What I collect, why, and what you can do about it.
Last updated 5 September 2026. This explains what personal information Regan IT collects, why, and what you can do about it.
Regan IT is a sole trader business based in Stopsley, Luton LU2, and is the data controller for this site. Contact support@reganit.uk or 07904 633775 about anything on this page.
When you get in touch. Your name, contact details and whatever you tell me about the problem, through the contact form, email, phone, WhatsApp or social media. I use it to answer you and to do the work. Lawful basis: taking steps at your request before entering a contract, and my legitimate interest in responding to enquiries.
When you become a customer. Contact details, address where work is carried out, details of the equipment or website, records of work done and what you were charged. Lawful basis: performing our contract, and my legal obligation to keep business records.
When you pay an invoice. The payment provider handles the transaction and holds whatever card or bank details you give it. I never see or store your card or bank details. I see your name, the invoice reference and whether it was paid. Lawful basis: performing our contract.
When you visit this website. Google Analytics, only if you accept analytics cookies, collects anonymised usage data. See the cookie policy. Lawful basis: your consent, which you can withdraw at any time.
Access to your systems. Where I support your computers or accounts I may hold passwords or access credentials for that purpose. These are kept in an encrypted password manager, never in plain text, and are handed over or deleted when the work ends or you ask.
I do not sell your data. I do not share it for anyone else's marketing. I do not use it to profile you or make automated decisions about you.
Some of these process data outside the UK. Where they do, they rely on the UK Government's adequacy decisions or standard contractual clauses.
Enquiries that do not become work: up to twelve months. Customer and job records: six years after the last piece of work, which is the period HMRC requires for business records. Access credentials: deleted at the end of the work. Analytics: as configured in Google Analytics, currently fourteen months.
You can ask me to give you a copy of your data, correct it, delete it, restrict what I do with it, or send it to someone else. You can object to processing based on legitimate interests, and withdraw consent for analytics at any time. Just ask, and there is no charge. I will respond within one month.
If you are not happy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would appreciate the chance to put it right first.
The website health check and website background check work by fetching the web address you give them and reporting what they find.
What is recorded: the web address checked, the date and time, and a short summary of the outcome, such as a score or a count of flags. This is kept so I can see whether the tools are being used and whether they are worth maintaining.
What is not recorded: your IP address, your browser, or anything that identifies you. The log holds the address of the site you looked up and nothing about the person who looked it up.
Your IP address is used momentarily, in memory, to limit how many checks can be run from one place in an hour. It is hashed for that purpose and never written to the log.
If you fill in the enquiry form that appears with a result, the name, email, phone number and notes you enter are emailed to me, along with the findings and the address that was checked. That email is how I reply to you. It is not added to a mailing list and it is not passed to anyone.
The lawful basis for the usage log is legitimate interest: knowing whether a free tool is worth keeping. The basis for the enquiry form is your own request to be contacted.