Privacy Policy
How Pavels Tech Heaven handles personal information, why, for how long, and what you can ask for.
1. Introduction
This policy explains what personal information Pavels Tech Heaven collects, why, and what you can do about it. It covers this website, pavelstechheaven.com, and the services provided to businesses and individuals in Fife, Edinburgh and the surrounding area.
We’ve tried to write it in plain English rather than legal language. If anything isn’t clear, get in touch and we’ll explain it.
2. Who controls your information
Pavels Tech Heaven is a sole trader business. The data controller is:
Pavels Kozemjakins, trading as Pavels Tech Heaven
34 Hope Street, Inverkeithing, KY11 1LW
For anything to do with privacy or your personal information, including exercising your rights, contact:
Our full business details are also on our Business Information page.
3. Information we may collect
When you get in touch through the website
Depending on which form you use, we may collect:
- Your name
- Your mobile number
- Your email address, where the form asks for it
- Your business name, where the form asks for it
- The town you’re in
- What you’re getting in touch about
- Whatever you tell us in the message
Not every form collects all of these. The Free Business Tech Check form, for example, doesn’t ask for an email address at all.
When you enquire about a home PC repair
We also ask what type of machine it is, and — if you know it — the make and model.
When we work together
If you go ahead with a service, we’ll hold records relating to that work: what was agreed, what it cost, correspondence between us, and notes about the work itself. Where the work involves your technology, that may include details about your setup that you’ve told us or that we’ve seen while carrying out agreed work.
We also keep basic bookkeeping records — date, invoice number, customer, service, amount, payment method and receipt references.
If you opt into marketing
We keep a record of that choice, including which channels you agreed to.
When you visit the website
Our hosting provider collects basic visitor information as part of running the website. If you accept analytics, we also use Google Analytics to understand how the site is used. More on this in section 12.
What we don’t ask for
Our forms aren’t designed to collect special-category personal information — things like health, ethnicity, religion or similar. Please don’t include unnecessary sensitive information in a message to us.
We also ask you not to send passwords, PINs, recovery codes, security keys or other login credentials through our enquiry forms or other ordinary contact channels. We don’t need them to answer an enquiry, and we don’t intentionally record them in our customer records. If access is genuinely required for a piece of work, we’ll arrange the appropriate method at the time.
4. How and why we use it
| What we use it for | Why we’re allowed to |
|---|---|
| Answering enquiries and general correspondence | Taking steps at your request before entering into a contract, where that applies. Otherwise, our legitimate interests in responding to people who contact us |
| Arranging and carrying out a Free Business Tech Check you’ve requested | Taking steps at your request before entering into a contract, where that applies. Otherwise, our legitimate interests in providing the service you asked for |
| Preparing a quote you’ve asked for | Taking steps at your request before entering a contract |
| Delivering services you’ve agreed to | Performing our contract with you, where you’re an individual or sole trader. Where you’re a company, our legitimate interests in dealing with you as our named contact |
| Administering jobs and keeping service records | Performing our contract with you, or our legitimate interests in running the business properly |
| Keeping accounting and tax records | Complying with our legal obligations |
| Protecting the website and our records | Our legitimate interests in keeping the business and its information secure |
| Handling complaints and dealing with legal claims | Our legitimate interests in investigating complaints properly and in establishing or defending legal claims |
| Sending you marketing | Your consent, where consent is required or where we’ve chosen to rely on it. In some business-to-business situations we may instead rely on our legitimate interests |
| Keeping do-not-contact records | Our legitimate interests in making sure we don’t contact you after you’ve asked us not to |
| Website analytics | Your consent |
Where we rely on legitimate interests, we’ve considered whether our interest is fair to you and doesn’t override your rights. You can object — see section 10.
5. Marketing
Getting in touch isn’t opting in. If you send us an enquiry, we’ll reply to it, arrange whatever you’ve asked for, and communicate with you about any work we do. That’s us providing the service you asked for — it isn’t marketing, and it doesn’t require your consent to marketing.
Marketing is separate and optional. Where our forms offer marketing, the choice is separate from the enquiry itself. Nothing is pre-ticked, and declining doesn’t stop you submitting the form or affect the service you get.
We ask about channels separately. We may contact you by email, text message, WhatsApp, phone or post. Where we ask for your consent, you choose which of those you’re happy with — agreeing to one doesn’t mean agreeing to all of them.
Business contacts. Where we contact businesses about our services, the rules that apply depend on the type of business and the method used. Whatever the basis, you can always tell us to stop.
Changing your mind. You can withdraw consent at any time, and you can object to direct marketing at any time. Just tell us and we’ll stop. We’ll keep the minimum information needed to make sure we don’t contact you again by mistake.
Social media. You don’t need to opt into anything to see our public social media posts.
6. Who may process or receive it
We use a small number of service providers to run the business and this website:
| Provider | What they do |
|---|---|
| IONOS | Website hosting and business email |
| Google Workspace | The business environment where we keep our customer records and bookkeeping, using Google Sheets and Google Drive |
| Google Analytics and Search Console | Website usage information, where you’ve accepted analytics, and information about how the site appears in search results |
| Revolut | Business banking and payments, including invoices and card payment links where used |
Website enquiry forms send your message to us by email. Where useful, we then copy contact and job details manually into our records in Google Workspace.
We may also disclose information where we’re required to by law, or where it’s necessary to establish or defend a legal claim.
7. International transfers
Some of the service providers we use may process personal information outside the UK.
Where that happens, appropriate safeguards required by UK data protection law are used — for example transfers to countries recognised as providing adequate protection, or contractual protections approved for international transfers.
Google services may involve processing outside the UK. This applies both to the Google Workspace environment where we keep our business records, and to Google Analytics where you’ve accepted analytics. Google provides data protection terms covering UK requirements, including transfer safeguards where they’re needed.
Revolut states that, because it provides an international service, personal information may be transferred outside the UK. Where information goes to a country without equivalent protection, Revolut states that it uses safeguards such as contracts containing appropriate data protection protections.
IONOS states that the visitor information collected by its Web Hosting service is anonymised as it’s collected, is not transferred to third countries, and is not passed to third parties.
If you’d like more information about the safeguards that apply to your information, email hello@pavelstechheaven.com.
8. How long we keep information
| What | How long |
|---|---|
| General enquiries that don’t lead anywhere | 12 months |
| Free Business Tech Check requests that don’t go ahead | 12 months |
| Tech Check reports and working notes | 12 months, where there’s no continuing customer relationship or legal reason to keep them |
| Quotes that aren’t accepted | 12 months |
| Customer and service records | 5 years after the work finishes |
| Home PC repair records | 5 years after the work finishes |
| Correspondence about completed work | 5 years after the last completed job, unless another legal rule requires longer |
| Accounting and tax records | For as long as HMRC’s record-keeping rules require |
| Marketing consent records | While we’re relying on the consent, and for a reasonable period afterwards so we can show what you agreed to |
| Do-not-contact records | The minimum information needed, for as long as necessary to stop unwanted marketing |
| Website visitor information collected by our hosting service | 8 weeks, based on IONOS’s current Web Hosting product information |
| Google Analytics data, where you’ve accepted analytics | 14 months |
Before anything is deleted, we check whether there’s still a reason to keep it — particularly for accounting records, where the legal period may be longer than the general rule above.
9. Security
We take reasonable organisational and technical steps appropriate to the personal information we handle.
We collect only what we reasonably need for the enquiry, service or business purpose. We don’t ask for passwords, recovery codes, security keys or similar credentials through ordinary enquiry channels, and we don’t intentionally record them in our customer records.
No method of storing or transmitting information is completely secure, so we do not promise absolute security.
10. Your rights
Depending on the circumstances and the lawful basis being used, you may have the right to:
- Ask what we hold about you and get a copy of it
- Have inaccurate information corrected
- Ask us to delete information in some circumstances
- Ask us to restrict how we use it in some circumstances
- Object to us using it in some circumstances, including where we rely on legitimate interests
- Ask for a copy in a portable format in some circumstances
- Withdraw your consent at any time, where we rely on consent
Not every right applies in every situation. If a right doesn’t apply to a particular request, we’ll explain why.
You can object to direct marketing at any time, and we’ll stop.
To exercise any of these, email hello@pavelstechheaven.com. We may need to check who you are before we can act on a request.
11. Complaints
If you’re unhappy with how we’ve handled your information, please tell us first at hello@pavelstechheaven.com and we’ll try to sort it out.
You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator.
12. Cookies and website technologies
Analytics is optional, and off unless you accept it.
We use Google Analytics 4 to understand how people use the website — things like which pages are visited and how visitors move around the site. Google Analytics uses cookies and similar identifiers, so we treat it as optional rather than necessary.
It won’t run unless you accept analytics. Nothing analytics-related is stored on your device until you do, and no option is pre-selected in favour of accepting.
You can say no, and nothing changes. Declining analytics doesn’t affect how the website works or what you can do on it.
You can change your mind later. Your choice can be changed or withdrawn at any time using the cookie preference control on the site.
What we don’t do. We don’t use advertising pixels, we don’t link the site to Google Ads, we don’t track purchases or revenue, we don’t use User-ID, and we don’t use analytics for advertising personalisation.
Search Console. We also use Google Search Console, which shows us how the site appears in search results. It works from Google’s own search data rather than from anything placed on your device by us.
How long analytics data is kept. 14 months, where you’ve accepted analytics.
13. Changes to this policy
We may update this policy from time to time — for example if we change how we work, or start using a different service provider. The date shown at the top of the page indicates when it was last updated.
14. Contact
For anything to do with your personal information:
Pavels Kozemjakins, trading as Pavels Tech Heaven
34 Hope Street, Inverkeithing, KY11 1LW
Our full business details are also on our Business Information page.