← Back
E
Evolve IT Support Ltd
Company No. 08726053

Privacy Notice

Last updated: May 2026

1. Who we are

Evolve IT Support Ltd (“Evolve IT”, “we”, “us”, “our”) is a private limited company registered in England and Wales (Company No. 08726053). Our registered office is Knowle House Farm, Reapsmoor, Buxton, Staffordshire, SK17 0LG.

We are the data controller for the personal information processed through this helpdesk portal. Where we process personal data on behalf of our business clients we act as a data processor under a separate Data Processing Agreement with that client.

To contact us about this notice or your data: hello@evolveitsupport.co.uk

2. What data we collect and why

We collect and use personal data for the purposes listed below. Our lawful basis under UK GDPR is shown in brackets.

CategoryExamplesLawful basis
Account & identityName, email address, job titleLegitimate interests / contract
AuthenticationHashed password, MFA secretContract
Support ticket contentSubject, description, messages, attachmentsContract / legitimate interests
Contact detailsPhone number, email address used when submitting a ticketContract
Usage dataLast login date/time, IP address (rate limiting only)Legitimate interests
CommunicationsEmails sent and received via the helpdeskContract

We do not collect special category data (health, biometric, financial account details, etc.) through this portal and ask that you do not include such information in support tickets.

3. How we use artificial intelligence

When a support ticket is submitted, we send the ticket subject and a portion of its description to Anthropic’s Claude API to automatically suggest a priority level and category. This helps us respond to urgent issues faster.

Anthropic processes this data as a sub-processor under their API terms. Ticket content sent to the API is not used to train Anthropic’s models under their enterprise API terms. You can read Anthropic’s privacy policy at anthropic.com/privacy.

AI-suggested priorities are always reviewed by a human technician and do not result in automated decisions with legal effect.

4. Who we share your data with

We share personal data only where necessary:

  • Anthropic (Claude API) — ticket subject and description for AI priority scoring (see section 3)
  • Email providers — SendGrid or Microsoft 365, used to send notification emails and receive support requests
  • Hetzner Online GmbH — our cloud hosting provider, servers located in the EU
  • Xero — where subscription billing is managed via Xero integration (client organisation data only)

We do not sell personal data or share it for advertising purposes.

5. Cookies

This portal uses one strictly necessary cookie to keep you signed in:

CookiePurposeDurationType
authjs.session-tokenKeeps you authenticated between page loads30 days (rolling)Strictly necessary

We do not use analytics, advertising, or tracking cookies. Because we only use strictly necessary cookies, we are not required to ask for your consent under the UK Privacy and Electronic Communications Regulations (PECR).

6. How long we keep your data

DataRetention period
Support tickets and comments3 years from ticket closure
User accounts (active)For the duration of your organisation's contract with us
User accounts (deactivated)12 months after deactivation, then deleted
Email logs12 months
Database backups10 most recent backups (rolling)

7. Your rights under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data where there is no legitimate reason to continue holding it
  • Restriction — ask us to restrict processing in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests

To exercise any of these rights, email us at hello@evolveitsupport.co.uk. We will respond within one calendar month.

If you are unhappy with how we handle your data you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Security

We protect personal data using industry-standard measures including encrypted connections (TLS), hashed passwords (bcrypt), signed authentication tokens, and access controls that limit which staff can see which data. Our servers are hosted in EU data centres operated by Hetzner.

9. Changes to this notice

We may update this notice from time to time. The “Last updated” date at the top will always reflect the most recent version. For significant changes we will notify users by email.

© 2026 Evolve IT Support Ltd · Company No. 08726053 · Registered in England and Wales