Last updated: 28 October 2026
Who we are
This website is run by Drift IT Limited (“Drift IT”, “we”, “us”), part of the Medhurst Group. We are registered in England and Wales, company number 05459247, and our registered office is Unit 23–24 The Oakwood Centre, Downley Road, Havant, PO9 2NP.
For the personal information described in this policy, Drift IT is the data controller. We are registered with the Information Commissioner’s Office (ICO), registration number ZA055441.
This policy covers this website and enquiries made to us. When we provide IT support to a school, any personal information we handle on the school’s behalf is covered by our contract and data processing agreement with that school, where the school is the data controller.
Information we collect
When you visit this website
This website does not ask you to log in and does not use analytics or advertising tools. We do not use it to build a profile of you.
Like all websites, it is delivered by a web server that receives some technical information when you visit, such as your IP address, browser type and the pages you request. Our website is hosted by Cloudflare, which processes this information on our behalf to deliver the site and protect it from attacks and misuse.
When you contact us
If you phone or email us, or send us an enquiry through the form on this website, we will keep the details you give us, such as your name, school, role, contact details and the content of your enquiry, so that we can respond and, where relevant, provide our services.
Enquiry form details are sent securely from our website to our own Microsoft 365 email, where our team picks them up. We don’t keep a separate copy on the website.
When you are a customer contact
If you work at a school we support, we hold your work contact details and records of the support we provide, such as helpdesk tickets, so that we can deliver our services and manage our relationship with your school.
How and why we use your information
We only use personal information where the law allows us to. We rely on:
- Contract: to provide the services your school has asked us to provide, or to take steps at your request before entering a contract.
- Legitimate interests: to respond to enquiries, run and improve our business, keep our website and systems secure, and keep in touch with existing customers about services like those they already use. You can ask us to stop at any time.
- Legal obligation: where we need to keep records for tax, accounting or other legal reasons.
We do not sell your personal information, and we do not use it for automated decision-making.
Cookies
Cookies are small files that a website stores on your device. This website does not set any cookies of its own, and we do not use analytics, advertising or tracking cookies.
Our hosting provider, Cloudflare, may set a strictly necessary cookie to tell genuine visitors apart from automated traffic and protect the site from attacks. Because it is essential to keeping the site secure, the law does not require your consent for it, and it is not used to track you. You can block or delete cookies in your browser settings, and the website will still work.
Our Contact page can show a Google map of our office. The map is not loaded unless you click “Show map”. If you do, Google receives your IP address and may set its own cookies, under Google’s privacy policy.
Who we share information with
We only share personal information where we need to, with:
- service providers who help us run our business, such as our website host, email provider and helpdesk system, who may only use it on our instructions. The suppliers we use when supporting schools are listed on our sub-processors page;
- other companies in the Medhurst Group, where needed to deliver a service you or your school have asked for;
- professional advisers, auditors, regulators or law enforcement, where the law requires or permits it.
Some of our providers, such as Cloudflare and Microsoft, may process information outside the UK. Where they do, we make sure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement or an adequacy decision.
How long we keep information
We keep personal information only for as long as we need it for the purposes above. Enquiries that do not lead to a contract are normally deleted within two years. Customer records are kept for the length of our relationship with your school and then for up to six years, to meet our legal and accounting obligations.
Keeping your information secure
We are certified to ISO/IEC 27001, the international standard for information security, and to Cyber Essentials. We use technical and organisational measures to protect personal information from loss, misuse and unauthorised access.
Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, or to restrict how we use it;
- object to us using your information based on our legitimate interests, including for direct marketing;
- ask us to transfer information you gave us to another organisation.
Some of these rights only apply in certain circumstances. We will respond to any request within one month. To make a request, email us, call 02392 475062 or write to us at the address above.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Links to other websites
Our website links to other sites, such as our social media pages. Those sites have their own privacy policies, and we are not responsible for how they use your information.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.