Overview
We are The 100th Monkey Ltd, a private limited company registered England & Wales (No. 8033287), based at 36 Whiteladies Road, Bristol BS8 2LG. We’re committed to protecting your privacy and complying with UK data protection laws, including the UK and EU GDPR.
Your Rights
Under data protection laws, you have the right to:
To exercise your rights, contact us at: hello@100monkey.co.uk. You may need to verify your identity. You also have the right, at any time, to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
Types of personal data we collect
We collect personal data in these main categories:
Why we use your data
We process your data only when we have a lawful basis, including:
Who we disclose personal data to
Where necessary, we may share data with:
All third-party processors are bound by contract to keep your data secure and confidential.
Data retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
| Data Type | Purpose of Retention | Retention Period | Disposal Method | Justification |
| Participant training session videos and/or audio | Internal review, feedback, and quality assurance | 1 month from session date | Secure deletion | Sufficient for internal reviews and feedback purposes. |
| Other participant data (e.g., survey responses, psychometric assessments) | Feedback, quality assurance, course follow-up and record-keeping | 1 month from session date, or longer according to contractual obligations | Secure deletion or anonymisation | Sufficient for feedback purposes and allows for potential re-engagement while complying with GDPR principles |
| Participant contact data | Course follow-up and record-keeping | 3 years from session date, or longer according to contractual obligations | Secure deletion or anonymisation | Allows for potential re-engagement while complying with GDPR principles. |
| Business and operations data | Record-keeping and contractual obligation | 6 years from engagement, or according to contractual obligations | Secure deletion or anonymisation | Allows for potential re-engagement while complying with GDPR principles. Meets contractual obligations. |
| Marketing content (if consented) | External promotional purposes | Until consent is withdrawn | Secure deletion | Retained only as long as consent is valid. |
By law we have to keep basic information about our clients for six years after they cease being clients.
In some circumstances you can ask us to delete your data. If you would like to know what personal data about you is held, please contact us by emailing hello@100monkey.co.uk.
We may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Marketing
We may use your personal data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (“marketing”).
You will receive marketing communications from us if you have requested information from us, or signed up to our newsletter via the website.
We strive to provide you with choices regarding certain personal data uses, namely around marketing and advertising. In particular: opt-in consent is offered and that you can ask us or third parties to stop sending you marketing messages at any time by following the opt-out (unsubscribe) links on any marketing message sent to your or by contacting us at any time.
Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our sites, you are responsible for keeping this password confidential, and for all use made of your account with such password. We ask you not to share a password with anyone.
While we secure your data, transmission via the internet is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We are Cyber Essentials Plus accredited which is the UK Government standard for managing information security.
International transfers
Your data is processed and stored primarily in the UK or the European Economic Area (EEA). However, several of our external third parties are based outside EEA, including the United States. Whenever we transfer your personal data out of the EEA, we ensure an appropriate level of protection is in place. This includes:
We regularly review our international mechanisms to ensure compliance.
Third-party links
Our website and services may include links to or tools from third-party sites. We are not responsible for their privacy practices. Please check their policies.
Changes and contact
This policy may be amended or updated from time to time and any revisions will be posted to this page, so please check back regularly. Last updated: 23/04/25.
If you have any questions, please contact us at hello@100monkey.co.uk.