Privacy policy

How we collect, use and protect your personal data.

Last updated: 14 October 2026

1. Introduction

Monmouth IT (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store and protect information when you visit our website, use our services or contact us. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws.

2. Who we are

We provide IT consultancy, cost reduction, AI, cyber security and digital transformation services for businesses across South Wales, the South West and the Midlands. Monmouth IT is a trading name of Thomas & Russell Ltd, registered in England and Wales (company number 17220536), registered office 35 Wonastow Road, Monmouth, NP25 5AH. Thomas & Russell Ltd is the controller of personal data collected through this website. Contact: hello@monmouthit.co.uk.

3. Data we collect

  • Contact information: name, email address, phone number, company name and job title.
  • Technical data: limited, aggregated website usage information (see “Analytics” below).
  • Service data: details you provide so we can deliver our services or manage your account.
  • Marketing preferences: your choices about receiving updates or newsletters.

We do not collect sensitive personal data unless it is explicitly required for contractual or legal purposes.

4. How we use your data

  • Respond to enquiries and provide quotations
  • Deliver and manage our IT and consultancy services
  • Communicate with you about ongoing projects
  • Improve our website, services and user experience
  • Send relevant updates or marketing communications (only with your consent)
  • Meet legal and regulatory obligations

We only use your data when the law allows us to, typically on one of these bases: contract (when necessary to perform our services), legitimate interests (to operate and improve our business, including replying to enquiries), consent (for optional communications or marketing) or legal obligation (to comply with regulations).

5. Analytics

We use Cloudflare Web Analytics, which is privacy-friendly and does not use cookies or track you across other websites. We do not use advertising or tracking cookies.

6. The AI readiness quiz and calculator

Your quiz answers and calculator inputs are processed entirely in your browser and are not sent to us. Your latest quiz score may be stored in your browser's local storage so you can see it again; you can clear it at any time.

6a. How we handle contact form enquiries

When you contact us through the website, your enquiry is stored securely and an AI service (Anthropic's Claude) helps us sort it — for example, identifying spam and summarising what you need — so we can reply faster. Your message, name and organisation are processed for this purpose; your full email address is not sent to the AI service, and please don't include sensitive personal information in your message. Under its commercial terms, Anthropic does not use this data to train its models. A person reviews genuine enquiries; messages identified as spam or unsolicited sales pitches are kept for 30 days and then deleted automatically. No decisions with legal or similarly significant effects are made automatically. If we send you an email confirmation, it is delivered by our email provider, Resend.

7. Data storage and security

We store personal data securely using appropriate technical and organisational measures, including encryption, access control and secure hosting. The website is hosted on Cloudflare; enquiries are delivered to our business email. Information is kept only as long as necessary for the purposes it was collected for, or as required by law — enquiries that don't lead to work are deleted within 24 months, and spam within 30 days.

8. Sharing your data

We do not sell or rent your information. We may share limited data with trusted service providers who support our operations (for example hosting and email providers or IT vendors), and with legal, regulatory or governmental bodies when required by law. All third-party providers are bound by data protection and confidentiality obligations.

9. International data transfers

Some of our providers — Cloudflare (hosting and storage), Anthropic (AI enquiry sorting) and Resend (confirmation emails) — are based in, or may process data in, the United States. Where personal data is transferred outside the UK, we rely on the UK Extension to the EU–US Data Privacy Framework where the provider is certified, or the UK International Data Transfer Addendum to standard contractual clauses.

10. Your rights

You have the right to access the personal data we hold about you; request correction or deletion; object to or restrict processing; withdraw consent at any time (where processing is based on consent); and lodge a complaint with the Information Commissioner's Office (ico.org.uk). To exercise your rights, email hello@monmouthit.co.uk.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.