Privacy Policy

Encompass Care Services Ltd ("we", "us") is a company registered in England and Wales with its office at 307 Euston Rd, London, United Kingdom, NW1 3AD. We are the data controller for personal data collected through this website and through our commercial relationships.

Where we deliver managed IT services, we frequently act as a data processor on behalf of client organisations. In those cases the client remains the controller and our obligations are set out in a separate data processing agreement.

• Contact data — name, organisation, email address, telephone number and the content of your enquiry.
• Service data — user accounts, device inventories, support ticket history and technical logs generated while delivering services.
• Technical data — IP address, browser type, device type, referring page and pages viewed, collected through server logs and optional analytics cookies.
• Commercial data — billing contacts, purchase orders, invoices and payment records.

• To respond to enquiries and prepare proposals — legitimate interests in conducting business correspondence.
• To deliver contracted IT services and support — performance of a contract.
• To maintain the security and integrity of systems we manage — legitimate interests and, where applicable, legal obligation.
• To keep accounting and tax records — legal obligation.
• To measure website usage through optional analytics cookies — consent, which you may withdraw at any time.

We do not sell personal data. We share it only with suppliers who help us operate: cloud hosting and email providers, remote monitoring and support platforms, backup providers, accounting software and professional advisers. Each is bound by contractual confidentiality and data protection terms.

We may disclose data where required by law, regulation, court order or to protect the rights, property or safety of our clients or ourselves.

Data is stored primarily in the United Kingdom and the European Economic Area. Where a supplier processes data outside those regions, transfers are protected by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

Enquiry correspondence is kept for up to 24 months from the last contact. Contractual, billing and tax records are kept for seven years. Support ticket and technical log data is retained for the duration of the service agreement plus twelve months, unless a client instructs earlier deletion.

We apply multi-factor authentication, least-privilege access control, endpoint protection, encryption in transit and at rest, immutable backups and documented incident response procedures. Access to client environments is logged and reviewed.

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent where processing relies on it.

To exercise any right, email info@encompass-care.com. We respond within one calendar month. If you are dissatisfied you may complain to the Information Commissioner's Office at ico.org.uk.

We review this notice at least annually and whenever our processing changes materially. The date at the top of this page reflects the most recent revision.