Privacy notice

Last updated 11 November 2026

This notice explains how Restora collects, uses and looks after your personal information when you use this website or our account-recovery service. It is written for the UK GDPR and the Data Protection Act 2018.

Who we are

Restora is the controller of personal data collected through this website and in the course of an enquiry or case. You can contact us on Telegram.

What data we collect

Depending on how you use the service, we may collect:

• your name, if you choose to give it;
• your email address;
• your Telegram username;
• account details you provide (for example, a handle, profile URL or phone number, and the platform involved);
• your answers about what happened (the situation, timeline and any other information you include in the questionnaire or later messages);
• identity or proof-of-ownership documents you send us, if we ask for them or you provide them;
• technical logs needed to run and protect the site (for example, IP address, date and time, and basic browser or device information when you submit a form or when our host records a request).

We never ask for your current password or one-time login codes. Please do not send them to us.

How we use it and our lawful bases

We use this information only for the purposes below, under the UK GDPR lawful bases indicated:

• To assess your enquiry and, if you go ahead, to work on your case and contact you about it — this is necessary to take steps at your request before a contract, and to perform the contract if you instruct us (Article 6(1)(b)).
• To keep the website secure, prevent abuse and defend legal claims — this is in our legitimate interests, balanced against your rights (Article 6(1)(f)).
• To keep records we are required to keep — where a legal obligation applies (Article 6(1)(c)).

We do not sell your data, use it for advertising, or use it to profile you for marketing.

Who we share it with

We share personal data only as needed to provide the service or as the law requires:

• Cloudflare hosts this website and our Workers (the servers that run the site and receive form submissions). Cloudflare processes data as our processor, on our instructions.
• Telegram is used to send us alerts when a new enquiry arrives, so we can respond promptly. That alert may include details from your submission. Telegram is a separate service with its own terms and privacy policy.

We may also disclose information if we are legally required to do so, or to protect our rights, your safety or someone else's.

We do not pass your information to Meta, Instagram, Facebook or WhatsApp as a package of "insider" access. If recovery work involves you using a platform's official tools, you deal with that platform yourself in your own session.

International transfers

Cloudflare and Telegram may process or store information outside the United Kingdom. Where a transfer is not covered by a UK adequacy decision, we rely on appropriate safeguards, such as the UK International Data Transfer Addendum or standard contractual clauses, or on another lawful transfer mechanism.

How long we keep it

• Enquiries that do not lead to paid work: we keep them for 12 months from the date of the enquiry, then delete or irreversibly anonymise them, unless we need to keep a shorter or longer record to deal with a complaint or legal claim.
• Cases we are instructed to work on: we keep case records for as long as the case is open and for 12 months after it closes, unless a longer period is required for legal reasons.
• Identity and proof-of-ownership documents: we delete these within 30 days of the case closing (or within 30 days of declining or ending an enquiry, if you sent them and no case is opened).
• Technical logs: kept only as long as needed for security and the reliable operation of the site, and then deleted or aggregated.

Your rights

Under the UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data rectified, and incomplete data completed;
• ask us to erase your data in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• receive data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible (data portability);
• complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.

To exercise these rights, contact us on Telegram. We may need to verify your identity before we can act on a request.

Cookies and local storage

We do not use advertising or analytics tracking cookies, and we do not use this site to follow you around the web.

The site follows your device's light or dark appearance setting and does not store a theme preference. We do not use a cookie banner because we do not use non-essential cookies or similar tracking technologies.

Security

We take appropriate technical and organisational measures to protect personal data, including transport encryption on this website and limiting access to enquiry information to people who need it for your case. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

This service is intended for people aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has given us information, please contact us on Telegram and we will delete it.

Updates to this notice

We may update this notice from time to time. The current version will always be on this page, with a new "Last updated" date. If a change is material, we will take reasonable steps to bring it to your attention — for example, by a note on the website or a message on Telegram if you have an open case.

Contact

For privacy questions or to exercise your rights, contact us on Telegram. You can also complain to the ICO at ico.org.uk.