Your details

How LXKEY PCs handles personal information. Last updated 16 October 2026.

LXKEY PCs is the trading name of Luke Hammill, a sole trader based in Wakefield. Luke is the data controller: when you make an enquiry or bring a device in, he is responsible for the details you give. You can reach him at lxkey@lxkeypcs.com. This page explains what happens to your details, in plain terms.

What we collect

• When you enquire: your name, the email address or phone number you give us, the device you mention, what you write in the message, and — only if you choose to answer it — how you found us. That last one is optional and exists so we know which advertising is worth keeping; leave it as “Rather not say” and nothing is recorded. The database also records the internet (IP) address the form was sent from, which is used only to stop the same sender flooding the form.
• When we do work for you: the same, plus your address and postcode if we collect or deliver, details of the device including its serial or IMEI number, what we diagnosed and did, what it cost, and what you paid.
• Photographs of your device where they matter to the job, such as the condition it arrived in. We do not look through the content of your device beyond what is needed to carry out and test the repair.
• When you enter our prize draw: your name, the email address or phone number you give, whether you ticked the box to hear about offers, and where you followed a link from (for example a card or a social post), if the link says. The database also records the internet (IP) address the entry was sent from, which is used only to stop one sender flooding the form. Your name and contact details are also added to our customer records, marked as a prize draw entry, so that we can find your voucher.

Why we hold it, and on what basis

• Answering your enquiry and doing the work: because you have asked us to, so we can take steps towards and carry out a contract with you.
• Job, invoice and payment records: because the law requires us to keep business records for tax.
• Repair history and device photographs: our legitimate interest in honouring the warranty and showing the condition a device arrived in.
• The IP address on an enquiry, and “how you found us”: our legitimate interest in keeping spam out of the form and knowing which advertising works.
• Competition interest registrations: we keep your name, email, registration date and chosen competition in our private admin panel to send the launch update you specifically requested. This does not enter you into a draw or reserve tickets. It does not subscribe you to unrelated marketing. You can withdraw your request by emailing lxkey@lxkeypcs.com.
• Prize draw entries: running the draw, contacting the winner and honouring the entry voucher (which includes keeping you in our customer records until it expires), because you asked to be entered (a legitimate interest in running a promotion you chose to join). Offers by email, text or WhatsApp: only if you ticked the optional box, which is your consent and which you can withdraw at any time by telling us.
• Google Ads cookies: only with your consent, which you can withdraw at any time (see below).

How long we keep it

Enquiries that do not turn into work are deleted, together with the IP address recorded with them, once they are clearly no longer live. Records of actual jobs and payments are kept for six years after the tax year they fall in, because HMRC requires it. Device photographs are deleted once the job is closed and the warranty period has passed.

Prize draws

Each competition has its own published terms, prize, closing date and entry-record retention date. Unless you opt into offers, win, or book work with us, we remove unused entry records and customer records created solely for that draw after its stated retention date. A voucher is offered only when that competition says so. The original power-bank promotion is described below.

Entering the prize draw is free and nothing is taken from you. We use your entry to run the draw, to contact the winner and to check your voucher when you get in touch. If you give an email address, we may email your voucher to it, sent from our own business mail (Google Workspace). That is the only email we send because of your entry unless you ticked the optional box. Every entry is also added to our customer records, marked as a prize draw entry and, if you did not tick the optional box, marked as someone we must not contact with offers. Entries, and the customer records made from them, are deleted after 31 December 2026, when the vouchers expire, apart from the winner (whose name is kept for our record of the draw), anyone who ticked the optional box to hear about offers, and anyone who has booked work with us, whose records are then kept like any other customer’s. If you ticked it, we keep your details until you ask us to stop, or for a year after you last got in touch, whichever comes first. Each pick is recorded, and the winner is chosen at random by our admin system. The winner’s first name and area are published only if they agree. You can ask us to remove your entry at any time at lxkey@lxkeypcs.com.

Tiered competition records — draft for human review

New tiered competitions use the retention date in their published terms. Postal receipt and eligibility decisions remain private. After that date, the admin can remove free-entry details for non-winners who have not asked for marketing. Winner fulfilment records, financial records, immutable draw references and audit evidence are retained for their documented purpose. Contact us to withdraw marketing permission or request a data review. Marketing withdrawal does not alter a frozen draw snapshot. The current free draw keeps its existing published terms.

Who else sees it

We do not sell your details, and we only send you marketing if you asked for it, for example by ticking the optional box on the prize draw. Others only see them where the work or the website cannot run without it:

• Hosting: the website is hosted by Vercel and the private database that stores enquiries and job records by Supabase (stored in Ireland). They act for us under contract and do not use your data for their own purposes.
• Google: only if you accept advertising cookies, Google receives information about your visit, as described below.
• Suppliers: if a repair needs a part ordered to your address, the supplier is given the delivery details and nothing more.

Vercel and Google are US companies, so some data may be processed outside the UK. Where that happens it is protected by the UK’s data transfer safeguards, such as the UK Extension to the EU–US Data Privacy Framework or the UK’s approved contract terms.

Customer accounts and paid competition entries

Your account stores your verified email, password authentication, optional profile details and private order/ticket history. Paid competition orders record the competition, ticket quantity, price, payment reference and provider-verified status. SumUp handles card details on its hosted checkout; we do not store card numbers. We use these records to administer the entry, check eligibility, manage payments and resolve queries. Ticket references identify an entry; age and region are checked on the winner before a prize is released.

We send service messages about payment, entry review and refunds through our Google Workspace business sender. These do not subscribe you to offers. Private competition-session cookies protect payment-status access for up to seven days; your signed-in account can also access its own orders. Account sign-in details use local storage to maintain your session.

Spending limits and participation suspensions are associated with your account and previous verified contact details so changing email cannot reset them. You can set a paid-entry limit of zero or suspend new participation in your account. Suspension stops marketing and new entries; it does not automatically refund or erase previously accepted entries. We retain the minimum identity links needed to honour those protections and prevent re-registration from silently resetting them. Contact us about access, corrections or deletion, including requests involving old contact details.

Each paid competition must state its retention arrangements before opening. Financial records, winner fulfilment and the audit of a completed draw may need to remain after other entry details are removed. Identity and postal evidence is kept private. The paid-competition privacy and retention arrangements still require final review before the new model opens; the existing free draw keeps its original terms.

Shop orders

When you order from the shop we record your name, email, optional phone, items, total, collection or delivery choice, delivery address where needed, payment reference and order history. We use these to fulfil your contract, provide order updates and handle returns. Paid orders link to a customer record. SumUp handles card details on its hosted payment page; our website stores payment references and verified status, not card numbers. Order confirmations and fulfilment updates are sent through our business Google Workspace mailbox. These are service messages, not marketing permission. Shop receipts, refunds and related business records follow the business-record retention described above. Contact lxkey@lxkeypcs.com about access, correction or deletion requests.

The basket uses local storage on your device. A strictly necessary, secure shop-session cookie lasts up to 30 days and protects your private order-status page. Your order reference alone does not grant access. Use the browser you paid with, or contact us to verify your identity if you need help.

Cookies and website statistics

We count page visits using privacy-friendly analytics that set no cookies and record no personal data.

The site’s fonts are stored on this website, so loading a page does not contact Google.

We also advertise on Google. Only if you press Accept on the cookie banner, the site loads Google’s advertising tag. It sets cookies, such as _gcl_au on this site and others on Google’s own domains, so Google Ads can tell us whether someone who clicked one of our adverts went on to send an enquiry or tap the WhatsApp or email buttons. Google receives your IP address and details of your visit when this happens. It is not used to show you personalised adverts. Google’s own privacy policy applies to that data.

If you press No thanks, nothing from Google is loaded at all. If you change your mind after accepting, the Google cookies set on this site are deleted. Your choice is remembered in your browser, and you can change it at any time with Cookie settings at the bottom of every page. Links to Trustpilot and WhatsApp take you to those companies, where their own policies apply.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Deletion requests are honoured except where we are legally required to keep a record, such as an invoice for tax purposes. Email lxkey@lxkeypcs.com and we will deal with it within a month.

If you think we have handled your details badly, you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

Before you hand a device over

Please back up anything you cannot afford to lose. Repairs sometimes require wiping or replacing storage, and a device that arrives with a failing drive may lose data regardless of what we do.