Privacy Policy

1. Scope

This policy covers personal data we process when you visit mondayadvertising.com, enquire about our services, or use them as a client. It applies to individuals — where you deal with us as a company, it covers the people acting on that company's behalf.

Monday Advertising is the controller of the personal data described here, and decides how and why it is processed. You can reach us about anything in this policy at [email protected], and we will provide our full registered details to any client or data subject who asks for them.

2. What we collect

Information you give us. Name, email address, phone number, messaging handles, company name and role, business registration details, billing details, and the identity documents we request during onboarding.

Transaction information. Records of top-ups and payments, amounts, currencies, timestamps, originating bank or wallet identifiers, and information about source of funds where we are required to collect it.

Service information. The accounts allocated to you, campaign-level operational details needed to support you, and correspondence with our team.

Technical information. IP address, browser and device type, pages viewed and referring source, collected when you use the website.

3. Why we use it, and our legal basis

• To provide the Services and manage your account — performance of a contract
• To carry out identity, sanctions and anti-money-laundering checks — legal obligation
• To process payments and top-ups, and to keep financial records — contract and legal obligation
• To communicate with you about your account and respond to enquiries — contract and legitimate interests
• To secure our systems, prevent fraud and enforce our terms — legitimate interests
• To understand website usage and improve the site — legitimate interests, or consent where required
• To comply with lawful requests from regulators, courts and law enforcement — legal obligation

4. Who we share it with

We share personal data with:

• Payment, banking and digital-asset service providers used to process your transactions
• Identity verification, sanctions screening and blockchain analytics providers
• Advertising platforms and agency partners, to the extent needed to provision and support your accounts
• Professional advisers including lawyers, accountants and auditors
• IT, hosting, email and support providers acting on our instructions
• Regulators, law enforcement and courts, where legally required

We do not sell personal data, and we do not share it for third-party advertising purposes.

5. International transfers

Some of our providers are located outside your country. Where we transfer personal data out of the UK or EEA, we rely on an adequacy decision where one applies, or otherwise put in place Standard Contractual Clauses or another lawful transfer mechanism. You can request details of the safeguards used.

6. How long we keep it

We keep client and transaction records for the duration of the relationship and then for the period required by applicable anti-money-laundering and tax law — typically five to seven years from the end of the relationship or the date of the transaction. Enquiries that do not become accounts are deleted within 24 months. Website technical logs are retained for a short period for security purposes.

7. Your rights

Depending on where you are, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing is based on consent. You also have the right to complain to your data protection authority.

Some rights are limited where we are legally required to retain records — in particular, anti-money-laundering records cannot be deleted on request during the statutory retention period.

If you are a California resident, you may request disclosure of the categories of personal information collected and request deletion, subject to the same legal retention limits. We do not sell or share personal information as those terms are defined under the CCPA.

8. Cookies

The website uses only what is necessary to serve pages and keep the site secure. If we add analytics or marketing cookies in future, we will request consent first where the law requires it and update this policy.

9. Security

We apply access controls, encryption in transit, and restrict access to personal data to staff who need it. No system is completely secure, but we maintain measures appropriate to the sensitivity of the data and review them periodically.

10. Changes

We may update this policy. The effective date above will change, and we will notify clients directly where a change is material.

11. Contact

To exercise a right or ask a question about this policy, contact [email protected]. We respond within one month, and will tell you if we need longer.