Privacy notice

Last updated 4 November 2026.

Who we are

PC1 Ltd (“PC1”, “we”) runs this website and is the controller of the personal information described here. We’re a Swansea-based IT, cyber security, telecoms, CCTV and web company. Registered in England & Wales, company no. 03753279. Our address is Castle House, Kingsway, Swansea West Business Park, Fforestfach, Swansea SA5 4DL. We are registered with the Information Commissioner’s Office, registration number ZB040777.

We look after other organisations’ security for a living, and we hold Cyber Essentials ourselves, so we take care of yours the same way. We don’t sell, rent or trade your information, and we don’t use it for anything you wouldn’t expect.

Questions about this notice or your information: email contact@pc1.co.uk or call 01792 580 540.

What we collect, and why

When you browse the site

Like most websites, our server records technical details of each request, such as your IP address and browser, to keep the site running and secure. If you accept analytics cookies, Google Analytics also records how you use the site. Nothing is measured until you accept. Our cookie policy lists exactly what is stored and lets you change your choice.

When you ask for a quote or a cost review

The quote form on our contact page asks for your name, organisation, email and phone number, what you need, your team size and timing, and anything else you choose to tell us. We use it to reply, prepare a proposal and follow up on it. It’s emailed to our sales inbox; nothing is added to a mailing list.

When you use the Cyber Essentials readiness check

Your answers to the readiness check are saved in your own browser so you can come back to them. They don’t reach us unless you choose to send them. Your answers can describe your organisation’s systems and security, so we treat them as confidential.

• If you send your answers to us, we receive your name, email, phone number (optional), organisation and your answers. We use them to assess your readiness, quote for any work and, if you go ahead, to prepare your official Cyber Essentials questionnaire. We also email you a receipt.
• If you ask for a link to carry on later, your browser encrypts your answers before they’re stored on our server, using a key that exists only in the link we email you. We can’t read the stored copy. Your email address is used once to send the link and is not stored. The stored copy is deleted when you send us your answers, or 30 days after your last change, whichever comes first. Anyone with the link can open your answers, so please only share it inside your organisation.

When you email or call us

We keep the emails and call notes we need to deal with your enquiry or provide our services, in our Microsoft 365 systems.

If you’re a client

When we provide services to your organisation, we handle contact and account details for your staff, and may process personal information held in your systems on your behalf. That work is covered by our contract and data processing terms with your organisation: our terms of business and data processing agreement, rather than by this notice.

Our lawful basis

We rely on legitimate interests to reply to enquiries and readiness check submissions, to run and protect our website and forms, and to keep business records; and on steps before entering a contract when you ask us for a quote. We rely on your consent for analytics cookies, which you can withdraw at any time from our cookie policy. Where we have to keep records by law, such as for tax, we rely on legal obligation.

Who we share it with

We only share your information with service providers who help us run the business, under contracts that require them to protect it and only use it on our instructions:

If you ask us to certify you for Cyber Essentials, we submit your answers to the certification body (such as CyberSmart, on behalf of IASME) with your agreement, as part of that work. We will also share information if the law requires it.

Outside the UK

Some of our providers may process information outside the UK. Where they do, we make sure it is protected by UK adequacy regulations or by approved safeguards such as the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Encrypted readiness check links: deleted when you send your answers, or 30 days after your last change.
• Answers saved in your own browser: until you clear them (Start again) or clear your browser’s site data.
• Quote form and readiness check submissions: deleted within 96 hours of reaching us. If we then talk or work together, the emails we exchange are kept as normal business correspondence.
• Client records: for as long as we work together and six years after, the time limit for contract claims, unless the law requires longer.
• Google Analytics: the detailed data about visits is deleted automatically after no more than 14 months. Summary reports, which don’t identify anyone, are kept.

How we keep it safe

We apply the same controls we put in place for clients: PC1 is Cyber Essentials certified, our systems use multi-factor authentication and are kept up to date, access is limited to staff who need it, and our website and forms use encrypted (HTTPS) connections. Readiness check links are encrypted in your browser, so even we can’t read the stored copy.

Your rights

You can ask to see the personal information we hold about you, have it corrected or deleted, restrict or object to how we use it, or receive a copy to take elsewhere. Where we rely on consent, you can withdraw it at any time. Email contact@pc1.co.uk and we’ll respond within one month. There is no charge.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this notice

We’ll update this notice when what we do changes, and change the date at the top. If a change affects something you agreed to, we’ll ask you again where we need to.