Updated 19/10/2026
GDPR Policy
Clear responsibilities for information and access.
Purpose of this page
This page explains the data protection approach to Joslin IT Services support work. Read the Privacy Policy for information about our use of enquiry and customer information. An ICO registration or this policy is not a certification of compliance.
Agree the role and scope
The information and systems involved depend on the work. Before a business service starts, agree whether Joslin IT Services is acting as a controller or processing information on your instructions, the authorised task and the relevant systems. A suitable written processing agreement is required where the service calls for one.
Authorise access
Only authorise work on systems you own or are entitled to manage. Agree access for the task and how any continuing administrator or remote access will be handled. Do not send passwords or verification codes in a website form or ordinary support email.
Limit information to the task
Tell us about data restrictions before support begins. Close private documents for remote sessions and remove unnecessary personal information from screenshots. Sensitive or regulated workloads may need additional arrangements before access or transfer.
Suppliers, backups and handover
Hosting, email, remote-support and backup providers each have their own role. Agree the relevant providers, processing arrangements, backup responsibilities and retention for the service. When work or support ends, agree the return or deletion of information and the handover of access.
Incidents and privacy requests
Contact hello@joslinitservices.com or your agreed support contact promptly about a suspected information incident. Explain the affected system and time without unnecessarily disclosing personal records. Privacy requests should use the same contact route so they can be assessed and directed to the appropriate organisation.
Discuss your requirements
Raise data residency, confidentiality, retention and access requirements before work is agreed. The written service and processing arrangements should reflect what is actually being supplied, rather than assumptions made from a general website description.