Privacy policy
Last updated: 21-07-2026
Studio Malone Ltd is committed to protecting your privacy. This policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over it.
We are the data controller for the information described in this policy. That means we decide what is collected and what happens to it.
Who We Are
Studio Malone Ltd is a company registered in Northern Ireland, company number NI741435, with its registered office at 16 Mount Charles, Belfast, BT7 1NZ, United Kingdom.
If you have any question about this policy or about how we handle your information, email us at support@studiomalone.co.uk.
What Information We Collect
Information you give us
- Your name, delivery address, billing address, email address and telephone number when you place an order
- Your email address when you subscribe to our newsletter or create an account
- The content of any message you send us, including photographs you provide in support of a return or a claim
- Your account login details, where you choose to create an account
Information collected automatically
- Your IP address, browser type, device type and operating system
- Pages viewed on our site, referring pages, and the time and date of your visit
- Records of how you interact with our pages, including clicks, scrolling and mouse movement, collected through Microsoft Clarity where you have consented
- Information collected through cookies and similar technologies, as described in the Cookies section below
Information we do not hold
We do not see or store your full card number, expiry date or security code. Card payments are handled directly by our payment providers, and only a token and the last four digits are returned to us so that we can identify the transaction.
How We Use Your Information, and Our Lawful Basis
Under UK data protection law we must have a lawful basis for using your information. The bases we rely on are set out below.
| What we do | Why | Lawful basis |
|---|---|---|
| Process and fulfil your order | To deliver the goods you have bought | Performance of a contract |
| Contact you about your order | To confirm, update or resolve an issue | Performance of a contract |
| Handle returns, exchanges and refunds | To meet our obligations to you | Performance of a contract and legal obligation |
| Keep records of orders and payments | To meet accounting and tax obligations | Legal obligation |
| Prevent and detect fraud | To protect our business and our customers | Legitimate interests |
| Measure how the site is used | To understand and improve the experience | Consent |
| Record page interactions and session replays | To identify problems and improve the site | Consent |
| Send marketing emails | To tell you about new pieces and offers | Consent, or legitimate interests where you are an existing customer |
| Respond to your enquiries | To provide customer service | Legitimate interests |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and we have concluded that it is not. You may object to this processing at any time, as set out under Your Rights below.
Who We Share Your Information With
We do not sell your personal information. We share it only with the organisations that help us run our business, and only to the extent they need it.
- Shopify Inc., which hosts our online store and processes orders on our behalf
- Our payment providers, including Shopify Payments, PayPal and Klarna, which process payments and carry out their own fraud checks
- Our delivery partners, Royal Mail, DHL eCommerce, DHL Express and Evri which receive your name, delivery address and contact details in order to deliver your order
- Klaviyo Inc., which stores our subscriber list and sends our marketing emails where you have subscribed
- Google LLC, which provides Google Analytics and helps us understand how the site is used
- Microsoft Corporation, which provides Microsoft Clarity, a tool that records how visitors interact with our pages through heatmaps and session recordings
- Our professional advisers, such as accountants, where necessary
- Law enforcement or regulators, where we are legally required to do so
Klarna and PayPal act as independent data controllers for the payments they handle. They have their own privacy policies, which we recommend reading before using their services.
Analytics and Session Recording
We use Google Analytics to understand how visitors find and use our site, such as which pages are viewed and how long people stay.
We also use Microsoft Clarity, which records how visitors interact with our pages. This produces heatmaps and playbacks of page interactions, showing where people click, how far they scroll and how the cursor moves. These recordings help us find pages that are confusing or broken.
Both tools are only loaded where you have given consent through our cookie banner. Neither is used to identify you personally, and Clarity masks text entered into form fields. You can withdraw consent at any time by changing your cookie preferences.
International Transfers
Some of the organisations we work with are based outside the United Kingdom, including Shopify, Klaviyo, Google and Microsoft, which process data in the United States and elsewhere.
Where your information is transferred outside the UK, we make sure it is protected by an approved safeguard, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a finding by the UK government that the country provides adequate protection.
How Long We Keep Your Information
- Order and payment records: six years from the end of the financial year in which the order was placed, to meet accounting and tax requirements
- Customer account details: for as long as your account remains open, and for 12 months after you close it
- Marketing subscriptions: until you unsubscribe, and for a short period afterwards so that we can honour your request
- Customer service correspondence: three years from the date of your last contact
- Website analytics: Website analytics: for up to 14 months from collection, or as long as the relevant analytics provider retains it
When information is no longer needed, we delete it or anonymise it so that it can no longer identify you.
Your Rights
Under UK data protection law you have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or incomplete
- Erase your information, in certain circumstances
- Restrict how we use your information, in certain circumstances
- Object to processing based on our legitimate interests, and to direct marketing at any time
- Data portability, which is the right to receive your information in a structured, commonly used format
- Withdraw consent at any time, where our processing is based on consent
To exercise any of these rights, email support@studiomalone.co.uk. We will respond within one month. There is no charge, unless a request is clearly unfounded or excessive.
We may ask you to confirm your identity before acting on a request, so that we do not disclose your information to somebody else.
Marketing
We send marketing emails only where you have subscribed, or where you have bought from us and we are telling you about similar pieces.
Every marketing email contains an unsubscribe link, and you can opt out at any point by using it or by emailing us. Unsubscribing from marketing does not stop the emails we need to send about an order you have placed.
Cookies
Our site uses cookies and similar technologies. A cookie is a small text file placed on your device that lets the site remember your actions and preferences.
We use four kinds:
Necessary cookies, which are required for the site to work, such as remembering the contents of your basket and keeping you signed in. These are always on and do not require consent.
Analytics cookies, which help us understand how the site is used through Google Analytics. These are set only with your consent.
Session recording cookies, which allow Microsoft Clarity to produce heatmaps and playbacks of how visitors interact with our pages. These are set only with your consent.
Marketing cookies, which allow us and our partners to measure and improve our advertising. These are set only with your consent.
When you first visit the site, our cookie banner lets you accept or reject each non-essential category. You can change your choice at any time through the cookie preferences byreopening the cookie banner, or by clearing cookies in your browser settings. Blocking some cookies may affect how the site works.
Security
We take appropriate technical and organisational measures to protect your information, including encrypted connections, access controls and the use of reputable providers who are contractually required to protect the data they handle for us.
No method of transmission over the internet is completely secure, so while we take security seriously, we cannot guarantee absolute security of information sent to us online.
Children
Our site and products are not directed at children, and we do not knowingly collect information from anyone under the age of 16. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to This Policy
We may update this policy from time to time. The date at the top shows when it was last changed. Where a change is significant, we will tell you by email or by a notice on the site.
How to Complain
If you are unhappy with how we have handled your personal information, please contact us first at support@studiomalone.co.uk so that we can try to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection.
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
Business Information
Company Name: Studio Malone Ltd T/A Studio Malone
Company Registration No.: NI741435
Registered Address: 16 Mount Charles, Belfast, BT7 1NZ
Email: support@studiomalone.co.uk
Phone: +44 7848 409762
Customer Support Hours:
Monday to Friday: 9:00 am – 5:00 pm (GMT)
Response Time:
Within 24–48 business hours
