Privacy
This site has one form and no tracking. Below is exactly what that form collects, where it goes, and how long it stays there.
Who is responsible for your data
The controller is TopMonks s.r.o. (IČO 24847437), registered at Struhařovská 2931/9, Záběhlice, 141 00 Praha 4, Czech Republic, which operates Monksheets.
For anything in this policy — including any of the requests listed under your rights — write to sales@monksheets.com.
What this website collects on its own
Nothing. There are no cookies, no analytics, no tracking pixels, no embedded video, no web fonts loaded from anyone else's server, and no advertising or social media scripts. Every file the site needs is served from our own domain, so simply reading these pages sends no information about you to any third party.
The only time this site collects anything is when you choose to fill in the contact form.
What the contact form collects
The form asks for seven things, and all of them come from you:
- your name
- your work email address
- your company
- your team size
- what you run today
- what you would want to replace first
- your timing
Nothing is pre-filled, nothing is inferred, and there is no hidden field that collects anything about you. The form does contain one unlabelled field that is hidden from people and only visible to automated bots; if it is filled in we discard the submission. It never contains anything you typed.
Why we process it, and on what basis
We use what you send for one purpose: to reply to you about Monksheets. We do not add you to a mailing list, we do not profile you, and we do not sell, rent or share your details with anyone for their own purposes.
Under the GDPR our basis is Article 6(1)(b) — taking steps at your request before entering into a contract — because you contacted us about using the product. Where a message is not about becoming a customer, our basis is Article 6(1)(f), our legitimate interest in answering people who write to us.
Where it goes
When you submit the form, it is delivered to our own inbox by email and nowhere else. Two providers handle it on our behalf, both under data processing agreements, and neither uses it for their own purposes:
- Amazon Web Services receives the submission and sends the email. This runs in AWS's Frankfurt region, so the submission is processed inside the EU.
- Google hosts the mailbox the email arrives in (Google Workspace).
How long it is kept
- Your message. It stays in our inbox for as long as the conversation is useful, and no longer than three years after our last contact with you. You can ask us to delete it sooner.
- Abuse-prevention counters. To stop the form being flooded, we count recent submissions per visitor. Your IP address is converted into an irreversible cryptographic hash before it is stored — the raw address is never written down — and the counter deletes itself two hours later.
- Server logs. Technical records of whether the form succeeded or failed are kept for 14 days. They do not contain what you typed.
Your rights
You can ask us to give you a copy of what we hold about you, correct it, delete it, restrict what we do with it, or send it to you in a portable form. You can object to our processing where we rely on legitimate interest. Exercising any of these costs nothing, and we will respond within one month.
Email sales@monksheets.com and say what you want. If you are unhappy with how we handle it, you can complain to your national data protection authority; in the Czech Republic that is the Úřad pro ochranu osobních údajů (uoou.gov.cz).
Changes
If we change what we collect or what we do with it, we will update this page and the date at the top of it. Monksheets is early, so the product will grow; this page will be kept accurate as it does.