Privacy policy
Last updated: Dec 5, 2025
1. Controller and Contact Information
Premonday is the data controller responsible for processing personal data collected via the Website.
For questions or requests relating to data protection or privacy, contact us at: hello@premonday.com
2. What Personal Data We Collect
We may collect the following types of personal data when you use the Website or engage our services:
Contact information: name, email address, company name, job title
Transaction data: orders, invoices, payment details (excluding raw card data, which is handled by our payment provider)
Usage and technical data: IP address, browser type, device type, pages visited, and other analytics or performance-related data
Marketing preferences and communication history, if you opt in to receive company updates or promotional content
3. How We Collect Data
We collect personal data via:
Forms you complete on the Website (e.g. contact, service request, subscription sign-up)
Direct communications with us (email, chat, support)
Automatic tracking tools (cookies, analytics, logs) when you visit the Website
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes and under the following lawful bases:
To provide and manage design services, subscriptions, billing and communication: necessary for performance of contract
To respond to inquiries, support requests or service-related communications: legitimate interest or contract performance
To send service updates, invoices, or important notices: necessary for contract performance
To improve our Website, analytics, user experience: legitimate interest
Where you explicitly consent (e.g. marketing newsletters): consent — you may withdraw consent at any time
5. Data Sharing and Third-Party Processors
Your data may be shared with third-party service providers that help us deliver services, such as: payment processors, hosting providers, analytics tools, email/communication platforms. We only share minimal necessary data and require these processors to comply with privacy and security standards.
We do not sell or license your personal data to unrelated third parties.
6. International Data Transfers
If any third-party subprocessors are located outside the UK, we will ensure appropriate safeguards are in place for lawful data transfer and processing.
7. Data Retention
We retain personal data only as long as necessary to fulfil service, billing, tax, legal, or regulatory obligations. After that period we securely delete or anonymise the data.
8. Data Security
We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction.
9. Your Rights
You have the following rights under UK GDPR:
Right to access the personal data we hold about you
Right to correct inaccurate or incomplete data
Right to request erasure or restriction of processing under certain conditions
Right to object to processing (where lawful basis is legitimate interest)
Right to data portability where applicable
Right to withdraw consent for marketing at any time
Right to lodge a complaint with the UK data protection supervisory authority
To exercise any of the above rights, contact us at hello@premonday.com
10. Cookies and Tracking Technologies
We may use cookies, analytics, tracking scripts, and other technologies to collect usage and behavioural data. Non-essential cookies are used only after obtaining your consent, and you may withdraw consent at any time.
11. Children’s Data
Our services and Website are not intended for individuals under 18. We do not knowingly collect personal data from minors.
12. Changes to This Privacy Policy
We may update this Privacy Policy occasionally to reflect changes in our practices or legal requirements. We will post the new version on the Website with a revised effective date.
13. Contact & Complaints
If you have questions about how we handle your personal data, or wish to exercise your rights, email us at hello@premonday.com
