1. About this policy
This Privacy Policy explains how Repair My Phone (Oxford) Limited, trading as Repair My Phone Today (RMPT), collects and uses personal information when you visit our website, request a quote, book or receive a repair, buy a product, use collection or delivery services, contact a store, enter into a business relationship with us, apply for work, or otherwise deal with us.
It applies to our website and our Oxford, Summertown and Bicester operations. It should be read with our Cookie Policy, Repair Terms and Conditions, warranty terms and any specific notice shown when information is collected.
2. Who we are and how to contact us
Controller: Repair My Phone (Oxford) Limited (company number 10817403)
Trading name: Repair My Phone Today (RMPT)
Registered office: 32 Brasenose Drive, Kidlington, England, OX5 2EQ
Email: [email protected]
Website: https://www.repairmyphone.today/
Send privacy enquiries, rights requests and data protection complaints to the email above. Mark postal correspondence "Data Protection".
3. Personal information we collect
- Identity and contact details, including name, address, email, telephone number, postcode and business details.
- Booking, repair and device details, including appointment, location, make, model, serial/IMEI where needed, fault, condition, photos, diagnostics, quotes, parts, engineer notes and warranty information.
- Device passcodes or access information where reasonably required and voluntarily provided.
- Device content incidentally encountered during necessary diagnosis, testing, data recovery or repair.
- Transaction, payment-reference, refund, invoice and purchase information.
- Communications, complaints, feedback, reviews and customer-service records.
- Marketing choices, consent records, opt-outs and suppression records.
- Website, cookie, analytics, advertising and technical information, subject to cookie choices.
- Business, supplier, recruitment, legal and security information where relevant.
4. How we collect information
We collect information directly from you, from authorised representatives, from the device during necessary service work, automatically through the website subject to cookie choices, from payment/courier/repair providers involved in a transaction, and from public platforms when you interact with us there.
5. Why we use personal information
| Purpose | Use | Lawful basis |
|---|---|---|
| Quotes, enquiries and bookings | To respond, identify the requested device/service, arrange appointments, collections or visits, and take steps requested before entering a contract. | Steps before a contract; legitimate interests in managing enquiries and preventing misuse. |
| Repair, diagnostics and testing | To check in the device, diagnose faults, obtain approval, perform the repair, test functionality, record condition, return the device and provide warranty support. | Contract; legitimate interests in delivering and evidencing a safe, accurate service. |
| Device access and incidental content | To access functions strictly needed for diagnosis, repair, testing, data recovery, security or resolving a complaint. | Contract; legitimate interests. Where explicit consent is the appropriate basis for an optional activity, we will ask for it. |
| Payments, invoices and accounting | To take payment, issue receipts, process refunds, manage debts, keep accounting records and meet tax duties. | Contract; legal obligation; legitimate interests in financial administration. |
| Customer support, warranties and complaints | To answer questions, manage repeat repairs, investigate complaints, resolve disputes and improve service quality. | Contract; legal obligation; legitimate interests in customer care and legal claims. |
| Fraud, safety and security | To protect customers, staff, premises, devices, systems and transactions; prevent fraud or abuse; and establish, exercise or defend legal claims. | Legal obligation; legitimate interests; recognised legitimate interests where applicable. |
| Service messages | To send booking confirmations, quote updates, repair-status notifications, collection reminders, warranty messages and other non-marketing communications. | Contract; legitimate interests. |
| Marketing | To send offers, promotions or service news where permitted, maintain preference records and measure campaign effectiveness. | Consent where required by PECR; legitimate interests where electronic-marketing rules permit, including any applicable existing-customer exception. |
| Website operation and analytics | To run, secure and improve the website, remember choices, understand use and measure advertising. | Legitimate interests for strictly necessary functions; consent for non-essential analytics, advertising and similar technologies. |
| Business customers, suppliers and partners | To manage commercial relationships, orders, repairs, contracts, accounts, due diligence and communications. | Contract; legal obligation; legitimate interests. |
| Recruitment | To assess applications, arrange interviews, check suitability and meet employment-law obligations. | Steps before a contract; legal obligation; legitimate interests. |
| Legal and regulatory matters | To comply with law, respond to lawful requests, cooperate with regulators and maintain evidence of compliance. | Legal obligation; legitimate interests; recognised legitimate interests where applicable. |
Where we rely on legitimate interests, we assess necessity, proportionality, reasonable expectations and the effect on individual rights.
6. Device passcodes, contents and repair access
We may ask for a passcode where full diagnosis or testing cannot reasonably be completed without it. Providing access is optional, but refusal may limit or delay the service.
Technicians are instructed to access only functions and information reasonably necessary for the requested service. Incidental access may occur during testing or data recovery, and any information encountered is treated as confidential.
Passcodes are used only for the repair-related purpose and retained only for the active job and a short closure period. Our operational target is deletion or irreversible obscuring within 30 days after job closure unless needed for an authorised repeat repair, unresolved complaint or legal requirement.
Customers remain responsible for backups and appropriate remote-lock or remote-erase tools. Repair liability is addressed separately in our Repair Terms and Conditions, subject to statutory rights.
7. Data recovery and temporary copies
Where requested, we may create a temporary copy for data recovery, migration, backup assistance or operating-system work. Temporary copies are restricted to authorised staff and normally deleted within 30 days after completion or collection unless another period is agreed or retention is needed for a complaint, legal claim or legal obligation.
8. Sensitive information
We do not request special category information for ordinary repairs. A device may contain such information and a technician may encounter it incidentally. We limit unavoidable handling to what is necessary and protect it as confidential information.
9. Marketing
Marketing is optional. We send electronic marketing only where PECR permits it, based on consent or an applicable existing-customer exception. You can unsubscribe at any time. Opting out will not stop service communications. We may retain a minimal suppression record to honour the opt-out. We do not sell customer lists for unrelated marketing.
10. Cookies and online advertising
Strictly necessary technologies support website operation and security. Non-essential analytics and advertising technologies, including Google services, are used only where the required consent has been obtained. See our Cookie Policy and use the Cookie Settings link to change your choices.
11. Sharing information
- Authorised RMPT staff and technicians.
- Website, IT, cloud, email, messaging, security, backup, consent, analytics and advertising providers.
- Payment providers, banks and fraud-prevention services.
- Repair, data-recovery, manufacturer and parts partners.
- Couriers and collection/delivery providers.
- Accountants, auditors, solicitors, insurers, claims handlers and debt-recovery providers.
- Business customers or authorised representatives.
- Police, courts, regulators, tax authorities and other bodies where required or permitted by law.
- Parties involved in a genuine corporate transaction, subject to confidentiality and safeguards.
We share only what is reasonably necessary. We do not sell personal information.
12. International transfers
Where a provider processes information outside the UK, we use or require an appropriate transfer mechanism where required, such as adequacy regulations, the UK IDTA, the UK Addendum, binding corporate rules or another permitted safeguard.
13. Security
We use appropriate technical and organisational measures, including access controls, confidentiality duties, authentication, secure systems, backups, physical security, minimisation, deletion procedures and supplier controls. No system is completely secure. Do not send passcodes or especially sensitive information through an insecure channel unless a method has been agreed.
14. Retention
| Record | Normal period |
|---|---|
| Enquiries and quotes not resulting in a job | Normally up to 12 months after the last meaningful contact. |
| Booking, repair, sale, invoice and warranty records | Normally 6 years after completion, payment or the end of the relevant warranty/relationship, whichever is later. |
| Device passcodes and access information | Active job plus a short closure period; operational target deletion within 30 days after job closure unless still required for an authorised repeat repair, complaint or legal matter. |
| Temporary data-recovery, migration or backup copies | Only as long as needed to complete and hand over the service; normally deleted within 30 days after completion or collection unless otherwise agreed or legally required. |
| Device-condition photographs and diagnostic evidence | For the repair, warranty, complaint and legal-claims period; normally aligned with the relevant job record. |
| Marketing records | Until consent is withdrawn, the contact opts out, or the information is no longer needed. Inactive records are reviewed periodically. Minimal suppression records may be retained to honour opt-outs. |
| Website security logs and routine technical records | Usually up to 12 months unless a longer period is needed to investigate security, fraud or legal issues. |
| Cookie and advertising information | As described in the Cookie Policy and Cookie Settings panel. |
| Complaints, rights requests and legal claims | Normally 6 years after closure, or longer where a claim, investigation or legal duty requires it. |
| Unsuccessful recruitment applications | Normally 6 months after the recruitment decision, unless a longer talent-pool period is agreed. |
| Supplier and business contact records | For the relationship and normally 6 years afterwards where needed for contracts, accounts or claims. |
We may shorten or extend a period where justified by the purpose, legal duties, disputes, investigations or technical backup cycles. When information is no longer required, we delete it, anonymise it or place it beyond routine use.
15. Uncollected devices and disposal
Uncollected devices are handled under our Repair Terms and Conditions. Before resale, recycling or disposal, we take reasonable steps to erase personal information where technically possible. A damaged, locked or non-functioning device may not be capable of secure erasure; customers should use backups and remote security tools.
16. Children
Our services may involve devices used by children, but the website is not designed to collect children's information for profiling or behavioural advertising. A parent, guardian or authorised adult should arrange the service where the child cannot validly provide the necessary authority.
17. Automated decisions
We do not currently make solely automated decisions about customers that produce legal or similarly significant effects. Routine tools may support security, spam filtering, analytics, advertising measurement, appointment administration or fraud indicators.
18. Your rights
- Information about processing.
- Access to personal information.
- Correction of inaccurate or incomplete information.
- Erasure or restriction in qualifying circumstances.
- Objection to legitimate-interest processing and an absolute objection to direct marketing.
- Data portability where applicable.
- Withdrawal of consent at any time.
- Safeguards for qualifying automated decisions.
Email [email protected] to exercise a right. We may request proportionate identity or authority evidence. We respond within the period required by law, subject to lawful extensions and limited fee/refusal rules.
19. Data protection complaints
Email [email protected] with the subject "Data Protection Complaint". We will acknowledge receipt within 30 days, investigate without undue delay, keep you informed where appropriate and communicate the outcome without undue delay.
You may also complain to the Information Commissioner's Office at ico.org.uk, by telephone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
20. Required information
Some information is needed to provide a quote, enter into or perform a contract, identify the device, contact you, arrange delivery, take payment, meet legal duties or protect against fraud. Without it, we may be unable to accept or complete the service. Marketing and optional cookie consent are not required for core repair services.
21. External websites
External shops, maps, review platforms, social media, manufacturers and other websites control their own privacy practices. Review their privacy information before providing data.
22. Changes
We review this policy periodically and when services, systems, suppliers or legal obligations change. Material new uses will be brought to affected individuals' attention where required before the new use begins.
23. Contact
Repair My Phone (Oxford) Limited
Trading as Repair My Phone Today (RMPT)
Company number 10817403
32 Brasenose Drive, Kidlington, England, OX5 2EQ
[email protected]
Oxford: 01865 655 261
Bicester: 01869 226 455
Last updated: 26 July 2026