

• Enquiry data: up to 24 months
• Client records: contract term plus up to 6 years
• Legal and financial records: as required by law

11. Your Rights

You have rights to access, correct, erase, restrict, or object to processing, and the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

12. Children’s Data

Our services are provided to organisations only. Where we support education environments, children’s data is processed strictly as a data processor under client instruction.

13. Contact

Data Protection Contact: Ciaran Morrison
Email: ciaran@nocturnait.co.uk