Privacy notice

Last updated 5 November 2026

This notice explains how SKM IT Services Ltd ("SKM IT", "we"), company number 17564204, registered office Tudor Rose Cottage, Church Lane, Hook, Goole, DN14 5PN, uses personal data when you visit this website, contact us or work with us. We are the controller of this data. If you have any questions, email [email protected].

What we collect

When you contact us: your name, email address, organisation, role and whatever you write in your message.
When you become a client: contact and billing details for the people we deal with, and records of the work we do.
When you use the free email check: the domain name you enter. The check runs in your browser using public DNS; we don't receive or store the result.
When you visit the site: our hosting provider keeps short-lived technical logs (such as IP address and browser type) to keep the site secure and working.

We don't use advertising or analytics cookies, and this site doesn't set cookies.

How we use it, and our lawful basis

To reply to your enquiry and give you a quote: legitimate interests, or steps you've asked us to take before entering a contract.
To deliver services and invoice for them: performance of a contract.
To keep accounting and tax records: legal obligation.
To keep this website and our systems secure: legitimate interests.

We won't send you marketing emails unless you've asked for them, and you can opt out at any time.

Data in your Microsoft 365 tenant

When we work in a client's Microsoft 365 environment, the client is the controller of the data held there and we act as their processor, following their written instructions under our Terms of Business. We access only what the job needs, keep data in the client's tenant wherever possible, and remove our access when the work is finished.

Who we share it with

We don't sell personal data. We use these service providers to run the business:

Microsoft (Microsoft 365): email, documents and records, stored in the UK or EU.
Cloudflare: website hosting, security and the DNS lookups used by the free email check.
Web3Forms: passes contact form messages to our mailbox.
Google Fonts: supplies the website's typeface, which means your browser connects to Google.
Our accountant, bank and insurers, where needed, and anyone we're legally required to share with.

Some of these providers may process data outside the UK. Where they do, they use safeguards approved under UK data protection law, such as the UK International Data Transfer Addendum or the UK-US data bridge.

How long we keep it

Enquiries that don't lead to work: up to 12 months.
Client records and invoices: 6 years after the end of the financial year they relate to.
Website security logs: kept by Cloudflare for a short period, typically days.

Your rights

You can ask us for a copy of your data, or ask us to correct, delete or restrict it, or to stop using it. You can also object to how we use it or ask to move it to someone else. Email [email protected] and we'll respond within one month.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Security

We protect our own systems the way we protect our clients': phishing-resistant multi-factor authentication, Conditional Access, encrypted devices, and email secured with SPF, DKIM and DMARC.

Changes

We'll update this notice when how we use data changes. The date at the top shows when it was last revised.