Privacy Policy

1. Data Controller

TrenchMonkeyz is the data controller for your personal data.

I do not have a statutory requirement to appoint a Data Protection Officer. For privacy-related questions, contact me at policy@trenchmonkeyz.com.

2. What Personal Data I Collect

2.1 Information You Provide

• Account information: name, email address, billing address, phone number, company name, VAT number
• Payment information: processed by my payment processor — I do not store full payment card numbers
• Communication data: emails, support tickets, chat messages, survey responses
• Service data: configurations, preferences, domain information, content you upload

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type
• Usage data: pages visited, time spent, click patterns, referral sources
• Cookie data: see Section 5 (Cookies) below

2.3 AI Service Data AI

• Input data: any text, files, images, or other data you submit to AI Services
• Output data: content generated by AI Services based on your input
• Interaction data: metadata about how you use AI Services

3. How I Use Your Personal Data

If I rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. AI-Specific Data Processing AI

4.2 Model Training. I may use anonymised or aggregated data to improve my AI models. I will:

• Notify you before using your data for training purposes;
• Provide an opt-out mechanism where required;
• Anonymise data where reasonably practicable before using it for training.

To opt out of your data being used for AI model training, contact me at policy@trenchmonkeyz.com.

4.3 Third-Party AI Providers. My AI Services may use third-party AI model providers (e.g., OpenAI, Anthropic, or similar). I ensure, through contractual safeguards (Data Processing Agreements), that such providers comply with GDPR requirements.

4.4 Automated Decision-Making. Where AI Services are used for automated decision-making that produces legal effects or similarly significant effects, you have the right to:

• Request human intervention;
• Express your point of view;
• Contest the decision.

(EU AI Act, Art. 14 — Transparency obligations)

4.5 Data Retention for AI Services. Input and output data from AI Services is retained only as long as necessary to provide the service and for the retention periods set out in Section 7, unless you request earlier deletion.

5. Cookies & Tracking

I use cookies and similar tracking technologies. For full details, see my Cookie Policy.

I use a cookie consent management tool that allows you to accept or reject cookies by category. Your preferences are stored and respected.

6. Data Sharing & Disclosures

I do not sell your personal data to third parties.

Where third parties process your data, I have Data Processing Agreements (DPAs) in place requiring them to protect your data to the same standards I do.

7. Data Retention

After the retention period ends, your data is securely deleted or anonymised.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where this occurs, I ensure appropriate safeguards under GDPR Art. 46:

• Adequacy decisions by the European Commission (where applicable);
• Standard Contractual Clauses (SCCs) adopted by the European Commission;
• Supplementary measures where required by the Irish DPC.

AI For AI Services, data may be processed on servers in the US or other jurisdictions. I rely on SCCs and supplementary measures to ensure adequate protection.

You may request a copy of the relevant safeguard documentation by contacting me at policy@trenchmonkeyz.com.

9. Your Rights Under GDPR

Under GDPR, you have the following rights:

To exercise any of these rights, contact me at policy@trenchmonkeyz.com. I will respond within 30 days as required by GDPR Art. 12.

10. Data Security

I implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit (TLS 1.2+)
• Encryption at rest where appropriate
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

Despite my efforts, no security measures are perfect. I cannot guarantee absolute security.

In the event of a data breach that poses a risk to your rights and freedoms, I will notify you and the Irish DPC within 72 hours as required by GDPR Art. 33–34.

11. Children's Privacy

My Services are not intended for individuals under 18. I do not knowingly collect personal data from children. If you believe a child has provided me with personal data, contact me at policy@trenchmonkeyz.com so I can delete it.

12. Third-Party Links

My websites may contain links to third-party websites. I am not responsible for their privacy practices. Please read their privacy policies.

13. Changes to This Privacy Policy

I may update this Privacy Policy from time to time. Material changes will be notified by email to registered users and by a notice on my websites. I encourage you to review this policy periodically.

14. Complaints

If you have a complaint about how I handle your personal data, please contact me first at policy@trenchmonkeyz.com. I will respond within 30 days.

If you are not satisfied with my response, you have the right to lodge a complaint with:

15. Contact

For any questions about this Privacy Policy or to exercise your rights:

TrenchMonkeyz

Email: policy@trenchmonkeyz.com
Phone: [Phone Number]