top of page

Privacy Policy

This privacy policy explains how Monsoon Stone Marketing ("we", "our", or "us"), owned by Josh Wade, collects, uses, and protects your personal data when you interact with us or use our website.

1. Important Information and Who We Are

Josh Wade trading as Monsoon Stone Marketing is the data controller responsible for your personal data.

If you have any questions about this privacy policy or wish to exercise your legal rights, please contact us using the details below:

  • Email address: info@monsoonstone.co.uk

  • Postal address: 38 Felton Lea, Sidcup, DA14 6BA

  • Supervisory Authority: You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first. [6, 7, 8]

2. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows: [9, 10]

  • Identity Data: First name, last name, username, or title.

  • Contact Data: Billing address, delivery address, email address, and telephone numbers.

  • Financial Data: Bank account and payment card details (processed securely via third-party processors).

  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system, and platform.

  • Usage Data: Information about how you use our website, products, and services.

  • Marketing Data: Your preferences in receiving marketing from us and your communication preferences. [11]

3. How and Why We Use Your Personal Data (Legal Basis)

Under the UK GDPR, we must have a valid lawful basis to use your data. We typically rely on the following bases:

  • Performance of a Contract: Necessary to deliver the marketing services you hire us to perform.

  • Legitimate Interests: Necessary for our business interests to manage our relationship with you, improve our website, and grow our business, provided your rights do not override those interests.

  • Consent: Where you have explicitly signed up for our newsletter or marketing updates. You can withdraw consent at any time.

  • Legal Obligation: Where we need to comply with UK tax, accounting, or corporate laws. [12, 13, 14]

4. Data Sharing and International Transfers

We do not sell your personal data. We may share your data with trusted third parties to run our business (e.g., IT support, cloud hosting providers, and HM Revenue & Customs). [15]

If we transfer your data outside the UK (for example, if our website servers or email platforms are hosted in the US), we ensure a similar degree of protection is afforded to it by ensuring Standard Contractual Clauses (SCCs) or equivalent UK approved safeguards are in place.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees, agents, and contractors who have a business need to know. [16]

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By UK law, we must keep basic information about our customers (including Contact, Identity, and Financial Data) for six years after they cease being customers for tax purposes. [17]

7. Your UK Legal Rights

Under UK data protection laws, you have rights in relation to your personal data. These include the right to:

  • Request access to your personal data (commonly known as a "data subject access request").

  • Request correction of the personal data that we hold about you.

  • Request erasure of your personal data where there is no good reason for us continuing to process it.

  • Object to processing of your personal data where we are relying on a legitimate interest.

  • Request restriction of processing of your personal data.

  • Request the transfer of your personal data to you or to a third party.

  • Withdraw consent at any time where we are relying on consent to process your personal data. [18, 19, 20]

If you wish to exercise any of these rights, please email us directly. We respond to all legitimate requests within one calendar month.

8. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

This document was last updated on 19 August 2026.

bottom of page