Every organisation that retires IT hardware faces the same underlying question: how do you prove, if you’re ever asked, that the personal data on those devices was actually destroyed? For schools, engineering firms, architectural practices, and offices across Wiltshire, the answer is a certificate of data destruction, and it’s worth understanding exactly what a genuine one should contain.
Why “We Wiped It” Isn’t Enough on Its Own
A verbal assurance, or a general note saying equipment was “securely disposed of”, doesn’t hold up under scrutiny. What organisations actually need and what the UK GDPR effectively requires is documented, device-level evidence: proof that a specific device, identified by make, model, and serial number, had its data permanently destroyed on a specific date, using a specific method.
EcoTech IT provides exactly that. Every certificate of data destruction we issue is itemised and serialised, covering each individual device rather than offering a single blanket statement for an entire collection.
How the Data Is Destroyed
For any device that can still be powered on, we use NIST 800-88 compliant data wiping the internationally recognised standard for secure media sanitisation. This process overwrites every addressable sector of the drive, not just the areas visible through the operating system, to a level that makes recovery impossible by any known method.
Where a device is physically damaged or can’t be powered on, we carry out certified physical destruction of the storage media instead. Whichever method applies, it’s recorded against that specific device on your certificate.
What Schools Should Expect
Schools hold some of the most sensitive personal data covered by UK GDPR: pupil records, safeguarding files, SEND information, and staff HR data. EcoTech IT works with individual schools, sixth forms, and multi-academy trusts across Wiltshire, Somerset, Dorset, and Hampshire, arranging collections around term time, school holidays, or INSET days.
Every device collected is included on your certificate of data destruction, giving your business manager, data protection officer, or governing body a clear, auditable record.
What Corporate Clients Should Expect
The same standard applies to our corporate clients engineering firms, architectural practices, and general offices across the county, all of whom hold staff records, client files, and commercially sensitive information on retired hardware. Collections are arranged around your working hours, with same-week availability in most cases.
Beyond Data Destruction: Responsible Recycling
Once data destruction is complete, hardware that can be refurbished is assessed and given a second life; everything else goes through our zero-to-landfill recycling pipeline, with materials separated and processed through certified channels. Nothing we collect ends up in landfill, and nothing leaves us with data still on it.
Working Across Wiltshire and the South West
EcoTech IT is based at The Manor House in Potterne, near Devizes, and provides certified data destruction services to schools and businesses across Wiltshire, including Swindon, Chippenham, Trowbridge, and Salisbury, as well as Somerset, Dorset, and Hampshire. Learn more about GDPR Compliant Data Disposal Wiltshire: Protecting Your Organisation When IT Hardware Reaches End of Life
Get In Touch
If your organisation needs a straightforward, documented route to compliant IT disposal, get in touch and we’ll talk you through what’s involved.