Privacy Policy

IT Monsters ("we", "our", "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website https://itmonsters.co.uk, purchase our custom-built laptops, or interact with us. 

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

IT Monsters: itmonstersncl@gmail.com

For data protection purposes, we are the Data Controller responsible for your personal data.

2. Information We Collect

We may collect and process the following types of personal information about you:

• Contact Information: Name, billing address, shipping address, email address, phone number.
• Payment Information: Details required to process payments (though we typically use third-party payment processors who handle the sensitive card details directly – we recommend you also check their privacy policies).
• Order Details: Information about the custom laptop you are building and purchasing (e.g., chosen CPU, RAM, SSD, graphics options, screen resolution), purchase history, order status.
• Communication Data: Information you provide when you contact us via forms, email, phone, or social media.
• Website Usage Data: Information about how you use our website, collected through cookies and analytics (e.g., IP address, browser type, pages visited, time spent on site).
• Technical Information: Details about the devices you use to access our website (e.g., operating system, device type).

3. How We Collect Your Information

We collect information through various methods:

• Direct Interactions: You provide information when you use our custom builder tool, place an order, create an account, contact us with inquiries, or subscribe to our newsletter.
• Automated Technologies: As you interact with our website, we may automatically collect Usage Data and Technical Data using cookies and similar technologies.
• Third Parties: We may receive data from third parties such as payment processors (confirming payment success), couriers (delivery updates), or analytics providers.

4. How We Use Your Information

We use your personal information for the following purposes and relying on the following legal bases under UK GDPR:

• To Process and Fulfil Your Order: To process your payment, build your custom laptop according to your specifications, and deliver it to your address. (Legal Basis: Performance of a Contract)
• To Provide Customer Support: To respond to your inquiries, handle returns, process warranty claims, and provide technical assistance. (Legal Basis: Performance of a Contract, Legitimate Interests - to provide good customer service)
• To Manage Your Account: If you create an account, to manage your profile and provide you with access to order history and saved configurations. (Legal Basis: Performance of a Contract, Legitimate Interests - to manage customer relationships)
• To Improve Our Services: To analyse website usage, gather feedback, and improve our custom builder tool, products, and overall service offering. (Legal Basis: Legitimate Interests - to improve our business and customer experience)
• For Marketing Purposes: To send you updates, promotions, or newsletters if you have explicitly consented to receive them. (Legal Basis: Consent)
• To Ensure Website Security: To protect our website and systems from fraud and cyber threats. (Legal Basis: Legitimate Interests - to secure our business)
• To Comply with Legal Obligations: To maintain records for tax or other legal requirements. (Legal Basis: Legal Obligation)

5. How We Store and Protect Your Information

We take the security of your data seriously. We implement appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. 

All information you provide is stored on secure servers. Any payment transactions are processed by trusted third-party payment gateways and are encrypted. 

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. 

We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. 

6. Sharing Your Information 

We may share your personal information with the following third parties where necessary for the purposes outlined in this policy:

• Payment Processors: To process your payment securely 
• Couriers/Delivery Services: To deliver your custom-built laptop 
• Service Providers: Companies that provide services to us, such as website hosting, data storage, analytics providers , or professional advisors (accountants, legal advisors).
• Legal and Regulatory Authorities: When required by law or to protect our rights, property, or safety.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. 

We do not sell your personal data to third parties. 

7. Your Data Protection Rights

Under UK GDPR, you have rights regarding your personal data. These include:

• The Right to Access: You have the right to request a copy of the personal data we hold about you.
• The Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. 
• The Right to Erasure: You have the right to request that we delete your personal data, under certain conditions. 
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions (e.g., for direct marketing). 
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions. 
• The Right to Withdraw Consent: If we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time. 

If you wish to exercise any of these rights, please contact us using the details provided in Section 1. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. 

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk), if you believe we have not handled your personal data correctly. 

8. Cookies

Our website uses cookies to collect information about your Browse behaviour. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. 

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on our website with a revised "Effective Date". We encourage you to review this Privacy Policy periodically. 

10. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us at: itmonstersncl@gmail.com