Privacy Policy
Last updated: 15 October 2026
This explains what personal data Monsta Media Mayfair Limited (“we”, “us”) collects through this website (monstamayfair.co.uk, which moved here from monstamediamayfair.uk in October 2026) and when we work together, why we use it, and your rights. We follow the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. We are the controller of your data and are registered with the Information Commissioner’s Office (ICO).
Who we are
Monsta Media Mayfair Limited, registered in England & Wales (company no. 16607933). Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. We are an independent UK company and part of the Monsta Media Group network. For anything about your data, use the form at the end of this page.
What we collect
- When you start an enquiry: your name, business name, website or Instagram, and phone number. These reach us as soon as you press Continue on the first step, so we can pick it up with you if you get cut off.
- Your answers: the five questions about your marketing (what you need, whether you run ads, the biggest frustration, a monthly budget range and timing). If you stop part-way, we receive the answers you gave before leaving.
- If you ask for a reply by email: your email address and anything you write in the message box.
- If you book a call: the booking calendar asks for your name, email, phone, a time and any notes you add. We fill in your name and phone from what you have already told us.
- If you message us on WhatsApp: your number, your WhatsApp name and your messages. WhatsApp handles these under its own terms.
- When we work together: contact details and the information about your business you share with us.
- How you use the site and respond to our ads: only if you say yes in the cookie banner. Analytics cookies (Google Analytics) record pages viewed and how you got here. Marketing cookies (the Meta pixel) record visits and actions such as starting an enquiry, so we can measure our Facebook and Instagram ads. See our Cookie Policy.
- Technical information: our hosting provider processes IP addresses and browser details to deliver the site and protect it from abuse. We don’t use these to identify you.
How we use it, and the law we rely on
- To reply to your enquiry, prepare for and hold our call, and send a proposal. These are steps you have asked us to take before any contract.
- To follow up an enquiry you started but didn’t finish, by phone, WhatsApp or email, about that enquiry only. Our legitimate interest is helping with the enquiry you began. Tell us to stop at any time and we will.
- To provide our services and manage our work together. Performance of our contract with you.
- To keep business and tax records. Legal obligation.
- To keep the site secure and stop spam. Our legitimate interest in running a safe website.
- To see how the site is used, with Google Analytics. Your consent, given in the cookie banner and withdrawable at any time.
- To measure which of our Facebook and Instagram ads bring enquiries, and to show our ads to people likely to find them useful, with the Meta pixel. Your consent, given in the cookie banner and withdrawable at any time.
We don’t sell your data, we don’t make automated decisions about you, and we don’t send you marketing unless you have asked for it.
Who we share it with
Only providers who help us run the website and our business. They act on our instructions, under contracts that require them to keep your data secure.
- Cloudflare hosts the website, protects it from attack, and keeps a secure backup copy of enquiries in the EU so none is lost if an email fails to send.
- Resend delivers the enquiry emails from the website to our team.
- Our booking and CRM platform, provided through Monsta Media Group, runs the booking calendar and keeps client records.
- Google provides Google Analytics, only if you consent to analytics cookies.
- Meta Platforms Ireland Limited (Facebook and Instagram) receives data from the Meta pixel, only if you consent to marketing cookies. For collecting that data on this site and sending it to Meta, we and Meta are joint controllers: we are responsible for asking your consent and telling you about it here, and Meta is responsible for what it does with the data afterwards, under Meta’s privacy policy. If Meta’s advanced matching is switched on, contact details you type on the site are scrambled (hashed) in your browser before they are sent.
- WhatsApp, only if you choose to message us there.
- Professional advisers, such as our accountants, where needed, and authorities where the law requires it.
Transfers outside the UK
Some of these providers, including Google and Meta, process data outside the UK, for example in the United States. Where that happens we rely on the safeguards UK law requires, such as the UK–US data bridge where the provider is certified, or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Enquiries that don’t go further: up to 24 months from our last contact, then deleted. The backup copy kept by our host deletes itself 24 months after it was made.
- Client records: while we work together, then six years after the end of the financial year in which our work ends, for tax, accounting and legal claims.
- Privacy requests and complaints: six years after we close them.
- Analytics data: 14 months in Google Analytics. Its cookies last up to 13 months.
- Meta pixel cookies: up to 90 days. Meta keeps the data it receives under its own policy.
- Your cookie choice: 12 months, then we ask again.
- Security logs at our host: a few days.
Anything we no longer need before then is deleted sooner.
Your rights
You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive a copy to take elsewhere. You can withdraw consent at any time, and you can always tell us to stop following up an enquiry. We reply within one month. If a request is complex we may need longer and will tell you why. We may ask you to confirm who you are before sharing any data.
Complaints
If you’re unhappy with how we have handled your data, please tell us first using the form below. We acknowledge every complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome.
You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the EU, you can also complain to the data protection authority in your country.
Children
Our services are for businesses. This site isn’t aimed at anyone under 18 and we don’t knowingly collect their data.
Changes
When anything here changes we update this page and the date at the top.
Use this form for any request or complaint about your personal data. You can also write to us at our registered office above.