Legal
Privacy Policy
Last updated: 17 October 2026
This Privacy Policy explains how TechCitrus Ltd collects, uses, and protects your personal data when you visit our website or use our services. We are committed to handling your data responsibly and in accordance with UK GDPR and the Data Protection Act 2018.
1. Who we are
TechCitrus Ltd ("we", "us", "our") is a company registered in England and Wales (Company No. 17284186). We provide Apple device management and support services to UK businesses. For questions about this policy, contact us at: privacy@techcitrus.com
2. What data we collect
We may collect and process the following personal data: • Contact information — name, email address, phone number, and company name when you submit our contact form or enquiry. • Communication data — the content of emails, messages, or calls between you and us. • Technical data — IP address, browser type, and pages visited if you accept analytics cookies. • Client data — device information, user accounts, and configuration data required to deliver our managed services.
3. How we use your data
We use the data we collect to: • Respond to your enquiries and provide our services. • Manage and administer our client relationships. • Send service-related communications (e.g. support updates, renewal reminders). • Comply with legal obligations. We do not use your data for advertising, profiling, or sell it to third parties.
4. Legal basis for processing
Under UK GDPR, we rely on the following legal bases: • Contract — to fulfil our obligations under a service agreement with you. • Legitimate interests — to respond to enquiries and improve our services. • Legal obligation — to comply with applicable laws and regulations. • Consent — where you have explicitly agreed (e.g. marketing emails, if applicable).
5. Data retention
We retain personal data only for as long as necessary: • Enquiry data — 12 months if no contract follows. • Client data — for the duration of the service agreement plus 6 years (in line with legal requirements). • Financial records — 7 years (UK legal requirement). After these periods, data is securely deleted or anonymised.
6. Cookies
We use the following cookies: • Essential cookies — required for the website to function. These cannot be disabled. • Analytics cookies — optional. Used to understand how visitors use the site (e.g. Google Analytics). We only set these with your consent. You can manage your cookie preferences via the banner shown on your first visit, or by clearing your browser cookies at any time.
7. Third-party services
We may share data with trusted third parties to deliver our services, including: • Jamf — our MDM platform provider. • Cloud infrastructure providers (e.g. AWS, Google Cloud) for service delivery. • Accounting and legal advisors, under strict confidentiality obligations. All third parties are required to handle your data in accordance with applicable data protection laws.
8. Your rights
Under UK GDPR, you have the right to: • Access the personal data we hold about you. • Correct inaccurate or incomplete data. • Request erasure of your data (where applicable). • Object to or restrict processing. • Data portability — receive your data in a structured, machine-readable format. • Withdraw consent at any time (where processing is based on consent). To exercise any of these rights, email us at privacy@techcitrus.com. We will respond within 30 days.
9. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data storage and transmission, access controls, and regular security reviews.
10. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page indicates when it was last revised. We will notify active clients of material changes.