Last updated · January 15, 2026
Privacy Policy
How Vibemonk collects, uses and protects personal data. We apply GDPR standards to everyone, wherever you are.
01Who we are
Vibemonk is the data controller for personal data collected through vibemonk.com. You can reach us at hello@vibemonk.com or at either office address listed in the footer.
02What we collect
Data you give us: name, company, email address, phone or WhatsApp number, social handle, budget range and whatever you write in the message field or booking notes.
Data collected automatically: IP address, browser and device type, pages viewed, referring source and interaction events. This is aggregated and used to understand how the site performs.
We do not collect special-category data, and we do not ask for it.
03Why we use it
To answer your enquiry and prepare a proposal — the lawful basis is steps taken at your request prior to entering a contract.
To run and improve the site, and to keep it secure — the lawful basis is our legitimate interest in operating a functioning business.
To send occasional updates, where you have opted in. You can withdraw that consent at any time using the link in any email.
04Sharing and processors
We never sell personal data. We share it only with processors who help us operate: hosting and CDN, email delivery, analytics, and our CRM. Each is bound by a data processing agreement.
Where a processor operates outside the EEA, transfers are covered by Standard Contractual Clauses.
05Retention
Enquiry data is kept for 24 months after our last contact, then deleted. Contract and invoicing records are kept for six years to meet tax and accounting obligations. Analytics data is retained in aggregate for 14 months.
06Your rights
You have the right to access, correct, erase, restrict or port your data, and to object to processing based on legitimate interest. Email us and we will respond within one month.
If you are in the EU or the UK, you also have the right to lodge a complaint with your national data protection authority.
07Security and changes
Data is encrypted in transit and at rest, access is limited to the people who need it, and we review that access quarterly.
We update this policy when our practices change. The date above tells you when that last happened.