What we do with your details
Short version: we use what you send us to reply to you, and nothing else. We don’t sell it, we don’t add you to a marketing list, and you can ask us to delete it at any time.
What we collect
Only what you type into the contact form on this site: your name, email address, your Instagram handle if you choose to give it, and the message you write. Nothing is collected if you don’t submit the form — there are no analytics or advertising trackers on this site.
Why we collect it, and our lawful basis
We use it to answer your enquiry and, if you go on to work with us, to set that up. Our lawful basis under the UK GDPR is legitimate interests — responding to someone who has deliberately contacted us about our service. Where a message leads to a contract, the basis becomes performance of a contract.
Who else handles it
Form submissions are processed by Formspree, which delivers them to our inbox. This site is hosted by Netlify, and its web fonts are served by Google Fonts, which means your IP address reaches those providers as a normal part of loading and submitting the page. Each acts as a processor or service provider; none of them receive your details for their own marketing.
How long we keep it
Enquiries that don’t become work are deleted within 12 months. If we do work together, we keep what’s needed for the business relationship and for as long as UK tax and accounting rules require.
What we never do
We never sell your details, never share them with advertisers or data brokers, and never add you to a marketing list off the back of an enquiry.
Your rights
You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it. Email info@malrey.com and we’ll action it — normally within a few days, and within one month at the latest. If you’re not happy with how we’ve handled it, you can complain to the UK Information Commissioner’s Office at ico.org.uk.
Contact
Malrey, London, UK — info@malrey.com
Last updated 21 August 2026.