GDPR Statement

Last updated: March 8, 2026

1. Scope

This statement explains how Montserrat Live processes personal data of individuals in the European Economic Area (EEA), United Kingdom (UK), and Switzerland under applicable data protection laws, including the GDPR and UK GDPR.

2. Data Controller

Montserrat Live acts as the data controller for personal data processed through this web application, except where another party is clearly identified as controller.

3. Categories of Personal Data

We may process the following categories of data:

• Identifiers - IP address, account identifiers for admin access
• Technical data - Device and browser information
• Usage events - Views and reactions
• Communications - Support or contact data

4. Lawful Bases

We process personal data on one or more lawful bases:

• Legitimate interests - Service operation, platform security, analytics
• Contract - Where needed to provide services
• Legal obligation - Compliance requirements
• Consent - Where required

5. Purposes of Processing

Data is used to deliver and improve the feed experience, monitor performance, prevent abuse, maintain security, and comply with legal requirements.

6. International Transfers

Where data is transferred outside your jurisdiction, we use appropriate safeguards, such as contractual protections and equivalent transfer mechanisms where required by law.

7. Retention

We keep personal data only for as long as necessary for the purposes described above, then delete, aggregate, or anonymize it when feasible and legally permitted.

8. Your GDPR Rights

Subject to legal conditions, you may request:

• Access to your personal data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent (where consent is the basis)

You also have the right to lodge a complaint with your local supervisory authority.

9. Contact

For GDPR and privacy requests, contact: support@startupmedia.uk