Privacy Notice
Last reviewed: 15 July 2026
Who we are
This Privacy Notice explains what to expect when Gather Technology Ltd collects and uses your
personal information.
We are committed to handling personal information responsibly, transparently and in accordance
with applicable UK data protection legislation.
- Organisation: Gather Technology Ltd
- Registered office: Abbey Manor Business Centre, Yeovil, Somerset, BA20 2EN
- Company number: 08919564
- ICO registration number: ZB691566
- Website: https://www.gather.tech
- Privacy enquiries: help@gather.tech
- Telephone: +44 (0)20 7550 6869
Gather Technology Ltd provides managed IT, cybersecurity, software development and governance,
risk and compliance services. We understand that trust depends on how we handle information and
are committed to protecting personal information throughout our business and the services we
deliver.
For the processing described in this notice, Gather Technology Ltd acts as the Data Controller.
When we provide managed IT, cybersecurity, software development or governance, risk and
compliance services on behalf of our customers, we may process personal information solely on
their documented instructions. In these circumstances, our customer remains the Data Controller
and Gather Technology Ltd acts as the Data Processor.
When this notice applies
This notice applies when you:
- Visit our website.
- Contact us.
- Request information or a quotation.
- Become, or work for, a customer or supplier.
- Attend meetings, webinars or events.
- Receive business communications from us.
- Apply for employment.
- Otherwise interact with our business.
Separate privacy information may apply for recruitment and employment.
What personal information we collect
The information we collect depends on how you interact with us.
Information you provide
- Identity and contact details.
- Business and employer details.
- Correspondence and enquiry information.
- Contract, billing and payment information.
- Support requests, tickets and service records.
- Marketing preferences.
- Any other information you choose to provide.
Information collected automatically
- IP address.
- Browser and device information.
- Operating system.
- Pages visited.
- Referring website.
- Cookie and consent preferences.
Further information is available in our Cookie Policy.
Information from other sources
- Employers.
- Customers.
- Suppliers.
- Business partners.
- Referral partners.
- Recruitment agencies.
- Professional advisers.
- Publicly available business sources.
How and why we use personal information
We only use personal information where we have a lawful reason to do so.
Responding to enquiries and quotations
- Information used: Contact details and enquiry information
- Lawful basis: Legitimate interests
- Retention: 12 months.
Managing customer relationships and delivering services
- Information used: Customer, contract and service information
- Lawful basis: Contract and legitimate interests
- Retention: The duration of the relationship plus up to 7 years.
Managing suppliers
- Information used: Supplier contact and payment information
- Lawful basis: Contract and legitimate interests
- Retention: The duration of the relationship plus up to 7 years.
Service communications
- Information used: Contact and account information
- Lawful basis: Contract, legal obligation and legitimate interests
- Retention: The duration of the relationship plus up to 7 years.
Business-to-business marketing
- Information used: Business contact information and marketing preferences
- Lawful basis: Consent where required, otherwise legitimate interests
- Retention: Until you unsubscribe, object, or the information is no longer relevant.
Website analytics and improvement
- Information used: Device, usage, cookie and consent information
- Lawful basis: Consent
- Retention: In accordance with the cookie periods described in our Cookie Policy.
Meeting legal, regulatory, audit and security obligations
- Information used: Relevant business, contract, communication and technical records
- Lawful basis: Legal obligation and legitimate interests
- Retention: The duration of the relationship plus up to 7 years.
Where we rely on legitimate interests, we consider whether the processing is necessary and whether
your rights and interests override our interests.
We do not sell personal information.
Who we share personal information with
We may share personal information where necessary with:
- Cloud, communications and business software providers.
- Website analytics providers, including Google Analytics and Microsoft Clarity, where you have
consented to analytics. - Payment providers.
- Professional advisers, including accountants and solicitors.
- Auditors and insurers.
- Service providers supporting the delivery of our services.
- Regulators, courts and law enforcement agencies where required or permitted by law.
Where another organisation processes personal information on our behalf, we require it to use the information only for authorised purposes and to protect it appropriately.
International transfers
Some of our suppliers process personal information outside the United Kingdom. Where this
happens, we ensure that a lawful transfer mechanism and appropriate safeguards are in place in
accordance with applicable UK data protection legislation.
You can ask us for further information about the safeguards used for a particular transfer by
contacting us.
How long we keep personal information
We keep personal information only for as long as necessary to meet contractual, legal, regulatory
and operational requirements.
- Customer and supplier information is generally retained for the duration of the relationship and
for up to 7 years afterwards. - Enquiries are generally retained for 12 months.
- Recruitment records for unsuccessful applicants are generally retained for 12 months.
- Successful applicant records become part of the personnel record and are retained in
accordance with employment and legal requirements. - Marketing information is retained until you unsubscribe, object to processing or it is no longer
relevant. - Cookie and website analytics information is retained for the periods described in our Cookie
Policy.
How we protect personal information
We use appropriate technical and organisational measures designed to protect personal
information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or
access.
These measures include least privilege access, multi-factor authentication, encryption where
appropriate, monitoring, secure backups, security awareness training, supplier assurance and
incident management.
Your data protection rights
Depending on the processing and lawful basis involved, you may have the right to:
- Ask for access to your personal information.
- Ask us to correct inaccurate or incomplete information.
- Ask us to erase personal information in certain circumstances.
- Ask us to restrict processing in certain circumstances.
- Object to processing based on legitimate interests or for direct marketing.
- Receive certain information in a portable format where the right applies.
- Withdraw consent at any time where we rely on consent.
These rights are not absolute and may not apply in every circumstance. We will explain any lawful
reason why we cannot fully meet a request.
To exercise a right, contact us using the details in section 12. We may ask for information to verify
your identity. We normally respond within one month, although the law allows additional time in
some circumstances.
Complaints
If you are concerned about how we have used your personal information, please contact us using
the details in section 12. We provide an accessible way to make a data protection complaint, will
acknowledge a complaint within 30 days, and will investigate and respond without undue delay.
You also have the right to complain to the Information Commissioner's Office (ICO).
- Website: https://ico.org.uk/make-a-complaint/
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9
5AF
Cookies and website analytics
Our website uses a strictly necessary cookie to remember your cookie choices. We also use Google
Analytics and Microsoft Clarity to understand how visitors use the website, but only where you have
consented to analytics cookies.
You can accept, decline or later change your analytics cookie preferences using the cookie
preferences control provided on the website. Further information, including the cookies used and
their retention periods, is available in our Cookie Policy.
Contact us
If you have any questions about this Notice, please email us at help@gather.tech or by post to:
Gather Technology ltd
Abbey Manor Business Centre,
Yeovil,
Somerset
BA20 2EN
United Kingdom
Changes to this Privacy Notice
We review this Privacy Notice regularly and update it when our processing activities or legal
requirements change.
Where a change could materially affect individuals, we will take reasonable steps to bring it to their
attention. The date at the top of this notice shows when it was last reviewed.
