Privacy policy
Privacy Policy
What is this Privacy Policy for?
This privacy policy is for www.monstershop.co.uk, operated by Monster Group (UK), and governs the privacy of users who choose to use this website.
The policy sets out the different areas where user privacy is concerned and outlines the obligations and requirements of the users, the website, and the website owners. It also details how this website processes, stores, and protects user data and information in compliance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR)
1. The Website
This website and its owners take a proactive approach to protecting user privacy and ensure necessary steps are taken to safeguard user data throughout their visit. This website complies with all UK data protection laws.
Legal Basis for Processing Personal Data
We process personal data under the following lawful bases:
Contractual Obligation – To fulfil orders, process payments, and deliver goods.
Legitimate Interest – To improve our services, manage customer queries, and analyse sales trends.
Consent – For marketing communications and cookie tracking.
Legal Compliance – To meet financial, tax, and regulatory obligations.
Users have the right to withdraw consent at any time (see Section 6 – Your Rights).
2. Use of Cookies
This website uses cookies to improve the user experience.
Users are presented with a cookie consent banner when first visiting the site, allowing them to accept, reject, or customise cookie settings.
Types of Cookies Used
Essential Cookies – Required for core website functions (e.g., checkout).
Functional Cookies – Enhance user experience (e.g., remembering login details).
Analytics Cookies – Used for website tracking (Google Analytics 4).
Marketing Cookies – Used for advertising and retargeting.
Google Analytics 4 (GA4)
We use Google Analytics 4 (GA4) to help us understand how users interact with our website and to improve performance, usability, and customer experience.
Google Analytics 4 collects information such as:
- Pages visited
- Time spent on pages
- Device and browser type
- General geographic location (country/city level)
This data is collected using cookies and similar technologies.
Analytics cookies are only activated after the user has given consent via our cookie banner. If you choose to reject analytics cookies, Google Analytics tracking will not be enabled on your device.
Google Analytics data may be processed by Google on servers outside the UK. Where this occurs, appropriate safeguards are in place in line with UK GDPR requirements.
You can withdraw or change your cookie preferences at any time via our cookie settings tool.
Users are advised that if they wish to deny the use and saving of cookies from this website onto their computer’s hard drive, they should take necessary steps within their web browser security settings to block cookies from this website and its external serving vendors.
Some external services (Google, Facebook, etc.) may place cookies on your device. You can review their privacy policies for further details.
More information on cookies can be found on the ICO website.
3. Contact & Communication
Users contacting this website and/or its owners provide personal details at their own discretion.
How We Use Your Data
- Respond to customer enquiries
- Process orders and manage accounts
- Provide after-sales support
- Send marketing communications (with user consent)
Data Retention
We only store personal data for as long as necessary:
- Customer orders: 6 years (for tax compliance)
- Marketing data: Until the user withdraws consent
- Customer service records: 2 years
Data Sharing
We do not sell or share personal data with third parties except where required for service delivery, such as:
- Payment processors
- Couriers (e.g., DPD, FedEx, DHL)
We ensure all partners comply with GDPR data protection standards.
4. Email Newsletter & Marketing Communications
Users can subscribe to our newsletter through an opt-in process.
Marketing emails require explicit consent. We do not use pre-ticked boxes. Users must actively opt in to receive marketing emails.
Users can unsubscribe at any time via the "unsubscribe" link in emails.
We may track open rates, clicks, and engagement to improve email content.
5. External Links
Although we only include relevant and safe external links, users should exercise caution before clicking.
We cannot guarantee the security of external sites and are not responsible for any damages caused by third-party links.
6. Your Data Protection Rights (Under GDPR)
Users have the following rights under the UK GDPR:
- Right to Access – Request a copy of your personal data
- Right to Rectification – Correct inaccurate data
- Right to Erasure (“Right to Be Forgotten”) – Request deletion of your data (subject to legal requirements)
- Right to Restrict Processing – Limit how we use your data
- Right to Data Portability – Receive your data in a machine-readable format
- Right to Object – Stop data processing (e.g., for marketing)
- Right to Withdraw Consent – Opt out of cookies and marketing
To exercise your rights, contact us at: admin@monstergroup.co.uk
7. Data Breach Notification Policy
We take data security seriously and have measures in place to prevent breaches.
In the event of a data breach, we will:
- Notify the ICO within 72 hours if required by law
- Inform affected users if the breach poses a risk to their data
Further information is available on the ICO website.
8. Social Media Platforms & Sharing
Users engaging with our social media accounts do so at their own discretion.
Clicking “Share” buttons may result in tracking by Facebook, Twitter, LinkedIn, or other platforms. These platforms process data according to their own privacy policies.
9. Contact Information & Further Resources
Data Protection Act 2018
Privacy and Electronic Communications Regulations 2003
Twitter Privacy Policy
Facebook Privacy Policy
Google Privacy Policy
LinkedIn Privacy Policy
Mailchimp Privacy Policy
If you have any questions about this privacy policy or wish to exercise your data rights, please contact us:
Email: admin@monstergroup.co.uk
Address:
Monster Group (UK)
Monster House
Alan Farnaby Way
Sheriff Hutton Industrial Estate
Sheriff Hutton
York
YO60 6PG
10. Updates to This Policy
This policy is reviewed regularly to ensure compliance.
Last Updated: February 2026