These terms apply every time you book a collection, data destruction or any other service with ReCore IT. By ticking the box on our booking form, or by confirming a booking with us by email or phone, you agree to them. That includes the Data Processing Agreement in Schedule 1.
1. About these terms
1.1 Who we are. ReCore IT is the trading name of Connor Larkin, a sole trader, of York Villa, Chapel Road, CO16 0AR. We are registered with the Information Commissioner’s Office (ZC197612) and with the Environment Agency as a waste carrier, broker and dealer (CBDU648147).
1.2 Who you are. “You” means the business, school, charity or other organisation booking our services, and the person booking on its behalf. That person confirms they are authorised to agree to these terms for the organisation.
1.3 Contact. hello@recoreit.co.uk or 07808 303976.
1.4 These terms are written for organisations. If you are booking as a private individual, nothing here affects your statutory rights as a consumer.
2. Our services and booking
2.1 We offer:
- free collection of unwanted IT equipment from your premises
- secure data wiping or physical destruction of storage media
- on-site data destruction at your premises, which is charged by quote
- refurbishment, reuse and recycling of the equipment we collect
2.2 Free collection depends on the type, amount and location of the equipment. We will confirm whether your collection is free, and whether we can accept everything on your list, before we book it in.
2.3 A booking is confirmed when we confirm the date and details back to you by email, text or phone.
2.4 We mainly cover Essex, Suffolk and the surrounding areas. We may accept collections further afield, especially larger ones, and will agree any extra cost with you first.
3. Collection and your responsibilities
3.1 On the day, please make sure:
- someone is there to hand over the equipment and sign the collection form
- the equipment is ready and reasonably easy to reach
- every data-bearing device is included, such as laptops, PCs, servers and loose drives
3.2 You must own the equipment, or have the owner’s permission to dispose of it. Leased or rented equipment should not be handed over unless the leasing company has agreed.
3.3 Tell us before collection if any device holds especially sensitive data, such as health records, legal files, financial data or information about children. We can then agree the right destruction method, for example physical destruction rather than wiping.
3.4 Things we cannot accept unless agreed in advance: equipment that is leaking, swollen or visibly damaged in a way that makes it unsafe to move, such as damaged batteries, and anything that is not IT or electrical equipment. If we find these on the day, we may leave them with you.
3.5 We will list what we collect on a collection form, with serial numbers where we can read them. Please check it before signing.
4. Ownership of the equipment
4.1 Once we collect your equipment, ownership passes to ReCore IT. The only exception is the data on it, which stays yours until it is destroyed (see Schedule 1). Where we destroy drives on site, the destroyed drives also pass to us for recycling once the work is done.
4.2 After the data has been destroyed, we may refurbish and resell the equipment, donate it to charities or community groups, or break it down for recycling. We reuse or recycle as much as we can and aim to keep what we collect out of landfill.
4.3 We do not pay for equipment unless we have agreed a price with you in writing before collection. For larger batches of good-quality hardware, we may offer a payment after assessing it.
4.4 We cannot return equipment once it has been collected, so please make sure you have backed up anything you need first.
5. Data destruction and certificates
5.1 We destroy data on every storage device we collect, following NIST SP 800-88 and our Data Destruction Policy:
- hard drives are overwritten with at least one full pass
- SSDs are erased using the manufacturer’s Secure Erase command or equivalent
- any drive that is faulty, cannot be wiped, or that you ask us to destroy is physically destroyed
5.2 We do not access, copy, read or use any data on your equipment, except where that is strictly needed to check that it has been erased.
5.3 Once destruction is complete, we send you a signed certificate of destruction. It lists each device by type and serial number, the method used and the date. We aim to send it within 3 working days of collection. For on-site destruction we issue it on the same day.
5.4 We keep destruction records for 6 years, and you can ask for a copy at any time.
5.5 Removing your own data, accounts and licences before collection is good practice but not required. We will destroy the data either way. Please remove any device locks, such as Apple ID or Microsoft account locks, where you can, so we can reuse the device.
6. Prices and payment
6.1 Standard collections are free, as confirmed when you book.
6.2 On-site data destruction, and any other chargeable service, is priced by written quote. A quote is valid for 30 days.
6.3 We will invoice you after the work is done. Invoices are due within 14 days. We are not VAT registered.
7. Liability
7.1 Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot legally be limited.
7.2 We are not responsible for:
- data or software you needed but did not back up before collection
- equipment you did not own or were not allowed to dispose of
- items not listed on the collection form
- indirect losses, such as loss of profit, business or goodwill
8. Cancellations, complaints and general terms
8.1 You can cancel or move a booking at any time. Please give us as much notice as you can. We do not charge a cancellation fee.
8.2 If we arrive and no one is there, or we cannot get to the equipment, we will rearrange the visit. For a chargeable job where we were not told in advance, we may ask you to cover our reasonable travel costs.
8.3 If you are unhappy with our service, please contact us at hello@recoreit.co.uk and we will aim to put it right.
8.4 If we have to cancel, for example because of illness or vehicle problems, we will let you know as soon as possible and rebook at no cost to you.
8.5 We may update these terms from time to time. The version on our website when you book is the one that applies.
8.6 These terms are governed by the law of England and Wales, and the courts of England and Wales will deal with any dispute.
Schedule 1: Data Processing Agreement
This agreement forms part of these terms. It sets out how we handle any personal data stored on the equipment you give us, as required by Article 28 of the UK GDPR. You are the controller of that data and ReCore IT is the processor.
Details of the processing
| Subject matter | Secure destruction of data stored on IT equipment and storage media |
|---|---|
| Nature and purpose | Collecting, transporting, storing, wiping or physically destroying storage media, and confirming that the data has been destroyed |
| Duration | From collection until destruction is complete and the certificate has been issued |
| Types of personal data | Whatever is stored on the equipment. This may include contact details, financial data, special category data or children’s data. |
| People the data is about | Your staff, customers, pupils, patients, suppliers and other contacts |
Our commitments
- Instructions. We only process the data to destroy it, as set out in these terms, or on your other written instructions. We will tell you if we believe an instruction breaks data protection law.
- Confidentiality. Anyone handling your equipment for us is bound by a duty of confidentiality.
- Security. We keep equipment secure from collection until destruction. It is logged by serial number, kept in a locked vehicle or locked storage, and handled only by authorised people.
- No access or transfer. We do not access, copy or use the data, and do not move it outside the UK.
- Subcontractors. We will not let another company handle your data-bearing equipment before the data has been destroyed without your prior written permission. Any company we use will be bound by the same obligations. Equipment passed on for recycling has already had its data destroyed.
- Breaches. If any data-bearing device is lost, stolen or accessed without permission while in our care, we will tell you without undue delay, and within 24 hours of finding out. We will give you the information you need to meet your own reporting duties.
- Helping you. We will reasonably help you respond to requests from individuals and from the ICO, and with any data protection impact assessment, in relation to this processing.
- Deletion. All data is destroyed as described in section 5. We cannot return data, and you agree that destruction is the required outcome.
- Evidence and audit. We will give you the information you reasonably need to show compliance, including our certificates and records. We will allow, and help with, reasonable audits or inspections by you or an auditor you appoint, with reasonable notice.
Your commitments
You confirm you have a lawful basis for handing over the equipment for destruction, and you will tell us about any especially sensitive data before collection (see 3.3).