Privacy Policy

Who we are

This website is operated by The MacSmiths, a Mac repair business based at 489 Hackney Road, London E2 9ED. The owner and sole practitioner is Paul Davis. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.

We are registered with the Information Commissioner's Office (ICO). If you have any questions about this policy or how we handle your personal data, contact us using the details at the bottom of this page.

What personal data we collect

When you contact us or bring your Mac in for repair, we may collect the following information:

• Your name and contact details (phone number, email address)
• The make, model, and serial number of your Mac
• A description of the fault or issue you have reported
• Details of the repair work carried out and parts used
• Payment information (processed securely, we do not store card details)

If you visit our website, we may also collect analytics data about how you use the site. See the Cookie Policy for details.

Why we collect your data and our lawful basis

We collect and use your personal data for the following purposes, each with its corresponding lawful basis under UK GDPR Article 6:

• To carry out your repair, lawful basis: performance of a contract (Article 6(1)(b))
• To contact you about your repair or quote, lawful basis: performance of a contract (Article 6(1)(b))
• To comply with our legal obligations (e.g. tax records), lawful basis: legal obligation (Article 6(1)(c))
• To keep records of repairs carried out, lawful basis: legitimate interests (Article 6(1)(f))

We do not use your personal data for marketing purposes without your explicit consent. We do not sell your data to any third party.

How long we keep your data

We retain repair records and contact details for a period of six years following the completion of your repair. This is in line with standard UK business record-keeping requirements under the Limitation Act 1980. After this period, your data is securely deleted.

Who we share your data with

We do not sell, trade, or otherwise transfer your personal data to third parties. In limited circumstances, we may share your data with:

• Payment processors, solely for the purpose of processing your payment
• HMRC or other statutory bodies where required by law

Any third party we share data with is required to handle it in accordance with UK data protection law.

Your rights under UK GDPR

Under the UK GDPR and the Data (Use and Access) Act 2025, you have the following rights in relation to your personal data:

• Right of access, you can request a copy of the personal data we hold about you
• Right to rectification, you can ask us to correct inaccurate data
• Right to erasure, you can ask us to delete your data in certain circumstances
• Right to restrict processing, you can ask us to limit how we use your data
• Right to data portability, you can request your data in a portable format
• Right to object, you can object to processing based on legitimate interests

To exercise any of these rights, contact us using the details below. We will respond within one calendar month as required by UK GDPR. From 19 June 2026, we also operate a formal data protection complaints process in line with the Data (Use and Access) Act 2025.

Complaints

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern directly before you contact the ICO.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top.