Privacy Policy

1. Who We Are

Monster Outdoor is a trading name of Monster Media Agency Ltd, a UK outdoor advertising agency registered in England and Wales (company number 11769674), 86-90 Paul Street, London EC2A 4NE. We are the controller of the personal data described here.

If you have any questions about this policy or how we handle your data, email hello@monsteroutdoor.co or call 020 3906 1172.

2. What Data We Collect

When you contact us, ask for a quote, unlock a price in one of our calculators, reserve a package or book AdBikes, we collect what you type in: your name, email address, phone number and company, plus the details of your enquiry (for example the formats, locations, dates, budget and message). AdBike bookings also include the campaign location and date, and any artwork you upload.

With each enquiry we also record:

• your IP address and browser details, to protect our forms from spam and fraud
• how you found us: the page you first landed on, the website that sent you (without any search terms or query string), any campaign tags in the link (such as utm values and the Google Ads campaign number) and, if you clicked one of our Google ads, the Google click reference in the link. We keep the click reference only if you accepted advertising cookies; otherwise we note only that you came from a Google ad
• the cookie choice you made on our site

If you accept analytics cookies, we also collect how you use our website (pages visited, time on site, device type and approximate location). See section 4.

Card payments for AdBike bookings are taken by Stripe on its own secure page. We never see or store your card details; Stripe tells us whether the payment went through. For AdBike bookings we also store the booking reference and the source details above with the payment record at Stripe.

3. How We Use Your Data, and Why We Are Allowed To

• To reply to your enquiry, prepare quotes and deliver a booking. This is necessary to take steps you asked for before a contract, and to perform the contract. When you unlock a price in one of our calculators, we also email you a copy of that estimate. Our billboard campaign builder sends it as a PDF.
• To keep a record of enquiries and follow up on them. Your enquiry is stored in our own lead system (HQ) and in our email. This is in our legitimate interests as a business-to-business agency.
• To understand which of our pages, campaigns and ads bring enquiries, using the lead source details listed above. This is in our legitimate interests: it lets us spend our advertising budget sensibly. We keep these details with your enquiry and do not use them to make automated decisions about you.
• To protect our forms from spam, fake submissions and misuse. This is in our legitimate interests.
• To protect our Google ads from fake and repeated clicks. When you arrive from one of our Google ads, our website server records your IP address, browser details, the page you landed on and the Google click reference in the link. We keep this for 30 days and use it only to detect and block fraudulent clicks. Nothing is stored on your device for this. This is in our legitimate interests: it stops our advertising budget being wasted.
• To measure website use and our Google ads with cookies, only if you agree in our cookie banner (consent). See section 4.
• To send you information about our services, only if you have opted in. You can opt out at any time.

If you accept advertising cookies and then send us an enquiry, we share a hashed (scrambled) copy of your email address with Google so it can match the enquiry to the ad you clicked (Google calls this enhanced conversions). A hashed email address is still personal data, and Google processes it for us under its Ads data processing terms. For enquiries made after you accepted advertising cookies, we may later tell Google Ads that the enquiry became a qualified lead or a booking, and what the booking was worth to us, using the Google click reference and hashed copies of your email address and phone number. We never do this if you rejected advertising cookies. To stop us doing it for an enquiry you have already sent, email hello@monsteroutdoor.co.

4. Cookies

Our site only sets optional cookies if you accept them in our cookie banner. Until then, Google Analytics and Google Ads do not load at all. You can accept all, reject all, or choose analytics and advertising separately, and change your mind at any time with Cookie settings, also in the footer of every page. We remember your choice for 6 months.

• Analytics (with your consent): Google Analytics (G-E1HPMH49K8), to understand how the site is used and improve it.
• Advertising (with your consent): Google Ads (AW-411091250), to see which ads led to an enquiry, a call or a booking, and to show our ads to people who have visited our site. For visitors who arrive from one of our Google ads, Google may show a Google forwarding number in place of our phone number so it can tell us a call came from the ad; the call reaches us in the same way.
• Strictly necessary: a cookie that remembers your cookie choice, sign-in cookies on our staff and client proposal pages, and, after you unlock prices in our Tube, billboard or bus calculator, or in our billboard, bus or Tube campaign builder, a note in your browser that lets you keep checking prices for 4 hours and lets us fill in the form again for you with the name, email, phone and company you entered (the three calculators also set a cookie for those 4 hours); the note is deleted when those 4 hours end, or the next time you visit our site if it is not open then.

We also use Vercel Web Analytics to count page visits. It sets no cookies and stores nothing on your device; to count visits Vercel uses a hash of your IP address and browser details that it discards within 24 hours. The full list of cookies is in our Cookies Policy.

5. Data Sharing

We do not sell your personal data. We share it only with the service providers that run our business, under contract, and with the media owners and suppliers needed to deliver a campaign you book (only what they need):

• Postmark (delivers our enquiry, estimate and booking emails) and Google Workspace (our email)
• Vercel (website hosting and file storage, including our own lead system, HQ)
• Pipedrive (our customer relationship management system, where enquiries and bookings are recorded and followed up)
• Stripe (card payments for AdBike bookings)
• Google (Analytics and Ads only with your cookie consent; Google Fonts and an embedded map on one page load for everyone)
• postcodes.io, which looks up the place or postcode you type into the AdBike booking form to work out travel distance

Some of these providers process data outside the UK, including in the United States. Where they do, we rely on the UK Extension to the EU-US Data Privacy Framework for certified US providers, or on the ICO's International Data Transfer Agreement or Addendum.

6. Data Retention

Enquiries, quote requests and bookings, including the lead source details recorded with them, are kept for up to 3 years from our last contact with you, unless you ask us to delete them sooner or we need to keep booking and invoice records longer by law (usually 6 years for accounting records). Cookie lifetimes are listed in our Cookies Policy. Google Analytics keeps event data for 14 months. Records of visits from our Google ads (IP address, browser details, landing page and click reference) are kept for 30 days.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data, including processing based on our legitimate interests
• Data portability
• Withdraw consent at any time (for cookies, use Cookie settings)

To exercise any of these rights, email us at hello@monsteroutdoor.co. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses HTTPS encryption for all data transmitted between your browser and our servers.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.