Privacy notice

Who we are

Vertical Desk is the trading name used by Ashley Conduit for remote lift repair-quotation support. For data protection purposes, Vertical Desk is the controller of the personal information described in this notice.

Privacy questions, rights requests and marketing objections can be sent to verticaldesk@gmail.com.

Information we use

Depending on how you deal with us, we may use:

• business contact details, including names, roles, company email addresses and telephone numbers;
• client company profiles, rates, mark-ups, quotation terms, branding and approval contacts;
• engineer account details and sign-in records;
• field reports, lift and site references, fault details, part photographs and quotation records;
• end-customer contact details supplied by a client lift company for an approved quotation;
• billing, correspondence, service and security records; and
• limited technical information needed to operate and protect the website.

Where the information comes from

Most information is supplied by you, your employer or a client lift company. For business development, we may also use limited corporate and professional contact information from public sources such as company websites, Companies House, trade associations and business directories. We record the source and check that the organisation is an appropriate corporate prospect before contact.

Why we use it

Where we rely on legitimate interests, we consider the benefit to Vertical Desk and its prospective or current clients, the limited business nature of the information, the likely expectations of the person concerned and their rights. We do not use this basis where those rights override our interests.

Business-to-business email

We may send a relevant, individually addressed introduction to a limited company, LLP or other corporate subscriber using a published business address. Every message identifies Vertical Desk and provides a simple way to object. We do not use this route for sole traders or ordinary partnerships unless an appropriate consent or existing-customer exception applies.

If you object or opt out, we stop marketing and retain only the minimum suppression information needed to make sure you are not contacted again.

Sharing and service providers

We share information only where needed to run the service, fulfil a client instruction, protect the platform or meet a legal duty. This can include the relevant client lift company and end customer, plus providers of hosting, authentication, database and file storage, transactional email and business email. Current providers include OpenAI, Cloudflare, Resend and Google.

Some providers may process information outside the United Kingdom. Where that happens, we rely on an applicable adequacy decision or approved contractual safeguards.

How long we keep information

• Prospect research is reviewed after 12 months without a meaningful interaction.
• Marketing suppression records are kept in minimal form for as long as needed to honour the objection.
• Client, quotation, billing and correspondence records are kept for the service relationship and then for the period reasonably needed for tax, accounting and legal claims, normally no more than seven years.
• Security and session records are kept for shorter periods appropriate to protecting the service.

We may keep information longer where a legal dispute, regulatory requirement or client instruction makes that necessary.

Security

We use access controls, authenticated office and engineer accounts, encrypted connections, protected cloud storage and operational checks designed to prevent unauthorised access, loss or misuse. No online service can promise absolute security, but we review the controls as the service develops.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or an objection to processing. You have an absolute right to object to direct marketing at any time. You may also complain to the Information Commissioner’s Office.

To exercise a right, email verticaldesk@gmail.com. We may need to confirm your identity before acting.

Cookies and changes

The signed-in parts of the site use strictly necessary cookies or equivalent storage for authentication and security. We do not currently use optional advertising cookies. We will update this notice if the service, providers or uses of information change materially.