Privacy Policy

Monster Creative Privacy Policy

  1. About this policy
  2. Who we are
  3. The personal data we collect indirectly from you

3.1     Cookies and similar technologies

3.2     Direct Marketing

  1. The information we collect directly from you

4.1     Contract (Including pre-contractual)

4.2     Contact form on our website

4.3     Newsletter on our website

4.4     Business development and marketing

4.5     On-site camera recording

  1. Use of social media and other professional networks
  2. Information we automatically collect
  3. Your Rights
  4. How to complain
  5. Version control and date of next review

 

1.  About this policy

We ask that you read this privacy policy carefully as it contains important information about how we process, store, and share personal data. You will find information about your rights in relation to the personal data we process, and how to raise a complaint.

This privacy policy tells you what to expect when you visit our website, engage with us as a client, prospective client, or interact with us on social media or other professional networks.

We maintain a separate HR policy for applicants and employees, available upon request.

 

2.  Who we are

The data controller responsible in accordance with the United Kingdom General Data Protection Regulation (UK GDPR) is:

Monster Creative
22A East Street, Westbourne, West Sussex, PO10 8SH
https://monstercreative.co.uk

Monster Creative is a creative agency offering:

  • Web design & development (including hosting)
  • Social media & content services
  • Search Engine Optimisation (SEO), Pay-Per-Click (PPC) Advertising
  • Branding and development
  • 3D product visualisation
  • Artwork and design services
  • Print services & reprographics

If you have any questions or queries regarding this policy, please call us on 023 92 412 444 or email hello@monstercreative.co.uk

 

 

3.  The personal data we collect indirectly from you

 

3.1    Cookies and similar technologies

Please refer to our ‘Cookies Policy’ on our website for full information.

3.2    Direct Marketing

  • Purpose and the lawful basis for processing

We collect and process B2B and B2C personal data to market our products and services to new potential clients (individuals). To grow and generate profits, we need to identify prospective clients likely to require our products and services. We communicate to individuals and companies by phone, email, or social media/professional platforms e.g., LinkedIn. We may also receive referrals from existing clients and networking groups, which include both B2B and B2C personal data.

The lawful basis we rely on to further process your data is Article 6 (10 (f), which allows us to process personal data based on a legitimate interest assessment.

We ensure the personal data we process for direct marketing meets the standards as required by the Personal Electronic Communication Regulations.

  • The personal data we collect

The data we collect and subsequently process would typically include name, business name, job role, email, address, and phone number. In addition, we may research the company based on information made publicly available. We do this to identify companies potentially interested in our products or services.

If we procure B2B data, we ensure the data meets the standards as required by the Personal Electronic Communication Regulations.

  • How personal data is stored and processed

We use third-party CRM software to store and process personal data. We have carried out due diligence and are satisfied the provider we have sourced meets the necessary security and safeguarding requirements. Your data may be transferred internationally during this processing. In this instance, we adopt the legitimising conditions for transferring your personal data by the third-party provider.

  • How long we retain your data

We only retain personal data for the specified purpose it was collected. Any data that does not satisfy our legitimate interest criteria, or has had consent revoked, will not be contacted.

We are committed to reviewing the personal data we hold periodically.

  • Your rights

You have the right to withdraw consent at any time. We may transfer your data to a suppression file unless you request your personal data is erased. You have the right to portability of your personal data.

Please refer to Your Rights in this policy for further information about your rights concerning your personal data.

 

4.  The information we collect directly from you

 

4.1    Contract (Including pre-contractual)

  • Purpose and the lawful basis for processing

We collect and process personal contact data to discuss or enter into contractual arrangements.

The lawful basis we rely on to further process your data is Article 6 (1) (b), necessary for the performance of a contract or before entering into a contract.

We may further rely on Article 6 (1) (f), if there are compelling legitimate interests within the scope of our contractual arrangement. In this instance, we have carried out a Legitimate Interests Assessment.

The nature of the products and services we offer may require us to act as data processors upon instruction from our clients, the data controllers. The personal data necessary for us to process to fulfil our contract with a client may vary. Each data controller (e.g., website owner) is responsible for ensuring they fulfil their requirements under UK GDPR.

  • The personal data we collect

It may not be possible to define each category of data we may process to fulfil contractual, or pre-contractual, obligations as this may vary depending on the nature of the contract. As a minimum we could capture contact details and invoicing information.

  • How personal data is stored and processed

We store contact details in our CRM and invoicing system.  We engage in the use of other third-party providers to fulfil our contractual obligations, which vary from client to client. We have carried out due diligence and are satisfied the provider we have sourced meets the necessary security and safeguarding requirements. Your data may be transferred internationally during this processing. In this instance, we adopt the legitimising conditions for transferring your personal data by the third-party provider.

  • How long we retain your data

Retention periods for the data we hold to fulfil a contract will vary. We retain contact information for as long as is necessary to fulfil either contractual or legal obligations, or legitimate interests.

  • Your rights

The individual we have a contract with has a right to data portability.

If we rely upon consent or legitimate interests within the context of a contract, other rights will apply. Please refer to Your Rights in this policy for further information about your rights concerning your personal data.

 

4.2    Contact form on our website

  • Purpose and the lawful basis for processing

We have a contact form on our website to allow individuals to contact us directly and respond. Depending on the nature of your enquiry, we may retain your contact information in our CRM database as a prospective customer. In addition, we may further process your data at a future date by contacting you regarding our products or services, which we consider of relevance and interest to you.

The lawful basis we rely on to process your personal data is Article 6 (1) (a), which allows us to process personal data based upon your consent, by completing and submitting a contact form to us.

The lawful basis we rely on to further process your data is Article 6 (10 (f), which allows us to process personal data based on a legitimate interest assessment.

  • The personal data we collect

We collect the name, email address, subject, plus message of the individual submitting the contact form. We use the data collected to receive and reply to enquiries submitted via our website. We may also use your contact details to contact you at a future date.

  • How personal data is stored and processed

We receive your contact information directly to our email system. We have carried out due diligence and are satisfied the provider we have sourced meets the necessary security and safeguarding requirements. Your data may be transferred internationally during this processing. In this instance, we adopt the legitimising conditions for transferring your personal data by the third-party provider.

  • How long we retain your data

We retain your contact details for as long as required to respond to your enquiry. In addition, we will retain your personal contact details for as long as necessary to facilitate communication as a prospect or customer.

  • Your rights

You have the right to withdraw consent at any time. We may transfer your data to a suppression file unless you request your personal data is erased. You have the right to portability of your personal data.

Please refer to Your Rights in this policy for further information about your rights concerning your personal data.

 

4.3    Newsletter on our website

  • Purpose and the lawful basis for processing

We have a newsletter subscription form on our website to allow individuals to join our mailing list to receive newsletters from Monster Creative.

The lawful basis we rely on to process your personal data is Article 6 (1) (a), which allows us to process personal data based upon your consent.

  • The personal data we collect

We collect the name and email address of the individual subscribing to receive a newsletter.

  • How personal data is stored and processed

Personal contact information is submitted to a third-party software provider we use to manage email communication. We have carried out due diligence and are satisfied the provider we have sourced meets the necessary security and safeguarding requirements. Your data may be transferred internationally during this processing. In this instance, we adopt the legitimising conditions for transferring your personal data by the third-party provider.

  • How long we retain your data

We retain your contact details for as long as required to respond to your enquiry. In addition, we will retain your personal contact details for as long as necessary to facilitate communication as a prospect or customer.

  • Your rights

You have the right to withdraw consent at any time. We may transfer your data to a suppression file unless you request your personal data is erased. You have the right to portability of your personal data.

Please refer to Your Rights in this policy for further information about your rights concerning your personal data.

 

4.4    Business development and marketing

  • Purpose and the lawful basis for processing

We collect and process personal contact data of our existing and previous customers to advertise the products and services we believe will be of interest to them. In addition, we pursue networking opportunities that are likely to grow and nurture our business.

We communicate either by phone, email, or social media/professional platforms e.g., LinkedIn.

The lawful basis we rely on to further process your data is Article 6 (10 (f), which allows us to process personal data based on a legitimate interest assessment.

We ensure the personal data we process for direct marketing meets the standards as required by the Personal Electronic Communication Regulations.

  • The personal data we collect

The data we collect and subsequently process would typically include name, business name, job role, email, address, and phone number.

We generally collect and process business-to-business contact data. However, it may extend to personal data (e.g., Hotmail email accounts and personal addresses) depending on the individual customer.

  • How personal data is stored and processed

We use third-party CRM software to store and process personal data. We have carried out due diligence and are satisfied the provider we have sourced meets the necessary security and safeguarding requirements.

  • How long we retain your data

We only retain personal data for the specified purpose it was collected. Any data that does not satisfy our legitimate interest criteria, or has had consent revoked, will not be contacted.

We are committed to reviewing the personal data we hold periodically.

  • Your rights

You have the right to withdraw consent at any time. We may transfer your data to a suppression file unless you request your personal data is erased. You have the right to portability of your personal data.

Please refer to Your Rights in this policy for further information about your rights concerning your personal data.

 

4.5    On-site camera recording

  • Purpose and the lawful basis for processing

We have installed a camera recording device on our premises that continually records.

The lawful basis we rely on to process your personal data is Article 6 (1) (f) Legitimate Interests. In addition, it is a feature of our commercial insurance.

The recording is a security feature to protect our property, clients, and staff. We have provided clear notices that recording is taking place.

  • The personal data we collect

The recording device will capture all activity within our premises.

  • How personal data is stored and processed

We use a third-party cloud-based system. The provider may transfer personal information outside the UK. We have reviewed the provider’s privacy statement and are satisfied with their commitment to protecting personal data.

  • How long we retain your data

We retain recording activity for a period of 30 days, after which time recording is deleted.

  • Your rights

You have the right to object to the processing and to ask us to delete your data, in certain circumstances.

Please refer to Your rights in this policy for further information about your rights concerning your personal data.

 

5.  Use of social media and other professional networks

 

  • Purpose and the lawful basis for processing

In general, we engage in the use of social media and other professional networks for the following reasons:

  • To communicate about our company news and information we consider to be of interest to our target audience
  • To share content relevant to our products and services
  • To network with existing clients and potential clients
  • To promote our products and services
  • To encourage engagement and feedback
  • Recruitment (please refer to our HR Policy, available upon request)

Every individual is free to use social media and other professional networks and engagement is based on consent.

  • The personal data we collect

Generally, we only use social media and other professional networks for prospecting activities and customer interaction.

We may provide information and communicate with individuals, which may also display on our company website. If you carry out an action on one of our social media accounts (e.g., comments, liked, contributions, etc.), you may make personal data (e.g., name, photo, user profile, comments) public.

  • How personal data is stored and processed

We generally have no influence or control of your personal data by social media or other professional networks; therefore, we cannot to make any clauses or statements regarding the purpose and scope of the processing of your data.

  • How long we retain your data

We generally have no influence or control of your personal data stored by the data controller (the social media or professional network platform).

  • Your rights

You have the right to withdraw your consent from any social media or other professional platform. Please note, we have no control over your personal data contained within third-party social media platforms and your consent is managed by you within each individual platform.

The processing of your personal data outside the UK/EU/EEA may occur. In such a case, the appropriate safeguards to protect personal data the transfer and processing of personal data are required. Please refer to the individual privacy policies below:

Instagram Privacy Policy https://help.instagram.com/519522125107875
Facebook Privacy Policy https://en-gb.facebook.com/policy.php
Twitter Privacy Policy https://twitter.com/en/privacy
LinkedIn Privacy Policy https://www.linkedin.com/legal/privacy-policy

 

 

6.  Information we automatically collect

When you visit our website, we automatically collect information from your web browser to retrieve the page from the server (unless disabled/masked by third party software). Information about your devise is required to display the correct format (e.g., mobile pages). The information we collect:

  • Your IP address and location derived from the IP address
  • Internet or other electronic network activity information, like the referring websites or services
  • The time and date of each access
  • Device settings, such as browser type, operating system, and language
  • Cookie information (please refer to our ‘Cookies and similar technologies policy’)

 

7.  Your Rights

When your personal data is processed, you are subsequently a data subject under the definition of UK GDPR and have the following rights:

Your right of access

You have the right to ask us for copies of your personal information.

Your right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing

You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing

You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. However, if you make a request (Subject Access Request), we have one month to respond to you.

For more information about your rights please visit:

https://ico.org.uk/your-data-matters/

 

8.  How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us by emailing: hello@monstercreative.co.uk

We hope that we can resolve any query or concern you raise about our use of your personal data whether it is in relation to this privacy policy, our handling of personal data or any other privacy matter. However, you may also contact the Supervisory Authority where you reside at any time or are dissatisfied with our response to your complaint. In the UK, this will be the Information Commissioner who may be contacted at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

 

9.  Version control and date of next review

This policy was last updated: March 2022

The current version number is 1.0

The date of our next formal review of this policy is: February 2023

From time to time, we may update the third-party links within this policy. For example, if they have changed. We may also correct grammatical errors or make minor cosmetic improvements. In this instance, we will adjust the version number and publish the new version.

When we review our policy in depth or introduce a change in processing, we will update the version number, publish the new version, and issue a communication (e.g., a blog update, note on website, email).

If you require access to previous versions of our privacy policy, please email:  hello@monstercreative.co.uk

 

 

Looking for an agency to partner with?

Let’s talk.

Contact Us