Legal

Privacy policy

Last updated: September 2026

1. Who we are

This website is operated by RHENTECH IT SERVICES LIMITED, registered in England & Wales. When we refer to "we", "us", or "our" in this policy, we mean RHENTECH IT SERVICES LIMITED.

We provide cybersecurity audits, managed cybersecurity services, and strategic IT consulting to organisations across the United Kingdom.

2. What data we collect

We collect only the personal data you voluntarily provide through the contact form on our website. This may include:

  • Your name
  • Company name
  • Email address
  • Phone number (optional)
  • The content of your message
  • Your area of interest (e.g. Audit, Managed Services, Consulting)

When present, we also collect the advertising click ID (gclid), campaign tags (utm_*), and the landing page you arrived on. These are sent with your enquiry so we know which advert or page led to it.

We use Google Analytics and Google Ads conversion measurement, both delivered through Cloudflare Zaraz. Cloudflare is already named as our data processor in section 5 below.

Google Analytics records how this site is used: the pages you view, the page that referred you, your browser and device type, and your approximate location derived from your IP address. We use this to see which pages are useful and which are not.

When you arrive at this site from a Google advert, the advertising click ID is recorded. When you submit an enquiry through our contact form, Google Ads is told that an enquiry happened.

There is no remarketing, no audience lists, and no cross-site profiling.

3. How we use your data

We use the personal data you provide to:

  • Respond to your enquiry or request
  • Provide the services you have asked about
  • Send relevant follow-up information related to your enquiry
  • Improve our services and communications

We will never use your data for unsolicited marketing. If we wish to send you updates beyond the scope of your original enquiry, we will seek your explicit consent first.

4. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

  • Legitimate interest - to respond to your enquiry and provide information about our services. We have assessed that this processing is necessary for our legitimate business interests and does not override your rights and freedoms.
  • Consent - where you have explicitly opted in to receive communications from us beyond the scope of your initial enquiry. You may withdraw consent at any time by contacting us.

5. Data sharing

We do not sell, rent, or trade your personal data to any third party.

Form submissions are processed by Formspree (Formspree, Inc.), which acts as a data processor on our behalf. Formspree receives and transmits your form data so that we can respond to your enquiry. You can review Formspree's privacy policy at formspree.io/legal/privacy-policy.

Our website is hosted on Cloudflare Pages. Cloudflare may process limited technical data (such as IP addresses) as part of delivering the website. Cloudflare acts as a data processor in this context. You can review Cloudflare's privacy policy at cloudflare.com/privacypolicy.

Through Cloudflare Zaraz, Google receives the site usage data described in section 2, and is told when an enquiry follows a Google advert. Google acts as a data recipient in this context. You can review Google's privacy policy at policies.google.com/privacy.

6. Data retention

We retain enquiry data (form submissions) for a maximum of 2 years from the date of submission. After this period, your data is securely deleted.

If your enquiry leads to a service engagement, data related to that engagement will be retained in accordance with our contractual obligations and applicable legal requirements.

7. Your rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access - request a copy of the personal data we hold about you.
  • Right to rectification - request correction of inaccurate or incomplete data.
  • Right to erasure - request deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to data portability - request a copy of your data in a structured, machine-readable format.
  • Right to object - object to the processing of your personal data where we are relying on legitimate interest.
  • Right to restrict processing - request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, please contact us via our contact page.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

8. Cookies

Cloudflare Zaraz may set these cookies on this site: cf_zaraz_client, which identifies your browser to Zaraz (1 year); cfz_google-analytics_v4, which lets Google Analytics count repeat visits (1 year); cfzs_google-analytics_v4, which groups the pages of one visit (deleted when you close your browser); and cfz_google-ads, which holds the advertising click ID when you arrive from a Google advert, so an enquiry can be matched to the advert that led to it (1 year). When an enquiry follows a Google advert, Google may also set its own cookie on Google domains.

Cloudflare, our hosting and CDN provider, may set functional cookies (such as __cflb or __cf_bm) to manage load balancing and bot protection. These are strictly necessary cookies and do not track your activity across other websites. You can learn more about Cloudflare's cookies at Cloudflare's cookie documentation.

9. Contact

If you have any questions about this privacy policy or how we handle your data, please get in touch via our contact page.

RHENTECH IT SERVICES LIMITED
Registered in England & Wales