Skip to content
Contact Menu

Monolith

Privacy policy.

How Monolith handles the information you give us, and what we collect when you visit.

Last updated 11 September 2026.

This Privacy Policy describes how Monolith Institutional LLC (“Monolith,” “we,” “our,” or “us”) may collect, use, and disclose personal information about you. This Privacy Policy applies to information collected when you visit or interact with the website located at https://monolith.finance/ (the “Website”), submit the enquiry form made available on the Website (the “Enquiry Form”), correspond with us by email, interact with us at industry events or through our social media accounts, or receive communications from us (collectively, the “Services”).

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Services.

Contents

1. Information We Collect

Information You Provide

When you submit the Enquiry Form, we collect the information you choose to provide, which may include your name, your organization, your work email address, the enquiry type you select, whether you wish to receive marketing communications from us, and the content of the optional free-text message field. If you correspond with us by email or message us through a social media platform, we collect the contents of that correspondence and any information you choose to include in it.

Please do not submit sensitive or confidential information through the Enquiry Form or in unsolicited correspondence. The message field is free text, and we cannot control what you choose to include in it.

Information Collected Automatically

When you visit the Website, we and our service providers automatically collect certain information from your browser or device, including your IP address, user agent, browser and device type, operating system, referring pages and URLs, pages viewed, session information, and the dates and times of access, along with standard server log fields. Our customer relationship management provider derives an approximate location from your IP address. If you receive marketing email from us, our provider records whether the email was opened and which links were clicked.

The Website uses cookies and similar technologies described in Section 4. If you later submit the Enquiry Form, the browsing activity previously recorded against your cookie identifier, including page views from visits that predate your submission, is linked to your contact record. This means that once you identify yourself through the Enquiry Form, we hold a record of how you used the Website before you identified yourself.

Information Collected at Events

If you interact with us at industry conferences, meetings, or other events, we may collect your name, employer, job title, business email address and telephone number, and notes about your commercial interest, whether provided by you directly, through exchanged contact details or badge scans, or through attendee or lead lists supplied by event organizers.

Information from Social Media

If you interact with our accounts on social media platforms, we collect public profile information such as handles and display names, the content of messages or mentions directed to our accounts, and aggregate follower and engagement analytics provided by the platform.

Information from Publicly Available Sources

For business development purposes, we may collect publicly available professional information about prospective institutional contacts, such as name, title, employer, and business email address, from company websites, public professional profiles, and public registries.

Commercial, Professional, and Inferred Information

In the course of the activities described above, we may hold commercial information (such as records of interest in our intended products), professional or employment-related information (such as employer and job title), and limited inferences generated by our customer relationship management provider from the interaction data described above (such as engagement with our communications). We do not use third-party data enrichment services and do not purchase personal information from data brokers.

PLEASE BE ADVISED THAT SOME INFORMATION YOU MAY CHOOSE TO INPUT INTO THE SERVICES, INCLUDING THE FREE-TEXT MESSAGE FIELD OF THE ENQUIRY FORM, MAY BE CONSIDERED “SPECIAL” OR “SENSITIVE” IN CERTAIN JURISDICTIONS, FOR EXAMPLE, INFORMATION CONCERNING YOUR RACE OR ETHNICITY, RELIGIOUS OR PHILOSOPHICAL BELIEFS, SEX LIFE, SEXUAL ORIENTATION, POLITICAL OPINIONS, TRADE UNION MEMBERSHIP, INFORMATION ABOUT YOUR HEALTH, AND GENETIC AND BIOMETRIC DATA, OR OTHER SENSITIVE INFORMATION. WE DO NOT REQUEST SUCH INFORMATION AND ASK THAT YOU NOT PROVIDE IT. BY CHOOSING TO INPUT SPECIAL OR SENSITIVE INFORMATION INTO THE SERVICES, YOU HEREBY CONSENT TO OUR COLLECTING AND PROCESSING OF THAT INFORMATION.

2. How We Use Your Information

We use the information described above as part of our everyday business activities, including to:

  • Operate the Services. Operate and maintain the Website and make its content available; respond to enquiries submitted through the Enquiry Form and route them to the relevant desk based on the enquiry type selected; and add you to a launch notification or interest list where you have asked us to.
  • Communicate with you. Send launch announcements, product updates, newsletters, and event invitations where you have submitted the Enquiry Form or provided your details at an event, and measure engagement with those communications. We do not engage in behavioural or interest-based advertising, and we do not market to individuals in a personal capacity.
  • Conduct business development. Contact you where you have expressed interest in our intended products, qualify that interest, and progress a commercial conversation with the organization you represent, using business contact information about you acting in a professional capacity.
  • Develop our products. Understand aggregate interest in our intended products and which audiences, pages, and campaigns generate interest, in order to inform our product roadmap and go-to-market approach, and invite interested persons into product research conversations.
  • Maintain safety and security. Detect and prevent spam, bot, and automated form submissions; apply rate limiting and abuse prevention; detect and investigate unauthorised access, scraping, and denial-of-service attempts; and maintain server access logs for security and diagnostic purposes. IP addresses and user agents are collected for these purposes and for basic diagnostics, and are not used to profile or track individuals across other websites.
  • Support corporate activity. Conduct internal corporate administration; support audits, financings, investor and fundraising diligence, and any corporate transaction, subject to confidentiality obligations.
  • Comply with law. Comply with applicable laws and respond to lawful requests from courts, regulators, and other authorities, and establish, exercise, and defend legal claims.

3. Sharing Information

We may share the information described above in the following circumstances:

  • Service Providers. We share information with vendors and service providers that host and operate the Services and process information on our behalf. Our customer relationship management provider, HubSpot, is the principal processor of Website personal information: it receives and stores Enquiry Form submissions, hosts contact records, sets the Website tracking cookies described in Section 4, performs website analytics, and sends our marketing email. Other providers include Netlify (website hosting and content delivery), Amazon Web Services (cloud infrastructure), PostHog (aggregate product analytics), Google Workspace (email and productivity), Slack (internal communications), and any embedded widget or bot-detection service used on the Website.
  • Affiliates. We share information with other affiliated entities within our corporate group, whose personnel provide shared engineering, marketing, finance, and administrative services in connection with the operation of the Website and the interest list.
  • Professional Advisors. We share information with our outside counsel, accountants, tax advisers, and other professional advisors where necessary to obtain professional advice and administer our business, under professional duties of confidentiality.
  • Compliance with Laws. We may disclose information to government authorities, regulators, law enforcement, and courts in response to lawful requests, or where we believe disclosure is necessary to comply with applicable law or legal process, or to protect the rights, property, or safety of Monolith, our users, or others.
  • Investors and Acquirers. We may disclose information to prospective investors, acquirers, and their advisers in connection with diligence for a financing, sale, merger, reorganization, or other corporate transaction, under non-disclosure agreements, and information may be transferred as part of any such completed transaction.
  • With Your Consent. We may share information for any other purpose disclosed to you at the time of collection or with your consent.

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising or targeted advertising. We do not license, rent, or trade our interest list.

4. Cookies and Similar Technologies

The Website uses cookies and similar technologies. Cookies are small data files placed on your browser or device that allow a website to recognize your browser and record information about your visit. The cookies used on the Website fall into the following categories:

  • Essential cookies. Cookies that are necessary for the Website to function, including for security and abuse-prevention purposes. These cannot be switched off through the cookie preference mechanism.
  • Performance and analytics cookies. Cookies set by the HubSpot tracking code, which is loaded site-wide by the embedded Enquiry Form and its associated script. These include hubspotutk (a visitor identifier with a default duration of six months), __hstc and __hssc (session and campaign tracking), and __hssrc. They record page views, sessions, and referrer data against a cookie identifier. As described in Section 1, if you submit the Enquiry Form, activity recorded against that identifier is linked to your contact record.
  • Functionality cookies. Cookies that support the operation of embedded features on the Website, such as the Enquiry Form itself.

Our marketing emails contain small tracking pixels that tell us whether an email was opened and which links were clicked.

Where required by applicable law, non-essential cookies are set only with your consent. The Website presents a cookie consent banner and preference mechanism through which you can accept or decline non-essential cookies and change your preferences at any time. You can also configure your browser to refuse or delete cookies, although some features of the Website may not function properly if you do.

5. Analytics

We use HubSpot to understand, in aggregate, which pages and campaigns draw interest in our intended products and which visits convert into Enquiry Form submissions, and we use PostHog for aggregate, non-identifying product analytics. We use these analytics to operate and improve the Services and to inform our product roadmap. We do not use advertising networks, we do not serve interest-based advertising, and we do not permit third parties to collect information through the Services for their own advertising purposes.

6. Your Choices

  • Marketing communications. You may opt out of marketing communications at any time by using the unsubscribe link included in every commercial email we send, or by contacting us at compliance@windhelm.finance. When you opt out, we maintain a suppression record of your address so that the opt-out is honoured permanently; this is why an opt-out is recorded rather than deleted. We may still send you non-marketing communications, such as a direct response to your enquiry.
  • Cookies. You may manage non-essential cookies through the cookie consent banner and preference mechanism on the Website, and through your browser settings, as described in Section 4.
  • Submissions. Providing information through the Enquiry Form is voluntary. Please do not include sensitive or confidential information in the message field.
  • Rights requests. You may submit requests to exercise the rights described in Sections 7 and 8 by contacting us at compliance@windhelm.finance.

7. Your State Privacy Rights

Depending on your state of residence, you may have some or all of the following rights under applicable US state privacy laws, subject to the conditions and exceptions in those laws:

  • the right to confirm whether we process your personal information and to access that personal information;
  • the right to correct inaccuracies in your personal information;
  • the right to delete personal information you provided to us or that we obtained about you;
  • the right to obtain a copy of your personal information in a portable and, to the extent technically feasible, readily usable format;
  • the right to opt out of the sale of personal information, the sharing or processing of personal information for targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. As described in Section 3, we do not sell personal information and do not process personal information for targeted advertising; and
  • the right not to receive discriminatory treatment for exercising your rights.

Residents of California may also request, under California Civil Code Section 1798.83 (the “Shine the Light” law), certain information regarding disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

To exercise any of these rights, contact us at compliance@windhelm.finance. We will verify your request using the information associated with your record, and we may ask for additional information reasonably necessary to verify your identity. An authorized agent may submit a request on your behalf where permitted by applicable law. If we decline to take action on your request, you may appeal our decision by replying to our response or by contacting us at the same address with the subject line “Privacy Appeal,” and we will respond to your appeal as required by applicable law. Where your state’s law provides, you may also contact your state Attorney General if your appeal is denied. We honor opt-out preference signals, such as the Global Privacy Control, as required by applicable law.

8. Your EEA and UK Privacy Rights

Legal Basis for Processing

If you are located in the European Economic Area or the United Kingdom, we process your personal data only where we have a legal basis to do so, namely:

  • Consent. Where you have given consent, such as your opt-in to marketing communications and your acceptance of non-essential cookies. You may withdraw consent at any time.
  • Performance of a contract. Where processing is necessary to take steps at your request, such as responding to your enquiry.
  • Legal obligation. Where processing is necessary to comply with a legal obligation to which we are subject.
  • Legitimate interests. Where processing is necessary for our legitimate interests, such as operating and securing the Website, conducting business-to-business development with institutional contacts, and administering our business, except where those interests are overridden by your interests or fundamental rights and freedoms.

Your Legal Rights

Subject to applicable law, you have the right to: request access to your personal data; request correction of inaccurate or incomplete personal data; request erasure of your personal data; object to processing of your personal data, including an absolute right to object to processing for direct marketing purposes; request restriction of processing of your personal data; request transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format; and withdraw consent at any time where we rely on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at compliance@windhelm.finance. We try to respond to all legitimate requests within one month. It may take longer if your request is particularly complex or you have made a number of requests, in which case we will notify you and keep you updated. You also have the right to lodge a complaint with your local supervisory authority, including, in the United Kingdom, the Information Commissioner’s Office, although we would appreciate the chance to address your concerns before you approach a regulator.

9. International Transfers

Monolith is located in the United States, and the information described in this Privacy Policy is processed and stored in the United States, principally by the service providers identified in Section 3. If you access the Services from outside the United States, including from the European Economic Area or the United Kingdom, your personal data will be transferred to, and processed in, the United States and any other jurisdiction where we or our service providers operate, and those jurisdictions may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to the United States, we rely on appropriate safeguards recognized under applicable data protection law, including the European Commission’s Standard Contractual Clauses and the UK Addendum or International Data Transfer Agreement as incorporated in our service providers’ data processing agreements, and, where a service provider maintains an active certification, the EU-U.S. Data Privacy Framework, its UK Extension, and the Swiss-U.S. Data Privacy Framework.

10. How We Protect Your Information

We implement reasonable technical and organizational safeguards designed to protect the information we hold. These include encryption of Website traffic in transit over HTTPS; provider-managed encryption at rest in the systems that hold contact data; single sign-on and multi-factor authentication on our productivity, customer relationship management, and hosting accounts; access controls that limit enquiry data to personnel who need it, including seat-level permissions restricting who can view or export contact records; rate limiting and spam and bot filtering on the Enquiry Form, including the ability to block an IP address; and logging and monitoring of infrastructure access. No method of transmission or storage is completely secure, however, and we cannot guarantee the absolute security of your information.

11. Information Storage

We retain personal information for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including responding to your enquiry, maintaining our interest list, and operating our business, and thereafter as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and maintain security, in each case determined on a case-by-case basis by reference to the nature of the information, the purposes for which it is processed, and applicable legal requirements. Where you opt out of marketing communications, we retain a suppression record of your address for as long as needed to honour your opt-out.

12. Age Restrictions

The Services are intended for persons acting in a business or professional capacity and are not intended for, or directed to, anyone under the age of 18. We do not knowingly collect personal information from anyone under the age of 16, and we do not direct the Website or any marketing to children. If you believe that a child has provided personal information to us, please contact us at compliance@windhelm.finance and we will take steps to delete the information.

13. Changes to this Privacy Policy

We may revise this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this Privacy Policy and post the updated version on the Website. Where required by applicable law, we will provide additional notice of material changes or obtain your consent. Your continued use of the Services after any changes are posted constitutes your acknowledgment of the updated Privacy Policy.

The Website may contain links to third-party websites, and the Services incorporate features provided by third parties, including the embedded Enquiry Form and the social media platforms on which we maintain accounts. This Privacy Policy does not apply to information collected by third parties through their own websites, platforms, and services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party website or service you interact with.

15. Contact Us

If you have any questions about this Privacy Policy or our information practices, or wish to exercise any of the rights described above, please contact us at compliance@windhelm.finance or by mail at Monolith Institutional LLC, 13 W. Main Street, PO Box 953, Felton, DE 19943.

Back to the page

We use essential cookies to run this site. With your consent we also set HubSpot analytics cookies, which record the pages you view and link that history to your contact record if you later submit the enquiry form. Our privacy policy explains both.

Your browser is blocking site storage, so we cannot save a preference and no analytics cookies are being set. Nothing is being tracked. Our privacy policy explains what we would set if you consented.