Privacy policy

1. Who we are

This website is operated by RHENTECH IT SERVICES LIMITED, registered in England & Wales. When we refer to "we", "us", or "our" in this policy, we mean RHENTECH IT SERVICES LIMITED.

We provide cybersecurity audits, managed cybersecurity services, and strategic IT consulting to organisations across the United Kingdom.

2. What data we collect

Through the contact form on our website, we collect the personal data you choose to provide. This may include:

• Your name
• Company name
• Email address
• Phone number (optional)
• The content of your message
• Your area of interest (e.g. Audit, Managed Services, Consulting)

When present, we also collect the advertising click ID (gclid), campaign tags (utm_*), and the landing page you arrived on. These are sent with your enquiry so we know which advert or page led to it.

Analytics and advertising

We also use analytics and advertising tools. They run through Cloudflare Zaraz, a service of Cloudflare, our hosting provider, which loads them from Cloudflare's servers rather than from scripts supplied by each platform.

These tools collect the pages you view, the page that referred you, the time of your visit, your browser and device type, your IP address and the approximate location derived from it, identifiers stored in cookies on this site, and the following actions when they happen: submitting the contact form, selecting a telephone, WhatsApp or booking link, selecting a call-to-action button, scrolling through most of a page, reading an article, and following a link to another website. They do not receive the content of your enquiry, your name, your email address or your telephone number.

• Google Analytics: shows us how the site is used, so we can see which pages are useful and which are not.
• Google Ads: records the advertising click ID when you arrive from a Google advert, tells Google Ads when an enquiry or contact follows, and lets us show our adverts to people who have visited this site (remarketing).
• Meta (Facebook and Instagram): Cloudflare's servers send Meta a record of the pages you view and of enquiries and contact actions, with your IP address, browser details and an identifier created for your browser. Meta uses this to measure our adverts and to build audiences of visitors to show our adverts to.
• LinkedIn: your browser sends LinkedIn a record of the pages you view and of enquiries and contact actions. If you have LinkedIn cookies in your browser, LinkedIn can link this to your LinkedIn account. LinkedIn uses it to measure our adverts and to build audiences of visitors to show our adverts to.
• X: your browser sends X a record of the pages you view and of enquiries and contact actions. If you have X cookies in your browser, X can link this to your X account. X uses it to measure our adverts and to build audiences of visitors to show our adverts to.

Google, Meta, LinkedIn and X can combine this information with what they already hold about you from their own services and from other websites. That is how remarketing works: it lets us show our adverts on those platforms to people who have visited this site. We do not make decisions about you on the basis of this information.

3. How we use your data

We use the personal data you provide to:

• Respond to your enquiry or request
• Provide the services you have asked about
• Send relevant follow-up information related to your enquiry
• Improve our services and communications

We do not use the details you give in the contact form for marketing, and we do not pass them to advertising platforms. If we wish to send you updates beyond the scope of your original enquiry, we will ask for your consent first. Separately, the advertising tools described in section 2 are used to show our adverts to people who have visited this site; you can stop this at any time, as section 8 explains.

4. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Legitimate interest: to respond to your enquiry and provide information about our services. We have assessed that this processing is necessary for our legitimate business interests and does not override your rights and freedoms.
• Consent: where you have explicitly opted in to receive communications from us beyond the scope of your initial enquiry. You may withdraw consent at any time by contacting us.
• Legitimate interest: for the analytics and advertising tools described in section 2: understanding how this site is used and advertising our services to people who have shown an interest in them. These tools start when a page first loads, before you make a choice, and stop when you select "Do not accept". You can object at any time through "Cookie settings", and we will stop.

5. Data sharing

We do not sell, rent, or trade your personal data to any third party.

Form submissions are processed by Formspree (Formspree, Inc.), which acts as a data processor on our behalf. Formspree receives and transmits your form data so that we can respond to your enquiry. You can review Formspree's privacy policy at formspree.io/legal/privacy-policy.

Our website is hosted on Cloudflare Pages. Cloudflare may process limited technical data (such as IP addresses) as part of delivering the website. Cloudflare acts as a data processor in this context. You can review Cloudflare's privacy policy at cloudflare.com/privacypolicy.

Through Cloudflare Zaraz, Google, Meta, LinkedIn and X receive the information described in section 2. Each of them also uses it for its own purposes, under its own privacy policy:

• Google: policies.google.com/privacy
• Meta: facebook.com/privacy/policy
• LinkedIn: linkedin.com/legal/privacy-policy
• X: x.com/en/privacy

Some of these providers process information outside the United Kingdom, including in the United States. You can ask us for details of the safeguards that apply.

6. Data retention

We retain enquiry data (form submissions) for a maximum of 2 years from the date of submission. After this period, your data is securely deleted.

If your enquiry leads to a service engagement, data related to that engagement will be retained in accordance with our contractual obligations and applicable legal requirements.

Information collected by the analytics and advertising tools is held by Google, Meta, LinkedIn and X under their own retention rules. The cookies on this site expire as listed in section 8.

7. Your rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to data portability: request a copy of your data in a structured, machine-readable format.
• Right to object: object to the processing of your personal data where we are relying on legitimate interest.
• Right to restrict processing: request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, please contact us via our contact page.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

8. Cookies and your choice

When you first visit, a bar at the bottom of the page offers "Accept" and "Do not accept". The analytics and advertising tools start when the page loads, before you choose, and keep running if you select "Accept" or make no choice.

If you select "Do not accept", the tools stop and are not used again on your later visits, and we keep a record of your choice so we do not ask again.

You can change your choice at any time through "Cookie settings" at the bottom of every page, or with the button below. Deleting this site's cookies in your browser also clears it, and the bar will appear again.

Cookie settings

Cookies on this site

• rt_consent: records whether you selected "Accept" or "Do not accept" (also kept in your browser's local storage) (12 months).
• cf_consent: Cloudflare Zaraz's record of the same choice, which switches the tools on or off (set by Cloudflare Zaraz).
• cf_zaraz_client: identifies your browser to Cloudflare Zaraz (1 year).
• cfz_google-analytics_v4: lets Google Analytics count repeat visits (1 year).
• cfzs_google-analytics_v4: groups the pages of one visit (deleted when you close your browser).
• cfz_google-ads: holds the advertising click ID when you arrive from a Google advert (up to 1 year).
• cfz_facebook-pixel: holds the browser identifier sent to Meta, and the click ID when you arrive from a Facebook or Instagram advert (up to 1 year).
• Other cfz_ cookies: hold the click ID when you arrive from a LinkedIn or X advert, so an enquiry can be matched to the advert (about 1 month).

Cookies on the platforms' own domains

Google Ads requests from your browser may read or set Google's own cookies on Google domains. Google states that its "IDE" advertising cookie lasts 13 months in the United Kingdom.

LinkedIn requests from your browser may read or set LinkedIn's own cookies on LinkedIn domains, including bcookie (1 year), li_sugr (90 days), UserMatchHistory, AnalyticsSyncHistory, lms_ads and lms_analytics (30 days each) and lidc (24 hours), as listed in LinkedIn's cookie table.

X requests from your browser may read or set X's own cookies on X domains, as described in X's cookie notice.

Meta receives information from Cloudflare's servers only. No Meta script runs in your browser and Meta sets no cookies through this site.

Cloudflare, our hosting and CDN provider, may set functional cookies (such as __cflb or __cf_bm) to manage load balancing and bot protection. These are strictly necessary cookies and do not track your activity across other websites. You can learn more about Cloudflare's cookies at Cloudflare's cookie documentation.

9. Contact

If you have any questions about this privacy policy or how we handle your data, please get in touch via our contact page.

RHENTECH IT SERVICES LIMITED
Registered in England & Wales