TheMondayReport. Back to Home
← Back to home

Privacy Policy

Last updated: 19 October 2026

At TheMondayReport, we are committed to respecting and protecting the privacy of our website visitors and clients in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

TheMondayReport is a productised reporting automation service built in India, working UK business hours. For the purposes of UK data protection law, we operate as a Data Controller for our direct client relationships and website visitors, and as a Data Processor when connecting your reporting platforms.

2. Information We Collect

We only collect information necessary to perform our audit, communicate with you, and build your automated reports:

  • Audit & Enquiry Information: Name, business email, organisation name, current reporting tools, and requirements submitted via our Calendly booking link or direct correspondence.
  • Service Delivery Credentials: Delegated, read-only API access or permissions tokens to your data sources (e.g. GA4, Google Ads, Meta Ads, HubSpot, Pipedrive). We never ask for full administrative account ownership.
  • Website Usage: Minimal, privacy-friendly analytics [PLACEHOLDER: e.g. Plausible Analytics] that do not track personally identifiable information or use intrusive persistent cookies.

3. How We Treat Client Data (Reporting Automation)

Our core automation philosophy is built on data minimisation and ownership preservation:

  • Aggregated metrics only: Wherever possible, reports query aggregated summary data (e.g. total spend, conversion counts, deal stage totals) rather than individual identifiable customer records.
  • Your Google Environment: Automated pipelines and spreadsheets are created directly within your own Google Workspace or cloud infrastructure. We do not store or mirror your commercial datasets on external servers.
  • Access Revocation: You can revoke our read-only developer or service account permissions at any point after handover.

4. Data Processing Agreement (DPA)

A formal UK GDPR-compliant Data Processing Agreement (DPA) including Standard Contractual Clauses (SCCs) / UK International Data Transfer Addendum is provided upon request and executed alongside our build contract.

5. Contact Us

If you have questions regarding this privacy policy or your personal data, please contact us at:
Email: vinaay@themondayreport.com