Privacy Policy
Privacy Policy
Last updated: 21 August 2026
Asset Reset respects your privacy and is committed to protecting personal information handled through our website, communications and IT asset recovery services.
This privacy policy explains what information we may collect, why we use it, how we protect it and the rights you have under UK data protection law.
1. Who we are
Asset Reset is a UK B2B IT asset recovery and refurbishment business.
For the purposes of personal information we collect and use for our own business activities, Asset Reset acts as the data controller.
Contact:
Email: Mike@assetreset.co.uk
Website: assetreset.co.uk
Our Information Commissioner's Office (ICO) registration details will be added here once registration has been completed.
2. Information we may collect
We may collect and process information including:
Your name
Business name and job title
Business email address
Business telephone number
Business address
Information provided through our website, email or telephone enquiries
Details of equipment offered for collection or processing
Asset numbers, serial numbers and equipment specifications
Collection and transaction records
Correspondence between you and Asset Reset
Records required to provide quotations, invoices, reports and payments
Technical information generated when using our website where provided by our website hosting platform
We primarily operate business-to-business and do not intentionally collect personal information that is unnecessary for providing our services.
3. Why we use your information
We may use personal information to:
Respond to enquiries
Assess equipment offered to Asset Reset
Arrange and manage collections
Provide quotations and estimates
Maintain asset and chain-of-custody records
Provide data sanitisation and equipment processing services
Produce asset, processing and sanitisation reports
Calculate equipment values and customer returns
Issue invoices and make payments
Maintain accounting and business records
Manage relationships with customers, suppliers and downstream partners
Protect our business, customers and equipment
Comply with legal and regulatory obligations
Contact relevant businesses about Asset Reset services where we believe those services may be relevant to their organisation
4. Our lawful bases for processing
Depending on the circumstances, we may rely on one or more of the following lawful bases:
Contract – where processing is necessary to provide a service you have requested or to take steps before entering into a contract.
Legal obligation – where we are required to retain or process information to comply with applicable law.
Legitimate interests – where processing is reasonably necessary for operating and developing Asset Reset, managing business relationships, protecting our business, responding to enquiries or carrying out appropriate B2B marketing, provided those interests are not overridden by your rights and interests.
Where we contact business representatives for B2B marketing purposes, our legitimate interest is in identifying organisations that may reasonably benefit from IT asset recovery, secure data handling, refurbishment and value recovery services.
You may object to direct marketing at any time and we will stop using your personal information for that purpose.
5. Business contact information obtained from other sources
Asset Reset may occasionally obtain professional contact information from publicly available business sources, company websites, business directories, referrals or other legitimate business sources.
We use this information only where we reasonably believe our services may be relevant to the organisation concerned.
We do not purchase or sell consumer mailing lists.
If you do not wish to receive further contact from Asset Reset, simply tell us and we will record your preference.
6. Personal data contained on IT equipment
As part of our IT asset recovery services, Asset Reset may receive equipment containing data belonging to a customer, its employees, customers or other individuals.
Asset Reset does not acquire such equipment for the purpose of accessing or using the information stored on it.
Data-bearing equipment is handled as confidential and is processed for the purpose of providing the agreed asset recovery and data sanitisation service.
Our data sanitisation procedures are designed to follow applicable National Cyber Security Centre (NCSC) guidance and to prevent customer data from being made available to subsequent users of refurbished or remarketed equipment.
Where secure sanitisation cannot be successfully completed, affected storage media will not be released for reuse while accessible customer data remains present and will instead be directed through an appropriate secure downstream route.
We do not intentionally inspect, copy, retain, disclose or make use of customer files stored on equipment except where technically necessary to provide an agreed service or where required by law.
The precise data-protection responsibilities of Asset Reset and the supplying organisation may depend on the circumstances and the services being provided.
7. Passwords and account locks
Customers should remove passwords, user accounts, activation locks, mobile device account locks, BIOS/UEFI passwords and other access restrictions wherever reasonably possible before equipment is transferred to Asset Reset.
This reduces unnecessary handling of information and assists us in securely processing equipment for reuse.
We will not request customer passwords unless genuinely necessary for an agreed service.
8. Who we may share information with
We may share necessary information with organisations that help us operate our business or provide our services, including:
Website and email hosting providers
IT and software service providers
Accountants and professional advisers
Payment and banking providers
Couriers and logistics providers where required
IT equipment purchasers and refurbishment partners
Authorised downstream waste and WEEE service providers where appropriate
Regulatory, governmental or law-enforcement bodies where legally required
We only share personal information where there is a legitimate reason to do so and aim to limit information to what is necessary for the relevant purpose.
Customer data recovered from storage devices is not sold or provided to equipment purchasers or remarketing partners.
9. International transfers
Some technology or service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, Asset Reset will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection requirements.
10. How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
Retention periods may depend on the type of information and may include:
Enquiry and correspondence records for as long as reasonably required to manage the business relationship
Customer and supplier records for the duration of the business relationship and an appropriate period afterwards
Asset processing and sanitisation records for an appropriate period to provide evidence of the services performed
Financial, invoice and transaction records for the period required by applicable accounting and tax law
Marketing suppression records where necessary to ensure we respect requests not to receive further marketing
Information that is no longer required will be deleted, anonymised or securely disposed of where reasonably practicable.
11. How we protect information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
For equipment entrusted to Asset Reset, this includes controlled handling of data-bearing assets and secure data sanitisation before equipment is released for reuse or remarketing.
No internet, email or storage system can be guaranteed to be completely secure, but we take proportionate precautions based on the nature of the information being handled.
12. Website analytics and cookies
This website is built and hosted using IONOS MyWebsite Now. IONOS states that MyWebsite Now itself does not use cookies.
IONOS SiteAnalytics is enabled for statistical evaluation and technical optimisation of the website. SiteAnalytics does not use cookies. It may collect information including the referring website, pages or files requested, browser and operating system, device type, time of access and an anonymised IP address. The IP address is anonymised directly after transmission and is not retained in a form intended to identify individual visitors.
If Asset Reset introduces additional third-party services or non-essential tracking technologies in future, this privacy policy and any applicable consent mechanism will be updated accordingly.
13. Your data protection rights
Depending on the circumstances, UK data protection law may give you rights including the right to:
Ask for access to personal information we hold about you
Ask us to correct inaccurate information
Ask us to erase personal information in certain circumstances
Ask us to restrict the way information is used
Object to certain processing
Object to direct marketing
Request transfer of information where the right to data portability applies
Withdraw consent where processing is based on consent
Not every right applies in every situation.
To exercise a data protection right, contact:
We may need to verify your identity before responding to a request.
14. Complaints
If you have concerns about how Asset Reset handles your personal information, please contact us first so that we have an opportunity to address the issue.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information about making a complaint is available at ico.org.uk.
15. Changes to this policy
We may update this privacy policy as Asset Reset develops, our services change or legal and regulatory requirements are updated.
The latest version will always be published on our website with the date of the most recent update.