Privacy policy
Privacy Policy
Last Updated: July 2026
What is this Privacy Policy for?
This Privacy Policy applies to all websites operated by Monster Group Holdings Limited and its group companies, including www.monstershop.co.uk and our European websites, together with purchases made directly from us and through authorised third-party marketplaces.
It governs the privacy of users who choose to use our websites or purchase our products across the United Kingdom and the European Economic Area (EEA).
This policy explains how we collect, use, store, share and protect personal data in compliance with:
● UK General Data Protection Regulation (UK GDPR)
● EU General Data Protection Regulation (EU GDPR)
● Data Protection Act 2018
● Privacy and Electronic Communications Regulations (PECR)
● Applicable EU ePrivacy laws
For the purposes of data protection law, Monster Group Holdings Limited (or the relevant group entity operating the local website) acts as the data controller.
1. The Website
Our websites take a proactive approach to protecting user privacy and ensure appropriate steps are taken to safeguard personal data throughout your visit.
We comply with applicable UK and EU data protection legislation.
Legal Basis for Processing Personal Data
We process personal data under the following lawful bases:
● Contractual Obligation – To fulfil orders, process payments and deliver goods.
● Legitimate Interests – To improve our services, manage customer enquiries, prevent fraud, analyse sales trends and operate our business efficiently.
● Consent – For marketing communications and non-essential cookies.
● Legal Compliance – To meet financial, tax, regulatory and consumer protection obligations.
Where consent is relied upon, users have the right to withdraw consent at any time (see Section 7 – Your Data Protection Rights).
2. Use of Cookies
Our websites use cookies and similar technologies to improve user experience and website performance.
Users are presented with a cookie consent banner when first visiting the site, allowing them to accept, reject or customise cookie settings in accordance with UK PECR and applicable EU ePrivacy requirements.
Types of Cookies Used
● Essential Cookies – Required for core website functions such as checkout, security and fraud prevention.
● Functional Cookies – Enhance user experience by remembering preferences.
● Analytics Cookies – Used for website analytics (Google Analytics 4).
● Marketing Cookies – Used for advertising, remarketing and social media integration.
Google Analytics 4 (GA4)
We use Google Analytics 4 (GA4) to understand how users interact with our websites and to improve usability and performance.
Google Analytics 4 may collect information including:
● Pages visited
● Time spent on pages
● Device and browser type
● General geographic location (country/city level)
● Interaction data
This data is collected using cookies and similar technologies.
Analytics cookies are only activated after the user has provided consent through our cookie banner. If you reject analytics cookies, Google Analytics tracking will not be enabled on your device.
Google may process analytics data on servers located outside the UK and EEA. Where personal data is transferred internationally, appropriate safeguards are implemented in accordance with UK GDPR and EU GDPR requirements, including Standard Contractual Clauses or adequacy decisions where applicable.
Users can withdraw or amend their cookie preferences at any time using our cookie settings tool.
Cookies may also be managed through your browser settings.
Some third-party services (such as Google, Meta or LinkedIn) may set cookies when interacting with embedded content or advertising. These providers process personal data in accordance with their own privacy policies.
Further information about cookies is available from the UK Information Commissioner's Office (ICO) and relevant EU supervisory authorities.
3. Contact & Communication
Users contacting us through our websites provide personal information at their own discretion.
How We Use Your Data
We may use your personal data to:
● Respond to enquiries.
● Process orders and manage customer accounts.
● Provide after-sales support.
● Deliver products and services.
● Prevent fraud and maintain website security.
● Send marketing communications where consent has been provided or another lawful basis applies.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, tax and accounting obligations.
Typical retention periods include:
● Customer order data – 6 years
● Marketing data – Until consent is withdrawn or you unsubscribe.
● Customer service records – Up to 2 years
Retention periods may vary depending on legal requirements within the relevant jurisdiction.
Data Sharing
We do not sell personal data.
We may share personal data with trusted third parties where necessary to provide our services, including:
● Payment processors.
● Courier and logistics providers (such as DPD, FedEx and DHL).
● IT service providers.
● Marketing platforms (where consent has been given).
All third-party providers are required to process personal data in accordance with applicable data protection legislation and under appropriate contractual safeguards.
4. Purchases Through Third-Party Marketplaces
Some of our products are sold through third-party marketplaces as well as directly through our websites.
If you purchase one of our products through a third-party marketplace, that marketplace will collect and process your personal information in accordance with its own Privacy Policy.
Where necessary to fulfil your order, provide customer support, process returns or refunds, manage warranty claims, prevent fraud or comply with our legal obligations, we will receive and process personal information relating to your order.
We will only use the personal information provided to us for these purposes and in accordance with this Privacy Policy.
5. Email Newsletter & Marketing Communications
Users may subscribe to marketing communications via an opt-in process.
Marketing communications are sent only where:
● You have given explicit consent; or
● We are permitted to contact you under applicable "soft opt-in" rules.
We do not use pre-ticked boxes.
You may unsubscribe at any time using the unsubscribe link included within our marketing emails.
We may monitor email engagement, including opens and clicks, to help improve the relevance of our communications.
Purchasing a product through a third-party marketplace does not automatically mean you will receive marketing communications from Monster Group.
6. International Data Transfers
As we operate across the UK and EEA, personal data may be processed in different countries within these regions.
Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR and EU GDPR requirements. These may include:
● Adequacy decisions.
● Standard Contractual Clauses.
● Binding Corporate Rules (where applicable).
7. Your Data Protection Rights
Under UK GDPR and EU GDPR you have the right to:
● Access your personal information.
● Request correction of inaccurate or incomplete information.
● Request erasure of your personal information in certain circumstances.
● Request restriction of processing.
● Request data portability.
● Object to processing.
● Withdraw consent where processing is based on consent.
In the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
If you are located within the European Economic Area (EEA), you may lodge a complaint with the supervisory authority in the country where you live, work or where you believe a data protection issue has occurred.
To exercise your rights, please contact:
privacy@monstergroupuk.co.uk
8. Data Breach Notification
We take data security seriously and implement appropriate technical and organisational measures to protect personal data.
In the event of a personal data breach, where required by law we will:
● Notify the relevant supervisory authority within 72 hours.
● Notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms.
9. External Links
Our websites may contain links to external websites.
We are not responsible for the privacy practices or content of third-party websites.
Users should review the privacy policies of any external websites they choose to visit.
10. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Officer.
Monster Group Holdings Limited
Monster House
Alan Farnaby Way
Sheriff Hutton Industrial Estate
Sheriff Hutton
York
YO60 6PG
United Kingdom
Email: privacy@monstergroupuk.co.uk
11. Complaints Procedure
Monster Group Holdings Limited is committed to handling your personal information fairly, lawfully and transparently. If you have any concerns about how we have collected, used, stored or shared your personal information, we encourage you to contact us as soon as possible so that we can investigate and resolve the matter.
How to Make a Complaint
If you wish to make a complaint about how we have handled your personal information, please contact our Data Protection Officer.
Email: privacy@monstergroupuk.co.uk
Please provide as much information as possible, including:
● Your name and contact details.
● A description of your concern or complaint.
● Relevant dates, names or reference numbers (where applicable).
● Any supporting information that may assist with our investigation.
We may contact you to request further information if this is necessary to understand or investigate your complaint.
What Happens Next?
Upon receiving your complaint, we will:
● Acknowledge receipt of your complaint within 5 working days.
● Make appropriate enquiries to investigate your complaint.
● Keep you informed of the progress of our investigation where appropriate.
● Inform you of the outcome of our investigation without undue delay.
If You Are Not Satisfied
If you are not satisfied with our response, or you believe that we have not processed your personal information in accordance with applicable data protection legislation, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Further information about making a complaint can be found at www.ico.org.uk or by calling 0303 123 1113.
If you are located within the European Economic Area (EEA), you also have the right to lodge a complaint with the data protection supervisory authority in the country where you reside, work or where you believe a data protection issue has occurred.
Monster Group Holdings Limited will always seek to resolve concerns promptly and professionally before they are escalated externally.
12. Updates to This Policy
This Privacy Policy is reviewed regularly to ensure compliance with applicable UK and EU data protection legislation.
We may update this Privacy Policy from time to time to reflect changes in legislation, regulatory guidance or the way we process personal data. Any updates will be published on this page.
Last Updated: July 2026