Privacy Policy
How we collect, use and protect your personal data.
IT Consultancy & Provision Ltd. (trading as ITCP Cloud Services, "ITCP", "we", "us") respects your privacy. This policy explains what personal data we collect when you use itcp.co.uk, contact us, book an expert session or work with us, why we use it, and the choices and rights you have.
In short: we only collect what we need to respond to you, deliver our services and run our business. We do not sell your data, we do not use advertising or analytics cookies, and you can contact us at any time about your data.
1Who we are
IT Consultancy & Provision Ltd. is the data controller for the personal data described in this policy.
- Company
- IT Consultancy & Provision Ltd., a company registered in England and Wales (company number 06747955)
- Address
- 104 Lanacre Ave, London, United Kingdom
- Contact for data protection
- mohammad@sahebjamee.com
- Regional offices
- Istanbul, Türkiye and Dubai, United Arab Emirates
We are not required to appoint a Data Protection Officer. Questions about this policy can be sent to the contact above.
2Personal data we collect
We collect personal data directly from you, and a small amount automatically when you use our website.
| When | What we collect |
|---|---|
| You send us an enquiry using our contact form | First and last name, email address, phone number (optional), company (optional), the topic you choose and your message, plus your confirmation that we may use these details to respond. |
| You book a paid expert session | Name, email, phone, company, job title, the topic and details of your question, your preferred and alternative date and time, and how you would like to meet (for example Microsoft Teams or phone). For payment: billing name and address and order details. Card details are entered directly with our payment provider, Stripe, and are never stored by us. |
| You become a client | Business contact details of your staff (name, job title, work email and phone), information needed to deliver the engagement, and billing details (company name, address and email) used on our invoices. |
| You email, call or meet us | The contact details and information you choose to share with us. |
| You visit our website | Technical data that your browser sends automatically, such as your IP address, browser type and the pages requested. This is recorded in our hosting provider's security and server logs. Our contact form also uses your IP address, briefly, to stop spam. |
Please do not send us special category data (for example health information) through the website. We do not knowingly collect it.
3How we use your data and our lawful bases
Under UK data protection law we must have a lawful basis for each way we use personal data.
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and following up on it, including preparing a proposal you have asked for | Legitimate interests (responding to people who contact us) or taking steps at your request before entering into a contract |
| Arranging, delivering and taking payment for an expert session | Performance of a contract with you |
| Delivering consulting and managed services to our clients, and managing the client relationship | Performance of a contract, or legitimate interests where the contract is with your employer |
| Invoicing, accounting and keeping business and tax records | Legal obligation, and legitimate interests (running our business) |
| Keeping our website and systems secure, preventing spam, fraud and misuse | Legitimate interests (protecting our business and our users) |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. You can ask us for more information about this, and you have the right to object (see "Your rights").
Marketing: we do not currently send marketing emails. If we introduce a newsletter, we will only send it with your consent or, for existing clients, where the law allows, and every message will include an easy way to unsubscribe.
Automated decisions: we do not make decisions about you based solely on automated processing.
4Cookies and similar technologies
Our website uses only a small number of cookies that are strictly necessary for it to work. We do not currently use analytics, advertising or social media tracking cookies. Strictly necessary cookies do not need your consent, but our cookie banner lets you choose whether to allow optional cookies, and no optional cookies or tracking scripts run unless you allow them.
| Cookie | Purpose | Duration |
|---|---|---|
itcp_consent | Remembers your cookie choices so we do not ask you again on every page | 6 months |
woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart | Remember the expert session you selected while you complete your booking | Up to 2 days |
__stripe_mid, __stripe_sid | Set by Stripe on the checkout page to process your payment securely and prevent fraud | Up to 1 year / 30 minutes |
wordpress_*, wordpress_logged_in_*, wordpress_test_cookie | Keep authorised ITCP staff signed in to the Customer Admin area. Not set for normal visitors | Session, or up to 14 days if "Remember me" is ticked |
Fonts: to display our website's typefaces, your browser downloads them from Google Fonts. This means your IP address is shared with Google when the page loads. Google does not set cookies for this.
You can block or delete cookies in your browser settings. If you block strictly necessary cookies, parts of the site, such as booking an expert session, may not work. You can change or withdraw your cookie choices at any time using the Cookie settings link at the bottom of every page. If we introduce optional cookies, we will list them here and only use them with your consent.
5Who we share your data with
We never sell your personal data. We share it only where needed, with:
- Microsoft (Azure): hosts our website and databases, in Microsoft data centres in the European Union.
- Microsoft 365: our business email, calendar and Teams, used to communicate with you and run meetings. Emails sent by our website (such as enquiry notifications, booking emails and invoices) are also sent through Microsoft 365.
- Stripe: processes payments for expert sessions. Stripe acts as an independent controller for some data, for example fraud prevention. See stripe.com/gb/privacy.
- Google: delivers our website fonts (see "Cookies and similar technologies").
- Our regional offices in Istanbul and Dubai, where they help deliver services to you.
- Professional advisers, such as our accountants, lawyers and insurers, where reasonably necessary.
- Authorities, such as HMRC, law enforcement or regulators, where the law requires it.
- A buyer or successor of our business, if the business is sold or reorganised, under the same protections.
Our service providers may only use your data on our instructions and must keep it secure.
6International transfers
Our website is hosted in the European Union, which the UK recognises as providing adequate protection for personal data. Some of our providers, such as Stripe, Microsoft and Google, may process data in the United States. Our regional offices are in Türkiye and the United Arab Emirates.
Whenever personal data leaves the UK, we make sure it is protected: through UK adequacy regulations (including the UK–US Data Bridge, where the recipient is certified), the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate security measures. You can ask us for more information about these safeguards.
7How long we keep your data
| Data | How long |
|---|---|
| Enquiries that do not lead to work with us | Up to 2 years after our last contact |
| Client records, contracts and project information | For the engagement, then 6 years after it ends |
| Invoices, bookings, payments and accounting records | 6 years after the end of the financial year they relate to, as UK tax law requires |
| Spam-prevention data (IP address on the contact form) | 1 hour |
| Server and security logs | Up to 30 days, unless needed to investigate an incident |
When data is no longer needed, we securely delete or anonymise it.
8How we protect your data
As a cloud and security consultancy, we apply the practices we recommend to our clients. These include encryption in transit (HTTPS), access restricted to authorised staff with strong authentication, regular updates and backups, and the security controls of our Microsoft Azure environment. No system is completely secure, but if a breach affecting your data occurs, we will act promptly and notify you and the Information Commissioner's Office where the law requires.
9Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you and receive a copy
- Correct data that is inaccurate or incomplete
- Erase your data in certain circumstances
- Restrict how we use your data in certain circumstances
- Object to our use of your data where we rely on legitimate interests, and to direct marketing at any time
- Data portability: receive data you gave us in a structured, machine-readable format, or have it sent to another organisation
- Withdraw consent at any time, where we rely on consent
To use any of these rights, email mohammad@sahebjamee.com. It is free of charge in most cases. We may ask you to confirm your identity, and we will respond within one month. This can be extended by up to two further months for complex requests, in which case we will tell you why.
10Complaints
If you are unhappy with how we have handled your personal data, please contact us first at mohammad@sahebjamee.com. We will acknowledge your complaint, look into it and tell you the outcome without undue delay.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
11Children
Our services are for businesses and professionals. Our website is not aimed at children, and we do not knowingly collect personal data from anyone under 18.
12Links to other websites
Our website links to other sites, such as LinkedIn and Google Maps. We are not responsible for their privacy practices. Please read their privacy policies.
13Changes to this policy
We may update this policy from time to time, for example if we change how we use personal data or the law changes. The latest version will always be on this page, with the date it was last updated at the top. If changes are significant, we will take reasonable steps to let you know.