Privacy policy

Last updated: 26 September 2026

My Green Monster respects your privacy and is committed to handling personal information responsibly.

This privacy policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it and the rights you have in relation to it.

Who we are

My Green Monster provides marketing intelligence, strategy and implementation services.

The data controller is:

Louis Finch, a sole trader trading as My Green Monster

Email: hello@mygreenmonster.co.uk

References to “we”, “us” and “our” in this policy mean My Green Monster.

Information we collect

The information we collect depends on how you interact with us.

Enquiries

If you contact us through the website, by email or through another communication method, we may collect:

• your name;
• email address;
• company or organisation;
• the contents of your message; and
• any other information you choose to provide.

Meeting bookings

If you arrange a meeting with us, we may collect:

• your name;
• email address;
• company or organisation;
• meeting details;
• answers you provide when booking; and
• any other information you choose to provide.

We use Calendly to provide our online booking system.

Client engagements

If you become a client, we may collect and use information needed to understand your business, manage the engagement and deliver the agreed work.

This may include:

• names and business contact details;
• information about your business, customers and marketing;
• correspondence and meeting notes;
• project information and research;
• information contained in documents or systems you give us access to;
• proposals, agreements and project records; and
• billing and payment information.

We only ask for information that is relevant to the work being undertaken.

Client-controlled personal information

Some projects may require us to access or analyse personal information controlled by a client, such as customer, enquiry or marketing data.

Where we process that information solely on a client's instructions, the client remains the data controller and My Green Monster acts as a data processor.

How that information is processed will be governed by the relevant engagement terms and, where appropriate, data-processing arrangements between us and the client.

Technical information

Our website and the services supporting it may process technical information including:

• IP address;
• browser and device information;
• pages requested;
• date and time of requests;
• website interactions; and
• security and diagnostic information.

Some of this information is necessary to operate, secure and maintain the website.

We use Cloudflare for website infrastructure, security and related services.

Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use our website and help us improve it.

Google Analytics may collect information including:

• pages viewed and interactions with the website;
• session information;
• approximate geographic location;
• browser and device information; and
• a pseudonymous identifier used to distinguish users and sessions.

Google Analytics uses a first-party cookie called _ga where analytics storage has been permitted.

Google states that IP addresses from UK visitors may be used during collection to determine approximate geographic information before being discarded rather than logged within Google Analytics.

We use this information to understand website performance and visitor behaviour. We do not use Google Analytics to identify visitors by name.

We will only enable optional analytics technologies in accordance with the choices you make through our cookie controls.

Google Search Console

We use Google Search Console to understand how our website appears and performs in Google Search.

This may provide us with information such as:

• search queries;
• impressions;
• clicks;
• average search positions; and
• pages appearing in search results.

We use this information to understand and improve the visibility and performance of our website.

How we use personal information

We may use personal information to:

• respond to enquiries;
• arrange and manage meetings;
• determine whether we can help with a potential project;
• prepare proposals;
• provide agreed strategy, research or implementation work;
• communicate with clients and prospective clients;
• manage our relationship with you;
• maintain business and financial records;
• operate, maintain and secure our website;
• prevent spam, abuse or malicious activity;
• understand and improve our website and services;
• measure website and search performance; and
• comply with legal or regulatory requirements.

We do not sell personal information.

Our lawful bases

UK data protection law requires us to have a lawful basis for using personal information.

The lawful basis depends on why the information is being processed.

Contract

We may process information you provide when you contact us, discuss a potential engagement or request a proposal where this is necessary to take steps at your request before entering into a contract.

If you become a client, we may process information where necessary to provide the services we have agreed with you and manage that relationship.

Legitimate interests

We may process information where this is necessary for our legitimate business interests and those interests are not overridden by your rights.

These interests may include:

• responding to business enquiries;
• managing business relationships;
• maintaining appropriate business records;
• operating and improving our services;
• understanding how our website and business perform; and
• protecting our website, systems and business from misuse.

Legal obligations

We may process or retain information where necessary to comply with legal, tax, accounting or regulatory obligations.

Consent

Where we rely on your consent, including for optional website technologies where applicable, you can withdraw that consent at any time.

Cookies and similar technologies

Our website uses cookies and similar technologies.

Some technologies may be necessary for:

• website operation;
• security;
• fraud or spam prevention; and
• remembering privacy choices.

We may also use optional analytics technologies such as Google Analytics.

Where we operate those technologies on the basis of consent, they will not be enabled until you make the relevant choice through our cookie controls.

You can change your cookie choices at any time using Cookie settings in the website footer.

Further information about the technologies used by this website, their purposes and their duration is provided in our Cookie Policy.

Calendly

We use Calendly to allow visitors to book meetings through our website.

When you use the Calendly booking interface, information you provide is processed so that your appointment can be arranged and managed.

Calendly may process personal information in the United States and other countries outside the United Kingdom.

Where applicable to UK personal information, Calendly provides international-transfer safeguards through its data-processing arrangements.

You can also review Calendly's own privacy information when using its service.

Contact form and security

When you submit our contact form, we use the information you provide to respond to your enquiry and determine what, if any, next step is appropriate.

We may use automated security or anti-spam technologies, including services provided by Cloudflare, to identify automated, fraudulent or malicious submissions.

These services may process limited technical information about your browser, device or request for security purposes.

We do not use the contact form to make automated decisions about whether we will work with you.

Sharing personal information

We only share personal information where necessary.

Depending on how you interact with us, recipients may include:

• website hosting and infrastructure providers;
• scheduling providers such as Calendly;
• analytics and search-performance providers such as Google;
• email and communications providers;
• cloud storage and business software providers;
• payment, accounting or financial-service providers;
• professional advisers;
• suppliers involved in delivering agreed work; and
• public authorities where disclosure is required by law.

Where another organisation processes personal information on our behalf, we expect it to handle that information appropriately and for the agreed purpose.

We do not sell or rent personal information to third parties.

International transfers

Some technology providers we use operate internationally. Personal information may therefore sometimes be processed outside the United Kingdom.

Where UK data protection rules governing international transfers apply, appropriate safeguards are used.

Depending on the provider and destination, these may include:

• UK adequacy regulations;
• recognised data-transfer frameworks; or
• appropriate contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum.

How long we keep information

We keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected, including applicable legal, accounting, tax and contractual requirements.

The period will depend on the type of information and why we hold it.

For example:

• enquiry information is retained while the enquiry remains relevant and for a reasonable period afterwards;
• client and project records may be retained after an engagement where necessary for contractual, business, legal or record-keeping purposes;
• financial records are retained for the period required by applicable law;
• website analytics are retained according to the settings and operational requirements of the relevant service; and
• security information may be retained where necessary to investigate or prevent abuse.

Where information is no longer required, we will delete it or anonymise it where appropriate.

Protecting personal information

We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

These measures may include:

• access controls;
• authentication;
• secure cloud services;
• encrypted connections;
• limiting access to those who need the information; and
• selecting providers with appropriate security measures.

No internet-based system can be guaranteed to be completely secure.

Automated decisions

We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.

Your rights

Depending on the circumstances and the lawful basis involved, you may have the right to:

• ask for access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete personal information;
• ask us to restrict how information is used;
• object to certain uses of your information;
• receive certain information in a portable format;
• withdraw consent where we rely on consent; and
• complain about how your personal information has been handled.

Not every right applies in every situation.

To exercise a data protection right, contact:

hello@mygreenmonster.co.uk

Your right to object

You have the right to object to certain processing based on our legitimate interests.

If you object, we will consider your request and whether there are compelling legitimate reasons for the processing to continue.

If we ever use personal information for direct marketing, you can object to that use at any time.

Complaints

If you have concerns about how we handle your personal information, please contact us at:

hello@mygreenmonster.co.uk

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Third-party websites

Our website may link to websites and services operated by other organisations.

We are not responsible for how those third parties collect or use personal information. You should review their privacy information when using their services.

Changes to this policy

We may update this privacy policy when our services, technology, suppliers or legal obligations change.

The latest version will be published on this page with the date of the most recent update shown at the top.