Privacy policy
What is this Privacy Policy for?
This privacy policy is for www.monstershop.co.uk, operated by Monster Group (UK), and governs the privacy of users who choose to use this website.
The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website, and the website owners. It also details how this website processes, stores, and protects user data and information in compliance with:
✅ UK General Data Protection Regulation (UK GDPR)
✅ Data Protection Act 2018
✅ Privacy and Electronic Communications Regulations (PECR)
1. The Website
This website and its owners take a proactive approach to protecting user privacy and ensure necessary steps are taken to safeguard user data throughout their visit. This website complies with all UK data protection laws.
Legal Basis for Processing Personal Data
We process personal data under the following lawful bases:
- Contractual Obligation – To fulfil orders, process payments, and deliver goods.
- Legitimate Interest – To improve our services, manage customer queries, and analyse sales trends.
- Consent – For marketing communications and cookie tracking.
- Legal Compliance – To meet financial, tax, and regulatory obligations.
Users have the right to withdraw consent at any time (see Section 6 – Your Rights).
2. Use of Cookies
This website uses cookies to improve the user experience.
✅ Explicit Cookie Consent: Users are presented with a cookie consent banner when first visiting the site, allowing them to accept, reject, or customise cookie settings.
Types of Cookies Used
1️Essential Cookies – Required for core website functions (e.g., checkout).
2️Functional Cookies – Enhance user experience (e.g., remembering login details).
3️Analytics Cookies – Used for website tracking (Google Analytics).
4️Marketing Cookies – Used for advertising and retargeting.
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors.
Third-Party Tracking: Some external services (Google, Facebook, etc.) may place cookies on your device. You can review their privacy policies for further details.
📌 More Info: Cookies | ICO
3. Contact & Communication
Users contacting this website and/or its owners provide personal details at their own discretion.
How We Use Your Data:
- Respond to customer inquiries.
- Process orders and manage accounts.
- Provide after-sales support.
- Send marketing communications (with user consent).
📌 Data Retention: We only store personal data for as long as necessary:
- Customer orders: 6 years (for tax compliance)
- Marketing data: Until the user withdraws consent
- Customer service records: 2 years
🔹 Data Sharing: We do not sell or share personal data with third parties except where required for service delivery, such as:
- Payment processors
- Couriers (DPD, FedEx, DHL)
We ensure all partners comply with GDPR data protection standards.
4. Email Newsletter & Marketing Communications
Users can subscribe to our newsletter through an opt-in process.
✅ Marketing Emails Require Explicit Consent
- We do not use pre-ticked boxes.
- Users must actively opt in to receive marketing emails.
- Users can unsubscribe at any time via the "unsubscribe" link in emails.
📌 How We Track Emails: We may track open rates, clicks, and engagement to improve email content.
5. External Links
Although we only include relevant, safe external links, users should exercise caution before clicking.
🔹 Risk Disclaimer: We cannot guarantee the security of external sites and are not responsible for any damages caused by third-party links.
6. Your Data Protection Rights (Under GDPR)
Users have the following rights under the UK GDPR:
🟢 Right to Access – Request a copy of your personal data.
🟢 Right to Rectification – Correct inaccurate data.
🟢 Right to Erasure ("Right to Be Forgotten") – Request deletion of your data (subject to legal requirements).
🟢 Right to Restrict Processing – Limit how we use your data.
🟢 Right to Data Portability – Receive your data in a machine-readable format.
🟢 Right to Object – Stop data processing (e.g., for marketing).
🟢 Right to Withdraw Consent – Opt out of cookies and marketing.
📌 How to Exercise Your Rights: Contact us at admin@monstergroup.co.uk
7. Data Breach Notification Policy
We take data security seriously and have measures in place to prevent breaches.
✅ In the event of a data breach, we will:
- Notify the ICO within 72 hours if required by law.
- Inform affected users if the breach poses a risk to their data.
🔗 Learn more: Personal data breaches | ICO
8. Social Media Platforms & Sharing
Users engaging with our social media accounts do so at their own discretion.
🔹 Social Media Tracking: Clicking "Share" buttons may result in tracking by Facebook, Twitter, LinkedIn, etc.. These platforms process data according to their privacy policies.
9. Contact Information & Further Resources
Privacy and Electronic Communications Regulations 2003
Privacy and Electronic Communications Regulations 2003 - The Guide
If you have any questions about this privacy policy or wish to exercise your data rights, please contact us:
📧 Email: admin@monstergroup.co.uk
📍 Address: Monster Group (UK), Monster House, Alan Farnaby Way, Sheriff Hutton Industrial Estate, Sheriff Hutton, York, YO60 6PG.
10. Updates to This Policy
This policy is reviewed regularly to ensure compliance. Any changes will be posted here.
📅 Last Updated: January 2025