Privacy Policy

Last updated: 18 June 2026

This page explains how THISISITUK LTD t/a this is IT collects, uses and protects personal data when you use https://thisisit.uk and how this website handles cookies, technical processing, security and acceptable use.

1. Who We Are

this is IT is the data controller for the personal data processing described on this page.

2. Information We Collect

Information you provide

You may provide personal data when you:

This may include your name, email address, phone number, company name and anything you include in your message.

Information collected automatically

When you visit this website, certain technical data may be collected automatically, including (but not limited to):

Information collected upon consent

If you accept non-essential cookies, consent-gated analytics and visitor-identification tools — Lusha and Google Analytics 4 — collect additional data, broadly:

This processing is based on your consent and can be withdrawn at any time. These tools are summarised in section 6 and described in full in section 7.

3. How We Use Personal Data

We use personal data to:

Our lawful basis typically includes legitimate interests, consent (where required) and legal obligation.

4. Website Infrastructure (Cloudflare)

This website uses Cloudflare for security, performance optimisation and content delivery. Cloudflare may process IP addresses and request metadata to protect the website and maintain reliability.

We also use Cloudflare Web Analytics to understand aggregate website traffic, such as page views, referring sources and country-level location. This is a privacy-first, cookieless measurement tool: it sets no cookies, stores no information on your device and does not fingerprint, track or profile individual visitors across sites. Because it does not rely on cookies or similar device storage, it operates without requiring consent. It is used purely to gauge overall site performance and the reach of our content.

5. Business Communications (Microsoft 365)

Email communications are handled using Microsoft 365. Emails sent to, or received from, our mailbox addresses may be processed and stored within Microsoft systems and are therefore subject to processing under their own terms and policies.

6. Third-Party Tools We Use

We treat Lusha and Google as third-party providers; this policy does not classify them as solely a processor or solely a controller, and if that categorisation changes it will be reviewed with legal advice. The cookies and data involved are detailed in section 7.

7. Cookies and Similar Technologies

Cookies are small text files stored on your device. We use a cookie consent banner (CMP-style control) so visitors can accept or decline non-essential tracking before those technologies are loaded.

Lusha Website Visits

With your consent, we use visitor-identification technology (including Lusha Website Visits) to understand which companies visit our website. This technology matches IP addresses against publicly available company information. It does not identify individual visitors or track personal browsing behaviour.

Lusha Website Visits is classified as a non-essential Analytics/Marketing cookie in our consent controls. Cookie name: Lusha Website Visits Tracking Pixel. Duration: session-based tracking.

Data collected for this purpose may include:

This processing is based on consent and can be withdrawn at any time using the Cookie preferences link in the site footer (and at the foot of this policy), or by clearing cookies and site data in your browser.

We configure this tooling to avoid individual-level profiling and do not collect names, email addresses, keystrokes, form inputs or cross-site browsing behaviour through Website Visits.

We can apply compliance controls including geographic, page and IP exclusions, and can pause or delete tracking configuration when needed.

Unsaved company visit records are automatically removed after 90 days.

Google Analytics 4

With your consent, we also use Google Analytics 4 to understand how visitors find and use our website (for example pages viewed, sessions and referral sources) so we can measure and improve our content. Google Analytics is classified as a non-essential Analytics cookie in our consent controls and is loaded only after you accept non-essential cookies.

For this purpose Google Analytics sets cookies on your device, typically _ga and _ga_<container> (and, in some cases, _gid), which are used to distinguish visitors and measure usage. This data is processed by Google as our analytics provider and may be transferred outside the UK under Google's data-transfer safeguards. The lawful basis for this processing is consent, which you can withdraw at any time using the Cookie preferences link in the site footer (and at the foot of this policy), or by clearing cookies and site data in your browser. Withdrawing consent stops further analytics and removes the Google Analytics cookies from your device.

We keep Google Analytics data only as long as needed for this purpose: both event-level and user-level data are retained for 2 months — the shortest periods Google offers — and we do not extend retention on new activity. We do not enable Google signals, the User-ID feature, advertising personalisation or user-provided (customer) data collection on this property.

Managing cookies in your browser

You can manage cookies through your browser settings. Official browser guides:

Google Chrome

Microsoft Edge

Mozilla Firefox

Apple Safari

8. Social Media and Third-Party Links

This website may include links to third-party platforms and registers from our footer and trust section, including LinkedIn, Instagram, Companies House, the Information Commissioner's Office (ICO) and Blockmark Registry. Those external sites process data under their own terms and privacy policies.

9. The this is IT Mobile App

Our iOS app, this is IT, is designed to be private by default. It does not collect, track, store remotely, or share any personal data. Specifically:

If you contact us using the app's call or email buttons, that communication is handled as described in the sections above. The app's App Store privacy information reflects this as "Data Not Collected".

The app is distributed through Apple's App Store and TestFlight. Any data Apple processes as part of that distribution (for example, download and crash statistics) is governed by Apple's privacy information.

10. Data Sharing

We do not sell or rent personal data. We may share data only where necessary:

11. Data Security

We apply proportionate technical and organisational measures, including:

No internet-based system can be guaranteed to be completely secure. If you believe you have identified a security vulnerability affecting this website or our services, please report it to [email protected]. This mailbox is monitored during normal UK business hours. We aim to acknowledge responsible disclosures promptly and investigate reported issues as appropriate. Please include sufficient detail to allow us to reproduce and investigate the issue.

12. Data Retention and Minimisation

We aim to collect and retain only the personal data needed to respond to enquiries, provide services, maintain records and meet legal obligations. Data is then securely deleted.

13. Your Rights

You have rights under UK data protection law, including rights to access, correction, deletion, restriction, objection and (where applicable) portability. Contact [email protected] to exercise your rights.

You can also submit a Subject Access Request (SAR) through the ICO's online form using [email protected] as the contact point.

14. Acceptable Website Use

You must use this website only for lawful purposes. You must not:

15. Complaints

One hopes it won't come to this, but you can contact the ICO to make a complaint.

16. Updates

The latest version of this policy will be published here alongside updated date and time stamp.