Privacy policy

Privacy notice

Who we are

Infinity Comms Ltd is the controller of personal information collected through this website and through enquiries made to us. We provide business communications and connectivity services including business phone systems, broadband and fibre, leased lines, WiFi, mobile and IoT connectivity.

Information we collect

Depending on how you contact us or use our services, we may collect:

• your name, business name, job role and contact details;
• information you enter into our quote, contact, connectivity or support forms, such as postcode, site location, team size, services required and your priorities;
• details of enquiries, quotes, support requests and our communications with you;
• customer account, service, contract and billing information where you become a customer;
• technical information needed to provide or support a service, such as telephone numbers, service addresses, circuit details, device or network information and fault information;
• basic technical and security information created when you visit the website, such as IP address, browser information, request logs and timestamps.

We do not ask you to provide special category personal data through our website forms.

How we use your information

We use personal information to:

• respond to enquiries and prepare quotes;
• check service availability and recommend suitable communications services;
• set up, deliver, manage and support services for customers;
• deal with faults, changes, moves, billing and account administration;
• communicate with you about an existing service or requested service;
• protect our website, systems and services from misuse, fraud and security threats;
• meet legal, regulatory, accounting and tax obligations;
• establish, exercise or defend legal claims.

Our legal bases for using personal information

Under UK data protection law, we rely on one or more lawful bases depending on the situation:

• Contract: where processing is necessary to take steps at your request before entering a contract, or to perform a contract with you or your organisation.
• Legitimate interests: to operate our business, answer business enquiries, provide support, protect our systems and maintain appropriate business records, where those interests are not overridden by your rights.
• Legal obligation: where we need to keep or disclose information to comply with the law.
• Consent: where we specifically ask for consent, for example if we introduce optional marketing or non-essential tracking that requires it.

Who we may share information with

We do not sell personal information. We may share information where necessary with:

• telecoms networks, carriers, wholesalers and service providers involved in checking availability, provisioning or supporting a service;
• IT, hosting, email, security, remote-support and other technology providers acting on our behalf;
• payment, accounting and professional advisers where relevant;
• regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law;
• a buyer, seller or adviser involved in a genuine business restructure, acquisition or sale, subject to appropriate confidentiality safeguards.

Where another organisation acts as our processor, we require it to use personal information only for the agreed purpose and to protect it appropriately.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet contractual, tax, accounting, regulatory and legal requirements.

Retention periods vary by record type. For example, routine enquiries and support records may be removed when they are no longer needed, while customer, contract and financial records may need to be kept for several years after a service ends. If information is relevant to a complaint, dispute, security incident or legal claim, we may keep it for longer while that matter is active.

International transfers

Some technology or communications suppliers may process information outside the United Kingdom. Where this happens, we use appropriate safeguards required by UK data protection law, such as an adequacy regulation or approved contractual safeguards, where applicable.

Security

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet-based service can be guaranteed to be completely secure, but we review our controls and restrict access to information to those who need it.

Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format;
• withdraw consent where we rely on consent.

These rights are not absolute and exemptions may apply. We may need to verify your identity before acting on a request.

Questions and complaints

Please contact us first if you have a question or concern about how we use your information. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

You can find current ICO contact details at ico.org.uk.

Contact us about privacy

For privacy questions or to exercise a data protection right, contact: