Sure Restore Privacy Policy
Effective date 01/11/2026.
This policy explains how Sure-Restore handles personal information when you use our website and Service or contact us.
Sure-Restore is operated by Sure Restore Ltd, a company registered in the United Kingdom, with its registered office at Devonshire House, Manor Way, Borehamwood, Hertfordshire, WD6 1QQ. Contact cs@sure-restore.com for privacy enquiries or requests.
We are controller for our account, billing, support and security records. For personal data within customer Trello content, we normally act as processor under section 10 of the Terms and Conditions.
We receive information from you, your browser, your authorised Trello account and our payment and service providers. This includes account and contact details, Trello identifiers and authorisation tokens, subscription and transaction records, support correspondence, IP addresses and activity or security logs. Stripe handles payments and provides the billing information needed to manage your subscription.
Trello backup content may contain personal information about you and other people. The information included depends on the Trello content covered by your subscription.
We use account and contact information to provide your subscription and respond to requests, relying on our contract with you. For an organisation’s contacts, we rely on our legitimate interest in managing the customer relationship.
We rely on legitimate interests to secure and maintain the Service, prevent fraud, investigate problems and protect legal rights, taking individuals’ interests into account. We use billing and other records to meet legal accounting, tax and regulatory obligations.
Where required, we obtain consent for optional marketing and nonessential cookies. You can withdraw consent at any time, without affecting earlier lawful use. Required account and payment information enables us to establish and administer your subscription.
We process customer Trello content only to provide the Service described in our agreement, using the customer’s settings and requested operations, with necessary support and security. If your information is on another customer’s board, contact that customer about its use or your rights. We will assist the relevant controller where appropriate. The Terms and Conditions describe the processing, retention and deletion arrangements.
We use Amazon Web Services (AWS) for hosting and Stripe for subscription payments and billing. AWS acts as our processor or subprocessor according to the data involved. Stripe acts as our processor or an independent controller according to the processing purpose; see https://stripe.com/privacy. We also share information as needed with contracted email and support providers, professional advisers and authorities where required by law. Authorised personnel access information only as needed for their role and are subject to confidentiality obligations.
We apply technical and organisational measures appropriate to the risks, including access controls and encryption.
Customer backup files and storage snapshots held in AWS are encrypted at rest. Data moving between our AWS servers and their attached storage is also encrypted. Connections to our website are protected by HTTPS using TLS.
We serve customers worldwide. The application and customer backup data are hosted in AWS Ireland, and customer support is provided from the UK and Europe. Stripe may process payment and billing information internationally.
Where international transfer rules apply, we rely on recognised adequacy decisions or approved contractual safeguards, with additional protections where required. UK adequacy regulations cover transfers to Ireland. Stripe explains its transfer arrangements at https://stripe.com/legal/dpa/faqs. Where we rely on contractual safeguards, relevant information and copies are available at cs@sure-restore.com.
Customer backups follow the 365-day retention and post-termination return and deletion periods in section 8 of the Terms and Conditions. We remove or disable Trello authorisation tokens when they are no longer needed.
For our own business records, we retain account administration information for up to 24 months after closure; support correspondence for up to 24 months after resolution; security and activity logs for up to 24 months from creation; and contract, invoice and transaction records for six years after the relevant accounting period, or another legally required period. Relevant records may be kept longer where needed for a dispute, incident or legal obligation, with periodic review.
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your information and withdraw consent. Email cs@sure-restore.com. We may verify your identity and authority and normally respond within one month, explaining any lawful extension. For information we process for a customer, we forward or assist with the request as appropriate.
Right to object: you may object to processing based on legitimate interests because of your circumstances. We will stop unless we have compelling overriding grounds or need the information for legal claims. You can object to direct marketing at any time.
You may complain to us at the same address. We acknowledge data protection complaints within 30 days, investigate without undue delay and keep you informed. You can also complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or the relevant regulator where you live, work or believe an infringement occurred.
We use cookies or equivalent storage for login, session security and essential preferences. Where consent is required for optional technologies, we obtain it before use and provide a way to refuse or withdraw it.
The Service is intended for customers with legal capacity to enter the agreement. We update this policy when practices or legal requirements change and notify customers of significant changes as appropriate.