Data protection at Malory Collections Ltd.

Your privacy is a non-negotiable luxury.

Malory Collections Ltd. collects only the details needed to provide a considered shopping experience in Cardiff. This privacy notice explains how we handle contact details, account information, payments, appointments, cookies and delivery records under the UK GDPR and Data Protection Act 2018.

Clear rules. Careful handling. We do not share your information with third parties for their marketing without your explicit consent.
01 / Introduction

A straightforward privacy notice.

Malory Collections Ltd. is the data controller for personal information collected through our website, shop enquiries and appointment requests. This notice applies when you browse our site, contact the Cardiff team, create an account, place an order or ask about delivery.

Use the details below for a privacy query. We will assess your request and respond within the time required by applicable data protection law.

Our handling promise

Access is limited to people who need the information to answer your enquiry, process a purchase, arrange an appointment or complete delivery. Records are kept for defined business and legal periods, then securely removed or anonymised when they are no longer needed.

02 / Information use

What we collect and why

Each category has a purpose and a lawful basis. We ask for what is needed, then keep it under review.

One practical rule

Payment details are handled through secure payment providers. Malory Collections Ltd. does not need to retain full card numbers.

Personal data categories, purposes and lawful bases
Data type Why we use it Lawful basis
Name, email, telephone number To answer questions, confirm details and manage an appointment request. Steps requested before a contract, or our legitimate interest in responding to enquiries.
Account and order information To process purchases, provide order updates and maintain an accurate customer record. Performance of a contract and legal obligations.
Payment-related information To authorise transactions, prevent fraud and reconcile accounts. Performance of a contract, legal obligations and legitimate interests in secure transactions.
Delivery address and contact details To arrange delivery, resolve delivery issues and retain required transaction records. Performance of a contract and legal obligations.
Marketing preferences To send updates only where you have asked to receive them and to record your choice. Consent. You can change your mind at any time.
Device, cookie and site-use data To keep the website working, protect forms and understand which pages need improvement. Consent for optional analytics; legitimate interests or essential operation for necessary cookies.
03 / Website choices

Cookies and tracking

Cookies are small text files placed on your device. Some are needed for the site to remember a form step or protect a session. Optional analytics cookies help us see broad patterns, such as which pages receive attention.

We ask before placing optional cookies where consent is required. Your choice is recorded separately from your account information.

Essential cookies

These support core site functions, security and your selected preferences. The site may not work correctly without them.

Analytics cookies

These are optional. They help us understand visits in aggregate, without using the information to identify you for advertising.

Manage your preferences

Use the cookie settings link on the website to review or change optional choices. Marketing preferences can also be changed through the preference centre or by contacting us.

Open preference guidance
04 / Your control

Your rights and contact

You can ask to access the personal information we hold about you. You can also request correction, deletion, restriction of use or a copy in a portable format where the law provides that right.

You may object to certain processing, withdraw consent for marketing and raise a concern with the Information Commissioner's Office. We may need to verify your identity before acting on a request.

  • Access: receive a copy of your personal information.
  • Rectification: correct information that is inaccurate or incomplete.
  • Erasure: ask us to remove information where there is no continuing lawful reason to keep it.
  • Portability: receive certain information in a structured, commonly used format.
  • Marketing choice: opt out at any time. We will keep a suppression record so your preference is respected.

Privacy enquiries

Malory Collections Ltd.
13 Louisa Place
Cardiff, Cardiff
CF10 5BY

Email: [email protected]
Phone: +44 7911 260225

Retention, security and service providers

We retain enquiries, order records and delivery information for as long as needed for customer service, accounting, legal duties and dispute handling. Appointment details are reviewed when the request has been completed. Our systems use access controls, encrypted storage and secure servers, while payment, delivery, hosting and technical providers process information only for agreed services.

Providers may process information outside the UK where suitable safeguards and contractual protections apply. We do not sell personal information or share it with third parties for their marketing without explicit consent.

Review the full policy with confidence.

Questions about an appointment, order record or marketing preference deserve a direct answer. Contact Malory Collections Ltd. and tell us what you need.