Privacy Policy & Cookie Policy

1. Introduction

This Privacy and Cookie Policy explains how Monoforge ("we", "us", "our") collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and ensuring transparency about our data practices.

This policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Information We Collect

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request services
• Business Information: Details about your business, marketing objectives, and requirements
• Communication Records: Records of our correspondence and interactions with you
• Newsletter Subscriptions: Email address and preferences when you subscribe to our newsletter

2.2 Information Collected Automatically

• Website Usage Data: Pages visited, time spent on pages, click patterns, referral sources
• Technical Information: IP address, browser type and version, device type, operating system
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking Data: Information collected through cookies and similar technologies (detailed in Section 8)

2.3 Information from Third Parties

• Social Media Platforms: Information from social media interactions and advertising platforms
• Analytics Providers: Website analytics and user behaviour data
• Business Partners: Information received through legitimate business partnerships

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities (e.g., marketing communications, non-essential cookies)
• Contract Performance: To deliver services you have requested or to take steps before entering into a contract
• Legitimate Interests: For business operations, improving our services, and security purposes (where your rights don't override our interests)
• Legal Obligation: To comply with legal or regulatory requirements

4. How We Use Your Information

4.1 Service Delivery

• Providing digital marketing services including SEO, PPC, social media marketing, and web development
• Communicating about projects, campaigns, and service delivery
• Creating reports and analytics for your campaigns
• Managing service accounts and billing

4.2 Business Operations

• Responding to enquiries and providing customer support
• Processing payments and managing accounts
• Improving our website functionality and user experience
• Conducting business analysis and service improvement

4.3 Marketing and Communications

• Sending newsletters and marketing updates (with your consent)
• Providing information about relevant services and offers
• Conducting market research and surveys

4.4 Legal and Security

• Complying with legal obligations and regulatory requirements
• Protecting against fraud, security threats, and misuse of our services
• Exercising or defending legal claims

5. Data Sharing and Third Parties

We may share your personal data with the following categories of recipients:

5.1 Service Providers

• Technology Providers: Cloud hosting, email services, CRM systems
• Analytics Services: Google Analytics, Microsoft Clarity for website analysis
• Marketing Platforms: Mailchimp for email marketing, social media platforms
• Payment Processors: Secure payment processing services

5.2 Advertising Partners

• Google Ads: For advertising campaign management and conversion tracking
• Facebook/Meta: For social media advertising and audience insights
• Other Operational Platforms: As required for service delivery, integrations, analytics, or workflow automation

5.3 Legal Requirements

• Law enforcement agencies, courts, or regulatory bodies when legally required
• Professional advisors including lawyers, accountants, and insurers
• Potential buyers in the event of a business sale or merger

6. International Data Transfers

Some of our service providers are located outside the UK and EEA. When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries deemed adequate by the UK government
• Standard Contractual Clauses: Approved contractual protections for data transfers
• Certification Schemes: Providers certified under recognised privacy frameworks

Key international transfers include Google services (USA - covered by adequacy framework), Meta/Facebook services (USA), and Mailchimp (USA - Intuit Inc.).

7. Data Retention

We retain your personal data for the following periods:

• Client Data: For the duration of our business relationship plus 7 years for accounting purposes
• Marketing Data: Until you unsubscribe or withdraw consent, then deleted within 30 days
• Website Analytics: Up to 26 months (Google Analytics default), anonymised thereafter
• Legal Requirements: As required by applicable laws and regulations
• Enquiry Data: 3 years from last contact for potential future business opportunities

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us provide and improve our services.

8.1 Types of Cookies We Use

8.2 Managing Your Cookie Preferences

You can control cookies through:

• Cookie Banner: Choose essential-only browsing or opt in to analytics
• Browser Settings: Block or delete cookies through your browser preferences
• Contact Us: Email hello@bookedupmedia.com to update your preferences

8.3 Third-Party Tracking

Our website integrates with third-party services that may collect data:

• PostHog: Optional analytics, only after consent - see PostHog's Privacy Policy
• Mailchimp: Email marketing - see Mailchimp's Privacy Policy

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at hello@bookedupmedia.com. We will respond within one month of receiving your request.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption: Data encryption in transit and at rest
• Access Controls: Restricted access on a need-to-know basis
• Security Training: Regular staff training on data protection
• Incident Response: Procedures for detecting and responding to data breaches
• Regular Audits: Ongoing security assessments and improvements

While we strive to protect your personal data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any data breaches as required by law.

11. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Posting the updated policy on our website with a new "Last updated" date
• Sending email notification for material changes (where we have your email address)
• Displaying a notice on our website highlighting the changes

Continued use of our website and services after changes are posted constitutes acceptance of the updated policy.

13. Contact Information and Complaints

For any questions about this Privacy and Cookie Policy, to exercise your rights, or to make a complaint about our data processing, please contact us:

If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):