Privacy policy

Privacy Policy

Last Updated: September 2026

What is this Privacy Policy for?

This Privacy Policy applies to www.monstershop.co.uk and our European Monster Shop websites, operated by Monster Group Holdings Limited and Monster Group BV.

For customers using www.monstershop.co.uk, Monster Group Holdings Limited is the relevant contracting entity and data controller.

For customers using our European Monster Shop websites, Monster Group BV is the relevant contracting entity and data controller.

This policy also applies, where relevant, to purchases of our products made through authorised third-party marketplaces.

It explains how we collect, use, store, share and protect personal data across the United Kingdom and European Economic Area (EEA) with:

• UK General Data Protection Regulation (UK GDPR)
• EU General Data Protection Regulation (EU GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• Applicable EU ePrivacy laws

1. The Website

Our websites take a proactive approach to protecting user privacy and ensure appropriate steps are taken to safeguard personal data throughout your visit.

We comply with applicable UK and EU data protection legislation.

Legal Basis for Processing Personal Data

We process personal data under the following lawful bases:

• Contractual Obligation – To process orders, take payment, deliver goods, manage returns and provide customer support.
• Legitimate Interests – To operate and improve our business, respond to customer enquiries, prevent fraud, maintain website security, analyse website usage and sales performance, improve our products and services, and administer our websites. Where we rely on legitimate interests, we ensure that our interests are not overridden by your rights and freedoms.
• Consent – To send marketing communications where required by law, use non-essential cookies and similar technologies, or where you have otherwise provided your consent. You may withdraw your consent at any time.
• Legal Compliance – To comply with applicable legal and regulatory requirements, including tax, accounting, consumer protection and fraud prevention obligations.

Where consent is relied upon, users have the right to withdraw consent at any time (see Section 7 – Your Data Protection Rights).

2. Use of Cookies

Our websites use cookies and similar technologies to improve user experience and website performance.

Users are presented with a cookie consent banner when first visiting the site, allowing them to accept, reject or customise cookie settings in accordance with UK PECR and applicable EU ePrivacy requirements.

Types of Cookies Used

• Essential Cookies – Required for core website functions such as checkout, security and fraud prevention.
• Functional Cookies – Enhance user experience by remembering preferences.
• Analytics Cookies – Used for website analytics (Google Analytics 4).
• Marketing Cookies – Used for advertising, remarketing and social media integration.

Google Analytics 4 (GA4)

We use Google Analytics 4 (GA4) to understand how users interact with our websites and to improve usability and performance.

Google Analytics 4 may collect information including:

• Pages visited
• Time spent on pages
• Device and browser type
• General geographic location (country/city level)
• Interaction data

This data is collected using cookies and similar technologies.

Analytics cookies are only activated after the user has provided consent through our cookie banner. If you reject analytics cookies, Google Analytics tracking will not be enabled on your device.

Google may process analytics data on servers located outside the UK and EEA. Where personal data is transferred internationally, appropriate safeguards are implemented in accordance with UK GDPR and EU GDPR requirements, including Standard Contractual Clauses or adequacy decisions where applicable.

Users can withdraw or amend their cookie preferences at any time using our cookie settings tool.

Cookies may also be managed through your browser settings.

Some third-party services (such as Google, Meta or LinkedIn) may set cookies when interacting with embedded content or advertising. These providers process personal data in accordance with their own privacy policies.

Further information about cookies is available from the UK Information Commissioner's Office (ICO) and relevant EU supervisory authorities.

3. Contact & Communication

Users contacting us through our websites provide personal information at their own discretion.

How We Use Your Data

We may use your personal data to:

• Respond to enquiries.
• Process orders and manage customer accounts.
• Provide after-sales support.
• Deliver products and services.
• Prevent fraud and maintain website security.
• Send marketing communications where consent has been provided or another lawful basis applies.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, tax and accounting obligations.

Typical retention periods include:

• Customer order information – 6 years from the end of the financial year in which the transaction occurred, to comply with tax, accounting and legal obligations.
• Marketing data – Until you withdraw your consent, unsubscribe from our marketing communications, or where applicable, until we no longer have a lawful basis to process your personal data.
• Customer service records – Up to 2 years after your enquiry or support case has been resolved, unless a longer retention period is required for legal or contractual reasons.

Retention periods may be extended where required by applicable law or where necessary to establish, exercise or defend legal claims. Once personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our data retention procedures.

Data Sharing

We do not sell personal data.

We may share personal data with trusted third parties where necessary to provide our services, including:

• Payment service providers – to process payments and prevent fraudulent transactions.
• Courier and logistics providers (such as DPD, FedEx, UPS, K&N and DHL) – to deliver orders and manage returns.
• IT service providers – to support the operation, security and maintenance of our systems and websites.
• Marketing platforms – where you have provided consent or another lawful basis applies.

Professional advisers, including legal, accounting and auditing services, where necessary.

Regulatory authorities, law enforcement agencies or other public bodies where disclosure is required by law or to protect our legal rights.

Where third parties process personal data on our behalf, they do so under written contracts that require them to process personal data only on our instructions, implement appropriate technical and organisational security measures, and comply with applicable UK and EU data protection legislation.

4. Purchases Through Third-Party Marketplaces

Some of our products are sold through third-party marketplaces as well as directly through our websites.

If you purchase one of our products through a third-party marketplace, that marketplace will collect and process your personal information in accordance with its own Privacy Policy.

Where necessary to fulfil your order, provide customer support, process returns or refunds, manage warranty claims, prevent fraud or comply with our legal obligations, we will receive and process personal information relating to your order.

We will only use the personal information provided to us for these purposes and in accordance with this Privacy Policy.

5. Email Newsletter & Marketing Communications

Users may subscribe to marketing communications via an opt-in process.

Marketing communications are sent only where:

• You have given explicit consent; or
• We are permitted to contact you under applicable "soft opt-in" rules.

We do not use pre-ticked boxes.

You may unsubscribe at any time using the unsubscribe link included within our marketing emails.

We may monitor email engagement, including opens and clicks, to help improve the relevance of our communications.

Purchasing a product through a third-party marketplace does not automatically mean you will receive marketing communications from Monster Group.

6. International Data Transfers

As we operate across the UK and EEA, personal data may be processed in different countries within these regions.

Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR and EU GDPR requirements. These may include:

• Adequacy decisions.
• Standard Contractual Clauses.
• Binding Corporate Rules (where applicable).

7. Your Data Protection Rights

Under UK GDPR and EU GDPR you have the right to:

• Access your personal information.
• Request correction of inaccurate or incomplete information.
• Request erasure of your personal information in certain circumstances.
• Request restriction of processing.
• Request data portability.
• Object to processing.
• Withdraw consent where processing is based on consent.

In the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

If you are located within the European Economic Area (EEA), you may lodge a complaint with the supervisory authority in the country where you live, work or where you believe a data protection issue has occurred.

To exercise your rights, please contact:

privacy@monstergroupuk.co.uk

8. Data Breach Notification

We take data security seriously and implement appropriate technical and organisational measures to protect personal data.

In the event of a personal data breach, where required by law we will:

• Notify the relevant supervisory authority within 72 hours.
• Notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms.

9. External Links

Our websites may contain links to external websites.

We are not responsible for the privacy practices or content of third-party websites.

Users should review the privacy policies of any external websites they choose to visit.

10. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details below.

United Kingdom

Monster Group Holdings Limited
Monster House
Alan Farnaby Way
Sheriff Hutton Industrial Estate
Sheriff Hutton
York
YO60 6PG
United Kingdom

European Economic Area

Monster Group BV
Van Heemskerckweg 28A & B
5928 LL Venlo
Netherlands

Email: privacy@monstergroupuk.co.uk

11. Complaints Procedure

Monster Group Holdings Limited and Monster Group BV are committed to handling your personal information fairly, lawfully and transparently. If you have any concerns about how we have collected, used, stored or shared your personal information, we encourage you to contact us as soon as possible so that we can investigate and resolve the matter.

How to Make a Complaint

If you wish to make a complaint about how we have handled your personal information, please contact us at:

privacy@monstergroupuk.co.uk

Please provide as much information as possible, including:

• Your name and contact details.
• A description of your concern or complaint.
• Relevant dates, names or reference numbers (where applicable).
• Any supporting information that may assist with our investigation.

We may contact you to request further information if this is necessary to understand or investigate your complaint.

What Happens Next?

Upon receiving your complaint, we will:

• Acknowledge receipt of your complaint within 5 working days.
• Make appropriate enquiries to investigate your complaint.
• Keep you informed of the progress of our investigation where appropriate.
• Inform you of the outcome of our investigation without undue delay.

If You Are Not Satisfied

If you are not satisfied with our response, or you believe that we have not processed your personal information in accordance with applicable data protection legislation, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are in the United Kingdom.

Further information about making a complaint in the UK can be found at www.ico.org.uk or by calling 0303 123 1113.

If you are located within the European Economic Area (EEA), you have the right to lodge a complaint with the data protection supervisory authority in the country where you reside, work or where you believe a data protection issue has occurred.

Monster Group Holdings Limited and Monster Group BV will seek to resolve concerns promptly and professionally before they are escalated externally.

12. Updates to This Policy

This Privacy Policy is reviewed regularly to ensure compliance with applicable UK and EU data protection legislation.

We may update this Privacy Policy from time to time to reflect changes in legislation, regulatory guidance or the way we process personal data. Any updates will be published on this page.

Last Updated: September 2026