PRIVACY POLICY
ConstructPC Ltd
Last updated: 01/07/2026
1. INTRODUCTION
ConstructPC Ltd respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, submit an enquiry, request a quote, purchase goods or services, contact us for support, submit a complaint, use our Ready-To-Go Services, or provide a device to us for diagnostics, maintenance, upgrade or repair work.
This policy should be read alongside our Terms and Conditions, Returns and Warranty Policy, Cookie Policy and Complaints Policy.
2. DATA CONTROLLER AND COMPANY DETAILS
ConstructPC Ltd is the data controller responsible for the personal data described in this Privacy Policy.
Company name: ConstructPC Ltd
Company number: 17206476
Registered office: 33 Wildings Grove, Davenham, Northwich, Cheshire, CW9 8SR, United Kingdom
ICO registration: ConstructPC Ltd is registered as a data controller with the Information Commissioner’s Office under reference ZC162970.
Primary privacy contact: privacy@constructpc.co.uk
General enquiries: info@constructpc.co.uk
Sales and build quotes: sales@constructpc.co.uk
Support, complaints and faults: support@constructpc.co.uk
3. PERSONAL DATA WE MAY COLLECT
We may collect, use, store and share different types of personal data depending on how you interact with ConstructPC.
3.1 Identity Data
This may include your name, business name, account name, order name, invoice name, or social media profile name where you contact us through social platforms.
3.2 Contact Data
This may include your email address, telephone number, billing address, delivery address, collection address, handover location, or other contact details you provide.
3.3 Order, Quote and Transaction Data
This may include order numbers, invoice numbers, quote references, order history, itemised products or services purchased, payment status, refund status, delivery method, collection method and service history.
We do not store full payment card numbers. Payments are handled by third-party payment providers.
3.4 Enquiry and Form Data
This may include information submitted through website forms, including Build My PC enquiries, Fast-Track route enquiries, bespoke build planner submissions, Upgrades & Repairs enquiries, Ready-To-Go Service intake forms, contact forms and complaint forms.
This may include device type, intended use, budget range, preferred specification, fault descriptions, main reason for booking, service suitability confirmations, backup confirmations and other information you choose to provide.
3.5 Technical and Website Usage Data
This may include IP address, browser type and version, time zone, device type, operating system, cookie identifiers, website interaction data, pages visited, referring links and other technical information collected by our website platform and analytics tools where permitted.
3.6 Device, Diagnostic and Workshop Data
If you provide a desktop PC, laptop, component or other item to ConstructPC for diagnostics, maintenance, upgrade, repair or support, we may record information about the device and work carried out.
This may include device type, make/model where provided, serial numbers, component details, fault descriptions, diagnostic notes, benchmark or test results, temperatures, error messages, BIOS/firmware information, operating system information, driver information, storage health information and service outcome notes.
3.7 Visual Records
We may take photographs or videos of devices, components, serial numbers, packaging, external condition, internal layouts, build progress, completed work, courier packaging or handover condition.
These records may be used for quality control, dispute resolution, insurance, courier evidence, fraud prevention, warranty handling and internal service records.
We will not publish identifiable customer information, addresses, serial numbers or private personal data in public marketing materials without appropriate permission.
3.8 Communication Data
This may include emails, form submissions, social media messages, complaint correspondence, support messages, call notes, appointment or handover arrangements and other records of communication with ConstructPC.
3.9 Financial and Accounting Data
This may include invoice records, payment references, refund records, payment provider transaction references, accounting records and information needed for tax, bookkeeping and business administration.
3.10 Marketing and Social Media Data
This may include your marketing preferences, newsletter or update preferences if you sign up to them, and information you provide when interacting with ConstructPC on platforms such as Facebook, Instagram, Google Business Profile or other social platforms.
4. SPECIAL CATEGORY DATA
ConstructPC does not intentionally collect special category data, such as health information, ethnicity, religion, political opinions or biometric data.
Please avoid including unnecessary sensitive personal information in enquiry forms, support requests, complaint forms, device notes or messages.
If you choose to provide sensitive information that is not needed for the service, we may delete it where appropriate or avoid using it unless there is a lawful reason to retain it.
5. CHILDREN’S DATA
ConstructPC is not directed at children and does not knowingly provide services directly to children without appropriate adult involvement.
If a parent or guardian contacts us on behalf of a child or young person, we will only process the information needed to respond to the enquiry, provide the service or meet our legal obligations.
6. HOW WE COLLECT PERSONAL DATA
We may collect personal data in the following ways:
- directly from you when you complete a form, request a quote, place an order, contact us, submit a complaint or provide a device for service;
- through our website and cookies when you browse or interact with our site;
- through payment, checkout, invoice and e-commerce systems;
- through communication by email, phone, social media or messaging;
- through diagnostic and workshop activity when working on a device you provide;
- through photographs, videos and condition records created during collection, handover, delivery, service or support;
- through third-party service providers where necessary, such as payment processors, couriers, website platforms, email services or warranty/manufacturer partners.
7. DEVICE DATA AND PERSONAL FILES
When working on a device, we may need to view technical information, system settings, event logs, device status, storage health, update history, driver status, temperature data or other diagnostic information.
We do not intentionally access personal files, photographs, documents, emails, browsing history or private content unless it is necessary for the agreed service, you have specifically asked us to access it, or it is unavoidable while diagnosing or repairing a fault.
You should not provide passwords, BitLocker recovery keys, Microsoft account details, banking details, private documents or other sensitive information through website forms. If access credentials are genuinely needed, we will discuss the safest practical method with you.
You are responsible for backing up important files, photos, documents, software licences, recovery keys, passwords and settings before submitting any device for diagnostics, cleaning, upgrade, repair or software work.
8. PURPOSES AND LAWFUL BASES FOR PROCESSING
We only use personal data where we have a lawful basis to do so. The main lawful bases we rely on are contract, legal obligation, legitimate interests and consent.
8.1 Contract
We process personal data where it is necessary to take steps before entering into a contract with you or to perform a contract with you.
This includes:
- responding to build, upgrade, repair, shop or service enquiries;
- preparing quotes and specifications;
- processing orders and invoices;
- arranging payment, collection, handover, delivery or returns;
- carrying out custom builds, upgrades, diagnostics, repairs and Ready-To-Go Services;
- providing support and aftercare;
- handling refunds, warranty claims and manufacturer RMA support.
8.2 Legal Obligation
We process personal data where necessary to comply with legal obligations.
This includes:
- keeping business, accounting, tax and financial records;
- responding to valid legal or regulatory requests;
- maintaining appropriate records for consumer rights, complaints, returns and refunds;
- complying with data protection law.
8.3 Legitimate Interests
We process personal data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
This includes:
- managing customer enquiries and support;
- maintaining service and workmanship records;
- keeping diagnostic notes and device records for warranty and dispute-resolution purposes;
- investigating complaints, damage reports, fraud concerns and chargebacks;
- improving our website, services and customer experience;
- maintaining website and business security;
- keeping records of collection, handover and delivery;
- using photographs or videos for quality control, evidence and internal records;
- protecting ConstructPC against legal claims or disputes.
8.4 Consent
We rely on consent where required, including for:
- non-essential cookies or analytics where enabled through the cookie banner;
- direct marketing emails where you have opted in;
- publication of identifiable customer testimonials, images, case studies or marketing content where consent is required;
- any other situation where we specifically ask for your consent.
You can withdraw consent at any time where processing is based on consent.
9. PAYMENT DATA AND FINANCE PROVIDERS
Payments may be processed by third-party providers such as Stripe, PayPal, Klarna, card providers, mobile wallet providers or bank transfer systems.
ConstructPC does not store full payment card details. Payment providers process payment and finance information under their own terms and privacy notices.
Where payment options such as Klarna, PayPal Pay in 3 or PayPal Credit are available, eligibility, approval, affordability checks, fraud checks and finance decisions are handled by the relevant payment or finance provider. ConstructPC does not control those decisions.
10. WHO WE SHARE PERSONAL DATA WITH
We do not sell your personal data.
We may share relevant personal data with trusted third parties where necessary to operate the business, provide services or meet legal obligations. This may include:
- website, hosting and e-commerce platform providers, including Squarespace;
- email and cloud service providers, including Google Workspace;
- payment providers, including Stripe, PayPal, Klarna and card processors;
- accounting, bookkeeping, tax, legal, insurance and professional advisers;
- couriers, delivery partners and logistics providers;
- hardware manufacturers, suppliers, distributors and warranty/RMA teams;
- IT, security, analytics and technical service providers;
- law enforcement, regulators, courts, HMRC, Companies House, the ICO or other authorities where legally required;
- social media or review platforms where you choose to interact with ConstructPC through those platforms.
We only share the information needed for the relevant purpose.
11. SOCIAL MEDIA, REVIEWS AND PUBLIC CONTENT
If you interact with ConstructPC through social media, review platforms or public business profiles, the platform may process your data under its own privacy terms.
If you leave a public review, comment or message on a third-party platform, that content may be visible to others depending on the platform settings.
We may ask customers for feedback or reviews after a genuine purchase or service. We do not ask customers to leave false reviews and we do not publish private customer information without appropriate permission.
If we want to use identifiable customer images, names, testimonials, build photos or case studies in marketing, we will seek appropriate permission where required.
12. COOKIES
Our website uses cookies and similar technologies.
Essential cookies may be needed for the website to work properly, including security, checkout, basket and platform functionality.
Non-essential analytics or performance cookies are used only where permitted by your cookie choices and the settings available through our website platform.
More information is available in our Cookie Policy.
13. INTERNATIONAL TRANSFERS
Some of our service providers may process personal data outside the United Kingdom. This may include website, email, cloud, payment, analytics or platform providers with systems in the United States, the European Economic Area or other locations.
Where personal data is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are in place, such as adequacy arrangements, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, Standard Contractual Clauses, or other transfer mechanisms recognised under UK data protection law where applicable.
14. DATA RETENTION
We keep personal data only for as long as necessary for the purpose it was collected, including business administration, customer support, warranty handling, legal, accounting, tax, insurance and dispute-resolution purposes.
Typical retention periods include:
- financial, tax, invoice and accounting records: normally kept for at least 6 years;
- custom build records, component information and support records: normally kept for the relevant support/warranty period and for a reasonable period afterwards where needed for legal or dispute-resolution purposes;
- Ready-To-Go Service, upgrade, repair and diagnostic records: normally kept for the relevant workmanship guarantee period and for a reasonable period afterwards;
- complaint and dispute records: kept for as long as reasonably necessary for complaint handling, legal protection, insurance and limitation purposes;
- enquiry records where no order is placed: normally kept for a shorter period unless needed for ongoing communication, future quote reference, legal protection or business records;
- marketing consent records: kept while you remain subscribed or as needed to record your preferences;
- cookie consent records: kept in accordance with our website platform settings and legal requirements.
We may retain anonymised information that no longer identifies you.
15. DATA SECURITY
We use reasonable technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure.
This may include password-protected accounts, access controls, secure cloud services, secure payment providers, device security, account-level permissions and limiting access to personal data to those with a genuine business need.
No website, email system, cloud platform or digital service can be guaranteed as completely secure. If we become aware of a personal data breach that creates a risk to individuals, we will assess it and take appropriate action in line with data protection law.
16. YOUR DATA PROTECTION RIGHTS
Under UK data protection law, you may have the following rights:
- right of access: to request a copy of personal data we hold about you;
- right to rectification: to ask us to correct inaccurate or incomplete data;
- right to erasure: to ask us to delete personal data in certain circumstances;
- right to restriction: to ask us to restrict processing in certain circumstances;
- right to object: to object to certain types of processing, including some processing based on legitimate interests;
- right to data portability: to request certain data in a structured, commonly used and machine-readable format;
- right to withdraw consent: where processing is based on consent;
- right to complain to the Information Commissioner’s Office.
These rights are not absolute and may depend on the circumstances. For example, we may need to retain certain records for legal, accounting, warranty, dispute-resolution or fraud-prevention purposes.
17. HOW TO EXERCISE YOUR RIGHTS
To exercise a data protection right, contact:
Please provide enough information for us to identify you and understand your request.
We may need to verify your identity before responding. We aim to respond to valid rights requests within one calendar month. If a request is complex or you have made multiple requests, we may extend the response period where permitted by law and will explain this to you.
18. DIRECT MARKETING
We will only send direct marketing emails where we have a lawful basis to do so.
If you subscribe to updates, newsletters, offers or marketing emails, you can unsubscribe or ask us to stop sending marketing communications.
We may still send non-marketing service messages, such as order updates, quote responses, invoice communications, service updates, warranty communications or important policy notices.
19. AUTOMATED DECISION-MAKING
ConstructPC does not use personal data for automated decision-making that produces legal or similarly significant effects.
Payment and finance providers such as Klarna, PayPal or card processors may use automated systems for fraud prevention, eligibility checks, affordability checks or credit decisions. Those providers are responsible for their own processing and privacy notices.
20. LINKS TO THIRD-PARTY WEBSITES
Our website may contain links to third-party websites, platforms, payment providers, social media pages, review platforms or manufacturer websites.
We are not responsible for the privacy practices of third-party websites. You should review their privacy notices separately.
21. COMPLAINTS TO THE ICO
If you are unhappy with how we handle your personal data, please contact us first at privacy@constructpc.co.uk so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection matters.
Website: www.ico.org.uk
22. POLICY UPDATES
We may update this Privacy Policy from time to time to reflect changes in our website, services, business processes, suppliers, legal requirements or data protection practices.
The latest version will be published on our website.