UK GDPR Compliant
Last updated: June 2026
Max & Melly (“we”, “us”, “our”) is a UK‑based design studio. We are committed to protecting your privacy and handling your personal information with care, transparency, and respect. This Privacy Statement explains what personal data we collect, how we use it, and the rights you have under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Max & Melly Limited
Company number: 15184805
Registered Address:
3a Ravensdon Street
Kennington
London SE11 4AQ
United Kingdom
Email: info@maxandmelly.com
We are the data controller for the personal information collected through our website and related services.
2. What Personal Data We Collect
We collect and process the following categories of personal data:
- Contact information — such as your name and email address when you contact us.
- Enquiry information — details you provide when requesting information about our collections, catalogue, or studio.
- Technical data — including IP address, browser type, device information, and pages visited.
- Cookies and analytics data — used to understand how visitors use our site and to improve performance.
HubSpot Contact Forms
When you submit a form on our website, your information is processed through HubSpot, our customer relationship management (CRM) and contact‑form provider. This may include your name, email address, and any message you choose to send.
HubSpot also collects limited technical data (such as IP address and device information) to ensure the form functions correctly and to help us understand how visitors interact with our site.
As our website does not currently include an online shop, we do not collect payment information or order history at this stage.
3. How We Use Your Personal Data
We use your information to:
- Respond to enquiries and provide customer support
- Share information about our collections, catalogue, or studio
- Maintain, secure, and improve our website
- Understand how visitors engage with our content
- Comply with legal obligations
We only process your data where we have a lawful basis, such as your consent, our legitimate interests in running the studio, or compliance with legal requirements.
4. How We Share Your Information
We do not sell your personal data.
We may share your information with trusted third‑party service providers who support the operation of our website and studio, including:
- HubSpot — for managing contact forms, email communications, and website analytics
- Website hosting and security providers
- Professional advisers (e.g., legal or accounting services) where necessary
- Authorities, if required by law
All service providers act as data processors on our behalf and are required to handle your data securely and in accordance with UK GDPR.
5. International Transfers
Some of our service providers, including HubSpot, may process personal data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
- UK‑approved Standard Contractual Clauses (SCCs)
- Additional technical and organisational measures implemented by HubSpot
- Data hosting options within the EU where available
These measures ensure your personal data remains protected to UK GDPR standards.
6. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes described in this statement, or as required by law. Enquiry‑related information is typically kept for up to 12 months, unless ongoing communication requires otherwise.
7. Cookies and Analytics
Our website uses cookies and similar technologies to:
- Support essential site functions
- Enable HubSpot forms and analytics
- Understand how visitors engage with our content
- Improve performance and user experience
You can manage or disable cookies through your browser settings. If you choose to disable cookies, some features of the site may not function as intended.
Embedded content (such as catalogue viewers or social media links) may also collect data in line with their own privacy policies.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate information
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent at any time (where consent is the basis for processing)
- Request data portability
To exercise any of these rights, contact us at info@maxandmelly.com
9. Security
We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, or disclosure.
10. Changes to This Privacy Statement
We may update this statement from time to time. Any changes will be posted on this page with an updated “Last updated” date.
11. Contact Us
If you have questions about this Privacy Statement or how we handle your data, please contact:
Email: info@maxandmelly.com
Max & Melly Limited
Company number: 15184805
Registered Address:
3a Ravensdon Street
Kennington
London SE11 4AQ
United Kingdom
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.