Privacy policy
Last updated: July 2026
This Privacy Policy explains how Monsoon Marketing Limited, trading as Monmark, collects, uses, shares and protects your personal data when you visit our website, place an order, or otherwise interact with us. We are committed to protecting your privacy and handling your data in an open and transparent manner.
1. Who we are
For the purposes of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and the Data Protection Act 2018, the data controller is:
| Legal entity | Monsoon Marketing Limited (trading as "Monmark") |
| Company number | 01945781 (registered in England & Wales) |
| Registered / trading address | 63 Teignmouth Road, Clevedon, North Somerset, BS21 6DL, United Kingdom |
| info@monmark.co.uk | |
| Telephone | 0800 146 235 (freephone) / 01275 870 370 |
2. The personal data we collect
Depending on how you interact with us, we may collect and process the following categories of personal data:
| Category | Examples |
|---|---|
| Identity data | Title, first name, last name, business/company name, job title. |
| Contact data | Billing address, delivery address, email address, telephone number. |
| Order & transaction data | Products purchased, garment sizes and quantities, branding/heatsealing/decoration artwork and instructions, order history, invoices, and payments made and received. |
| Financial data | Payment card details are processed directly by our payment provider; we do not store full card numbers. We may hold partial card references, account details for trade accounts, and credit terms. |
| Account data | Username, password (stored in encrypted form), account preferences and marketing preferences. |
| Technical data | IP address, browser type and version, device information, time zone, operating system and platform. |
| Usage data | Information about how you use our website, pages viewed, and products browsed. |
| Marketing & communications data | Your preferences in receiving marketing from us, and your communication preferences. |
We do not routinely collect any special category data (such as data revealing health, race, religion or political opinions) and ask that you do not send it to us unless strictly necessary.
3. How we collect your data
- Directly from you — when you create an account, place an order or request a quote, contact us by phone, email or our contact form, or sign up to marketing.
- Automatically — as you interact with our website, we may automatically collect technical and usage data through cookies and similar technologies (see section 10).
- From third parties — we may receive data from analytics providers, payment providers, and delivery partners, and, for trade accounts, from credit reference agencies where applicable.
4. How and why we use your data
| Purpose | Lawful basis |
|---|---|
| To process and fulfil your orders, including garment decoration/heatsealing, and to arrange delivery | Performance of a contract |
| To manage your account and provide customer support | Performance of a contract |
| To take payment and manage refunds, and to prevent and detect fraud | Performance of a contract; legal obligation; legitimate interests |
| To send service communications (order confirmations, dispatch notices, quotes) | Performance of a contract |
| To send marketing communications about similar products and offers | Consent, or legitimate interests (existing customers — "soft opt-in") |
| To improve our website, products and services, and for analytics | Legitimate interests; consent (for non-essential cookies) |
| To comply with our legal and regulatory obligations (e.g. accounting and tax) | Legal obligation |
5. Our lawful bases for processing
Under the UK GDPR and EU GDPR we rely on one or more of the following lawful bases: performance of a contract with you; compliance with a legal obligation; your consent; and our legitimate interests (namely running, growing and improving our business), provided these are not overridden by your rights and freedoms. Where we rely on consent, you may withdraw it at any time by contacting us or using the unsubscribe link in any marketing email.
6. Who we share your data with
We do not sell your personal data. We share it only with parties who help us operate our business, under appropriate contractual safeguards, including:
- Delivery partners — FedEx and any other couriers we use, to deliver your order.
- Payment providers — [e.g. Stripe / PayPal / Opayo / Worldpay], to process payments securely.
- Website & e-commerce platform — [e.g. Shopify / WooCommerce / bespoke platform provider] and our website hosting provider.
- IT, email and communications providers — who host our systems and send communications on our behalf.
- Marketing & analytics providers — [e.g. Google Analytics, Mailchimp / Klaviyo, Meta].
- Professional advisers — accountants, auditors, insurers and lawyers where necessary.
- Authorities and regulators — where we are required to do so by law.
If our business is sold or merged, personal data may be transferred to the new owner.
7. International data transfers
We are based in the United Kingdom and primarily serve customers in the UK and EU. Some of our service providers may process data outside the UK/European Economic Area (EEA). Where they do, we ensure an appropriate safeguard is in place, such as an adequacy decision, the UK International Data Transfer Agreement / Addendum, or the EU Standard Contractual Clauses. You may contact us for further information on the safeguards we use.
8. How long we keep your data
We keep personal data only for as long as necessary for the purposes set out in this policy. In general we retain order and transaction records for at least 6 years after the end of our relationship, to meet accounting and tax obligations (as required by HMRC). Account and marketing data is kept until you close your account or withdraw consent, after which it is deleted or anonymised, subject to any legal retention requirement.
9. Data security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including encryption in transit (SSL/TLS), access controls, and staff confidentiality obligations. Where you have a password for your account, you are responsible for keeping it confidential. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO (and, where required, you) in accordance with our legal obligations.
10. Cookies
Our website uses cookies and similar technologies to make it work, to remember your preferences, and to help us understand how the site is used. Non-essential cookies (such as analytics and marketing cookies) are only set with your consent, which you can manage through our cookie banner or your browser settings. [Optional: link to a separate Cookie Policy here.]
11. Your rights
Under UK and EU data protection law you have the right to:
- be informed about how your data is used (this policy);
- access a copy of your personal data;
- request rectification of inaccurate or incomplete data;
- request erasure of your data ("right to be forgotten") in certain circumstances;
- restrict or object to our processing in certain circumstances;
- request the portability of your data;
- withdraw consent at any time where we rely on it; and
- object to direct marketing at any time.
To exercise any of these rights, contact us using the details below. We will respond within one month. You will not usually have to pay a fee.
12. Children
Our website and products are intended for business customers and adults. We do not knowingly collect personal data from children under 16. If you believe we have done so, please contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. The current version will always be posted on our website with the "last updated" date shown above. Material changes will be brought to your attention where appropriate.
14. How to contact us & complaints
For any questions about this policy or to exercise your rights, contact us at info@monmark.co.uk, by phone on 0800 146 235, or by post at Monsoon Marketing Limited, 63 Teignmouth Road, Clevedon, North Somerset, BS21 6DL.
If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. If you are in the EU, you may also complain to your local supervisory authority.