LEGAL
Version 1 · Last updated 1 October 2026. How Virtualnet Marketing Ltd, trading as “Monty CRM”, collects and uses personal data.
Monty CRM is a customer relationship management service provided by Virtualnet Marketing Ltd, trading as “Monty CRM” (we, us or our).
Registered in England and Wales, company number 07747367.
Registered office: Hexagon Business Centres, Elmfield House, New Yatt Road, Witney, OX28 1PB.
Registered with the Information Commissioner’s Office (ICO) as a data controller, registration number 00015737804.
This policy explains how we handle personal data when you visit our website, contact us, sign up for a trial, or become a customer. It should be read with our Terms of Service.
As a Controller. We decide how and why personal data is used for account registration, billing, security, website analytics, our own communications with customers and prospects, and legal compliance. This policy covers that data.
As a Processor. The contacts, leads and other records our customers store in Monty CRM belong to those customers. They are the Controller of that data and we process it only on their instructions, under the Data Processing Addendum. If your details are held in a Monty CRM customer’s account, please contact that organisation about them.
your name, work email address and phone number;
your company name, website and country;
the plan, number of users, billing interval and currency you choose;
a record of your acceptance of our Terms of Service, this Privacy Policy and the Data Processing Addendum, including the date and time, your IP address, your browser’s user agent and the versions of the documents you accepted;
how you reached the sign-up page, such as the referring page and any campaign tags in the link.
The details you enter in our contact form or send us by email or phone, and our correspondence with you.
Account and user details, login and security records, support requests, and technical, diagnostic and usage data about how the Service is used.
Billing contact details, subscription and invoice records. Card payments are handled by our payment provider; we do not store full card numbers.
Technical information such as IP address, browser and device type, and the pages you view, collected through server logs and Google Analytics.
We also use IPFingerprint, a visitor identification service operated by our own company, to recognise which businesses visit our website. It matches the visitor’s IP address to the organisation it is registered to and records the pages viewed. Where the IP address belongs to a business network, the visit is linked to that business, not to an individual. We do not use it to find out who you are personally, and we do not combine it with other data to identify individuals visiting from home or mobile connections.
To set up and run your account, including your trial, and to contact you about it — necessary to perform our contract with you or take steps at your request before entering into one.
To bill you and keep financial records — contract and legal obligation.
To keep a record of your acceptance of our terms — our legitimate interest in being able to show what was agreed, and when.
To protect the Service and our website, including preventing automated or fraudulent sign-ups — legitimate interests.
To provide support and respond to enquiries — contract and legitimate interests.
To understand how our website and Service are used and improve them — legitimate interests. Where we publish statistics, they are aggregated and do not identify you.
To understand which businesses are interested in Monty CRM, and to contact relevant businesses about it — our legitimate interest in business-to-business marketing. Any marketing email we send will follow electronic marketing rules and include a way to opt out.
To comply with the law — legal obligation.
We do not use the details you give us at sign-up for marketing beyond your trial and account unless you separately agree to it, and you can opt out of any marketing at any time. You can object to our use of your data for visitor identification or marketing at any time by contacting us.
We do not sell personal data.
We do not use our customers’ CRM data to advertise to their contacts.
We do not use customer data to train third-party AI foundation models unless we clearly disclose this and you have agreed where required.
We share personal data only with service providers that help us run Monty CRM — hosting (CWCS), DNS, network security and content delivery (Cloudflare), transactional email (SMTP2GO), payment processing (Stripe) and website analytics (Google) — and with professional advisers or authorities where the law requires it. Our providers are bound by contract to protect the data and use it only to provide their services to us. The full list, with what each provider does and where, is on our Subprocessors page.
Personal data may be processed in the United Kingdom, the European Economic Area and other countries where we or our providers operate. Where data leaves the UK or EEA in a way that requires safeguards, we use an appropriate mechanism such as adequacy regulations, the UK International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum.
Trial accounts that are not converted to a paid subscription may be deleted after the trial ends or after the post-trial retention period described in our Terms.
Customer accounts are kept for the life of the subscription, then for a limited period after it ends to allow data export, before deletion from active systems. Backups are overwritten in the ordinary course.
Records of acceptance, billing and tax records are kept for as long as needed for legal, accounting and dispute-resolution purposes.
Enquiries are kept for as long as needed to deal with them and any follow-up.
We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, backups, monitoring and restricted staff access. More detail is in Annex B of the Data Processing Addendum.
Under UK data protection law you have the right to access the personal data we hold about you, and to ask us to correct it, delete it, restrict or object to our use of it, or transfer it to you or another organisation. Where we rely on your consent, you can withdraw it at any time.
To exercise any of these rights, contact us. We may need to confirm your identity first.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concern first.
We may update this policy from time to time. The version and date at the top of this page show when it last changed, and we will tell customers about material changes.
For any question about this policy or your personal data, please contact us or write to us at our registered office above.
Free 15-minute demo
No fluff, just a 15-minute walkthrough.
Tired of hour-long software presentations full of corporate jargon? So are we. We'll jump on Google Meet, show you how MontyCRM keeps your pipelines clean and your team focused, and answer your questions, without the high-pressure sales pitch.
Once booked, you'll get a calendar invite with your Google Meet link.