This Policy is written in plain language so it is easy to read. It is not a substitute for legal advice. If anything is unclear, or you want to exercise a right, email contactus@montpier.com.
Who we are and scope
MontPier Digital ("MontPier", "we", "us", "our") is a performance marketing agency headquartered at HD-028, Plot No. 393, Vi-John Tower-1, Udyog Vihar Phase-III, Gurugram, Haryana 122016, India, and serving clients across India and the United Arab Emirates.
This Privacy Policy explains how we collect, use, share and protect personal data when you visit montpier.com (the "Site"), contact us, attend our events or webinars, apply for a role, or work with us as a client, prospect, supplier or partner. It also explains your rights and how to exercise them.
Where we process personal data on behalf of a client – for example, lead data generated by campaigns we run for them – the client is the data controller (or "data fiduciary" under Indian law) and this Policy applies only to the extent we act as a processor under our agreement with that client. Please refer to the client's own privacy notice for those activities.
Personal data we collect
We collect personal data in three ways: information you give us, information we collect automatically, and information we receive from third parties.
Information you provide
- Contact and enquiry details – name, business email, mobile number, company, website, industry, role, and the details you share in our consultation form, by email, phone or WhatsApp.
- Client and supplier relationship data – contract, billing and payment details, correspondence, platform and account access you grant us, and campaign briefs.
- Event, webinar and newsletter data – registration details and communication preferences.
- Recruitment data – CV, work history, qualifications, references and interview notes if you apply for a role.
- Content you choose to share – testimonials, case-study approvals, social media interactions with our accounts.
Information collected automatically
- Device and usage data – IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, time on page, clicks and scroll depth.
- Cookies and similar technologies – see the Cookies section below.
- Communications metadata – whether an email we sent was opened or a link clicked, where you have consented to marketing communications.
Information from third parties
- Business contact details from professional networks (such as LinkedIn), publicly available sources and trusted data partners, used only for business-to-business outreach.
- Analytics, advertising and CRM platforms (such as Google, Meta and HubSpot) that report aggregated or pseudonymised performance data.
- Referrals from clients, partners or people you have authorised to introduce you.
How and why we use personal data
We use personal data only where we have a lawful basis to do so. The table below summarises our main purposes and the basis we rely on.
| Purpose | Examples | Legal basis |
|---|---|---|
| Responding to you | Answering enquiries, scheduling discovery calls, preparing proposals and audits | Consent; steps prior to a contract; legitimate interests |
| Delivering our services | Running campaigns, building websites and content, reporting, invoicing, support | Performance of a contract |
| Running and improving the Site | Security, troubleshooting, analytics, testing new features | Legitimate interests; consent for non-essential cookies |
| Marketing | Newsletters, insights, event invitations, relevant service updates | Consent; legitimate interests for B2B contacts, with an opt-out in every message |
| Recruitment | Assessing applications, conducting interviews, checking references | Steps prior to a contract; legitimate interests; consent |
| Legal and compliance | Tax, accounting, responding to lawful requests, enforcing our terms | Legal obligation; legitimate interests |
We do not sell personal data, and we do not use personal data for automated decision-making that produces legal or similarly significant effects about you.
Cookies and tracking
The Site uses cookies and similar technologies (pixels, local storage, tags) in four categories:
- Strictly necessary – required for the Site to function and to keep it secure. These cannot be switched off.
- Analytics – help us understand how visitors use the Site so we can improve it (for example, Google Analytics in anonymised-IP mode).
- Functional – remember choices you make, such as a dismissed banner or a preferred region.
- Advertising – allow us and our advertising partners (for example, Google Ads and Meta) to measure the performance of our own marketing and show you relevant content elsewhere.
Analytics, functional and advertising cookies are set only with your consent, which you can give or withdraw at any time through the cookie settings link in the Site footer or by adjusting your browser settings. Blocking some cookies may affect how the Site works.
When we share personal data
We share personal data only as needed to run our business and provide our services, with:
- Service providers acting on our instructions – hosting, cloud storage, email and CRM platforms, analytics, payment processors, video conferencing and professional advisers. Each is bound by contract to protect your data and use it only for the purpose we specify.
- Advertising and marketing platforms (such as Google, Meta, LinkedIn and YouTube) when we run campaigns for clients or ourselves, in line with those platforms' terms and your consent choices.
- Clients, where you are a lead or customer generated by a campaign we operate for that client.
- Authorities, regulators and courts where required by law, to protect our rights or the safety of any person.
- A buyer or successor in the event of a merger, acquisition or sale of all or part of our business, subject to this Policy.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
International transfers
We operate in India and the UAE and use service providers located in other countries, including the European Economic Area, the United Kingdom and the United States. When personal data is transferred outside the country in which it was collected, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses, adequacy decisions, or transfer mechanisms permitted under India's Digital Personal Data Protection Act 2023 and the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, as applicable.
How long we keep personal data
We keep personal data only for as long as necessary for the purposes described above, and then delete or anonymise it. As a guide:
- Enquiries that do not lead to an engagement – up to 24 months from last contact.
- Client and supplier records – for the duration of the relationship and up to 8 years afterwards, to meet tax, accounting and limitation requirements.
- Marketing consents – until you withdraw consent or we have had no engagement from you for 24 months.
- Recruitment data for unsuccessful applicants – up to 12 months, unless you ask us to keep it for future roles.
- Analytics data – aggregated or deleted within 26 months.
How we protect personal data
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls and multi-factor authentication on our systems, role-based access to client platforms, staff confidentiality obligations and training, and vendor due diligence. No method of transmission or storage is completely secure; if we become aware of a breach that is likely to result in a risk to you, we will notify you and the relevant authority as required by law.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- erase your data, or restrict or object to its processing;
- withdraw consent at any time, without affecting processing already carried out;
- receive your data in a portable format;
- nominate another person to exercise your rights on your behalf (under India's DPDP Act); and
- complain to a supervisory authority – in India, the Data Protection Board of India; in the UAE, the UAE Data Office; in the EU/UK, your local data protection authority.
To exercise any of these rights, email contactus@montpier.com with the subject line "Privacy request". We may need to verify your identity before acting. We aim to respond within 30 days, or sooner where the law requires.
Marketing choices
You can opt out of marketing emails at any time by clicking the unsubscribe link in any message or by emailing us. You can stop WhatsApp messages by replying STOP. Opting out of marketing does not affect service communications relating to an active engagement.
Children
The Site and our services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Third-party sites
The Site contains links to third-party websites, platforms and social media. We are not responsible for their privacy practices, and this Policy does not apply to them. Please read the privacy notice of any site you visit.
Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top shows when it was last revised. Where a change is material, we will give you reasonable notice on the Site or by email.
How to contact us
Questions, requests and complaints about this Policy or our handling of personal data can be sent to:
MontPier Digital – Privacy
HD-028, Plot No. 393, Vi-John Tower-1, Udyog Vihar Phase-III,
Gurugram, Haryana 122016, India
Email: contactus@montpier.com
India: +91 98996 86698 · UAE: +971 58 202 4165
Our Grievance Officer for the purposes of India's Information Technology Act and DPDP Act can be reached at the same email address, marked "Grievance Officer".