Privacy

Last Updated 22nd January 2026

Privacy and data policy

Hello. We’re Word Monster Limited (“Word Monster”, “we”, “us”, “our”). And we keep a little bit of personal information about the people that interact with us.

We’re a UK-based business, and like most businesses, we need to collect and use a small amount of personal data to do our work properly. We take that responsibility seriously and only collect what we genuinely need, use it in sensible and limited ways, and keep it secure.

This policy explains:

  • what personal data we collect
  • how and why we use it
  • how long we keep it
  • who we share it with
  • your rights under UK data protection law

Read on if you’d like to know about the ways we may collect, store, and use your data. If you have any questions, concerns, or requests, you can contact us at carl@wordmonster.co.uk

Who is responsible for your data?

Word Monster Limited is the data controller for the personal data described in this policy. That means we decide how and why your personal data is used.

  • Legitimate interests: where processing is necessary for running our business and does not override your rights
  • Consent: primarily for non-essential cookies and similar technologies
  • Contractual necessity: where data is needed to provide services you’ve requested
  • Legal obligation: where we are required to retain or disclose information by law

Where we rely on legitimate interests, we carry out a balancing assessment to ensure our interests do not override your rights and freedoms. You have the right to object to this processing at any time.

Your rights

You have rights under UK GDPR in relation to your personal data. These include the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Restrict how your data is used
  • Object to processing based on legitimate interests or direct marketing
  • Withdraw consent at any time (where consent is the legal basis)
  • Request data portability, where applicable
  • Not be subject to automated decision-making that produces legal or similarly significant effects

To exercise any of these rights, email us at carl@wordmonster.co.uk. We’ll respond without undue delay and within statutory time limits.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, if you’re unhappy with how we handle your data.

Cookies and website analytics

Cookies
We use cookies to:

  • make our website work properly
  • understand how it’s used
  • improve content and performance

Some cookies are essential, and others (such as analytics cookies) are optional. You can manage or withdraw your cookie preferences at any time using our cookie controls. Blocking certain cookies may affect how the website functions.

Google Analytics
We use Google Analytics to understand things like:

  • how many people visit our site
  • which pages are most useful
  • how visitors find us

Google Analytics uses cookies and processes limited personal data such as IP addresses and device information. We do not receive information that directly identifies you.

Where required by law, analytics cookies are used only with your consent. Where consent is not required, we rely on our legitimate interests in understanding and improving our website, using data that is proportionate and limited.

CRM and business contact records

If you interact with us in a professional capacity, either via our website, email, social media, events, audits, or in person, we may create and maintain a record about you in our CRM system.

This may include:

  • name
  • job title and company
  • work email address and phone number
  • links to professional social media profiles
  • records of relevant communications

We process this information under our legitimate interests to:

  • respond to enquiries
  • provide requested insights or follow-up
  • understand interest in our services
  • explore whether a mutually beneficial professional relationship may exist

We only contact you where it’s reasonable and relevant in a B2B context. You can object at any time.

Retention:
CRM records are kept for as long as there is an active or reasonably anticipated professional relationship, and in any event no longer than 5 years after the last meaningful interaction, unless you request deletion or object.

Business development and outreach

Occasionally, we may contact organisations we believe could benefit from our services.

In these cases:

  • we only use publicly available, work-related contact information
  • we do not buy third-party marketing lists
  • we never use personal (non-work) contact details

This processing is based on our legitimate interests. You have an absolute right to object at any time.

If you ask us not to contact you again, we’ll:

  • stop all outreach
  • delete your data
  • retain only the minimum information needed to ensure we don’t contact you again

Audits, assessments, and diagnostic tools

When you complete an audit, assessment, scorecard, or diagnostic tool provided by Word Monster (including the Friction in Pharma™ audit), we process the information you submit to:

  • calculate and present your results
  • provide interpretation and context
  • offer relevant insights or recommendations

We may contact you to discuss your results where we reasonably believe this would be helpful or relevant. This processing is carried out under our legitimate interests.

You are not obliged to engage further, and you can opt out of follow-up contact at any time.

Retention:
Assessment data is retained only for as long as necessary to fulfil these purposes and is periodically reviewed and deleted.

Recruitment data

When recruiting employees or subcontractors, we collect CVs and covering letters. These may include:

  • name and contact details
  • employment history
  • qualifications and experience

We do not intentionally collect special category data (such as health information). If it is provided, it is handled with additional care and deleted as soon as it is no longer required. Recruitment data is stored securely (e.g. in protected cloud folders).

Retention:
If you are not engaged by Word Monster, recruitment data is deleted within 12 months.

Data sharing and processors

We treat client and personal data as confidential.

We may share data with:

  • professional advisers (e.g. accountants)
  • technology providers (e.g. CRM, analytics, cloud storage)
  • subcontractors working under contract

All third parties are required to:

  • process data only on our instructions
  • keep it secure
  • delete it when no longer required

We never sell personal data.

International data transfers

Some of our service providers process data outside the UK.

Where this happens, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations
  • International Data Transfer Agreements (IDTAs) or equivalent safeguards

Security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, or disclosure. This includes secure systems, access controls, and sensible working practices, even when working in public spaces.

Automated decision-making

If things change…

Typo. When things change – sometimes it feels like we’ve updated these policies more times than we’ve had hot dinners. Digital marketing is constantly evolving, who knows what a perfectly normal use of data tomorrow will be, probably in ways we’ve never even considered before. If the changes become drastic, we’ll let you know so that you have the opportunity to change your mind.

If you’ve made it all the way to the bottom of this policy and you’re still reading this… still reading… can’t… stop… reading… then I take my hat off to you.

Thank you for your interest in Word Monster. We hope that we can be of service.

That’s all folks.

We think that’s all the ways we collect, store and use information. If you have any worries, please feel free to get in touch.

Contact us