This notice describes how Service Parts Online Ltd (trading as RecyclicTech) uses personal data on recyclictech.com. It is the controller notice for this website and the live forms. It is not a substitute for independent counsel.
Who the controller is
The data controller is Service Parts Online Ltd, Companies House 17420819, a private company limited by shares, incorporated in England and Wales on 26 August 2026. Trading style: RecyclicTech. Registered office: 66 Paul Street, London, EC2A 4NA, United Kingdom — Companies House address, not the processing plant.
Privacy and operational mail: info@recyclictech.com. There is no published switchboard. RecyclicTech does not currently publish an ICO registration number. UK organisations that determine the purposes of processing personal data are generally required to pay the Information Commissioner’s data-protection fee. We will publish the registration number here the day it can be checked on ico.org.uk. Until then we do not write “ICO registered”.
What we collect, and why
Assessment, contact and collection forms: name, work email, phone, organisation, job title, country, site location and the equipment details you type. Legal basis: steps prior to a contract (UK GDPR / GDPR Art. 6(1)(b)) and our legitimate interest in scoping a B2B ITAD job (Art. 6(1)(f)).
Education donations at /donate/: name, email, phone, collection address, kit list, and the courier label data needed to reach Rădăuți. Legal basis: contract for the paid courier collection and our legitimate interest in wiping media before reuse.
Client accounts: email from Google, X or the password form, plus the given name, family name and organisation you confirm. That name and organisation are published with any review you write on /reviews/. The donation portal uses a separate profile.
Necessary cookies remember cookie preference, the last market edition (rt-market) and whether you accepted a suggested local-language version (rt-geo). Analytics and marketing cookies are not set unless you opt in. No analytics provider is configured on this build.
Where data goes
Inbound processing of retired equipment is at Strada Putnei 213, 725400 Rădăuți, Suceava, Romania — an EU member state. Personal data on retired drives is sanitised or destroyed there under NIST SP 800-88; it is not used as a marketing file.
Website form data is stored so the team can respond. There is no public listing of those submissions. Hosting is on Vercel. Sign-in uses Google and X as identity providers if you choose those buttons. Paid donate-portal parcels use Shippo for labels. We do not sell personal data.
How long we keep it
Enquiry and assessment records: kept while the job is open and then for as long as the audit trail and duty-of-care papers have to be producible — currently aligned to the operation of the service, not a published multi-year schedule. Hash-chained audit events store operational facts (equipment categories, origin country, courier, sanitisation method), not names or street addresses. Actor identity on that log is a SHA-256 of an email, never the address.
Account data lasts until you ask us to delete the account, subject to records we must keep for a closed job.
Your rights
Depending on your location you have rights of access, correction, deletion, restriction, objection and portability under the UK GDPR and the EU GDPR. Write to info@recyclictech.com. You can complain to the ICO (ico.org.uk) or, if you are in the EEA, to your local supervisory authority.