1. Scope
This notice applies when you visit malinemarketing.com, submit a project enquiry, send a Maline Shop order request, correspond with Maline Marketing (“Maline”, “we”, “us” or “our”), or otherwise provide personal information to us in connection with our own business operations.
Maline provides branding, content production, social media, performance advertising, SEO/GEO/AEO, web and app development, AI products and automation, and authorised VAPT/security services. Where we process personal information solely on a client’s documented instructions while delivering a service, that processing may instead be governed by the client agreement and any applicable data-processing agreement.
2. Who is responsible
Maline Marketing is responsible for the personal information collected through this website for its own business purposes. Privacy enquiries and rights requests can be sent to hello@malinemarketing.com.
Where Maline processes personal information solely on a client’s documented instructions while providing services, the client may instead be the controller and Maline may act as a processor/service provider under the applicable project agreement.
3. Notice at collection
When you use a Maline form, we collect only the categories needed for the purpose shown on that form. We do not use a project enquiry or Shop order request to subscribe you to marketing.
Project enquiries
We collect identifiers and business/contact information such as your name, email address, optional phone number, company, optional website, service interest, referral source and the project message you choose to provide. We use this information to review and respond to your enquiry, assess scope and fit, communicate with you, prepare a proposal or agreement, prevent abuse and maintain appropriate business records.
If no engagement follows, enquiry information is normally retained for up to 24 months after the last meaningful interaction. If an engagement begins, relevant records may be retained for the client/project period and then for the longer business-record period described below.
Shop order requests
We collect your name, email address, optional phone number, country, delivery address, city, postcode, optional order note, cart/order details, detected pricing region and indicative merchandise total. We use this information to review the request, contact you, confirm availability, shipping, taxes and final pricing, fulfil any order that is later accepted, manage returns or complaints, prevent fraud and keep legally required records.
Submitting a Shop order request does not take payment and does not itself create a completed purchase. If an order is accepted, transaction and fulfilment records may normally be retained for up to seven years after completion or cancellation, or longer where required by law or a live dispute.
Technical information
Our hosting provider and security systems may process network and device information such as IP address, browser/device information, timestamps, requested pages, referral information and error/security logs. The Shop also uses browser locale/timezone and a country lookup to select an indicative regional price. Technical information is used to operate, secure and troubleshoot the site, prevent misuse and provide requested functionality.
California notice
For California residents, the categories described above may include identifiers, customer/commercial information, internet or other electronic network activity, approximate location or regional information, and professional/business information. We use them for the business and commercial purposes described in this notice. We do not sell personal information for money. If you enable advertising technologies such as Meta Pixel, disclosures of identifiers and online activity to advertising partners may be treated as “sharing” for cross-context behavioural advertising under California law. You can refuse or withdraw Advertising through Privacy choices, and our consent manager honours a recognised Global Privacy Control signal by keeping advertising tracking off. We do not use sensitive personal information to infer characteristics about you.
4. Information we collect
Information you give us
- identity and contact details, including name, email, phone and delivery/contact address where relevant;
- business details, including company, website, service interest and project context;
- Shop information, including products, quantities, size/option choices, regional pricing, delivery details and order notes;
- communications, including emails, meeting notes, proposals, support messages, complaints and rights requests;
- information supplied during a client relationship where Maline acts for its own business purposes.
Information collected automatically or from your device
- server and security logs, which may include IP address, device/browser data, timestamps, page requests and error information;
- browser locale and timezone used as a fallback for Shop region selection;
- a country code returned by the Shop’s external IP-country lookup provider;
- strictly necessary cart and session information stored in your browser as described below.
Please do not send passwords, payment-card details, government identifiers, private keys, security credentials, health information or other highly sensitive information through the general enquiry or Shop note fields. VAPT/security work must move to an agreed secure channel after written authorisation and scope are established.
5. How and why we use personal information
- to respond to enquiries and take requested steps before entering a contract;
- to perform contracts, deliver services, fulfil accepted Shop orders and provide support;
- to prepare proposals, statements of work, order confirmations and invoices;
- to operate, secure, maintain, debug and improve the website and business systems;
- to detect or prevent abuse, fraud, security incidents and unlawful activity;
- to maintain accounting, tax, legal, audit and dispute records;
- to manage suppliers, collaborators and professional advisers;
- to comply with legal obligations and lawful requests;
- to send marketing only where separately permitted by applicable law.
Lawful bases where UK data-protection law applies
Depending on the activity, we rely on steps taken at your request before entering a contract, performance of a contract, compliance with legal obligations, our legitimate interests, or consent where consent is legally required. Legitimate interests may include responding to genuine business enquiries, managing client and supplier relationships, maintaining records, preventing fraud and securing or improving our systems, provided those interests are not overridden by your rights.
Where we rely on consent, you can withdraw it for future processing. Withdrawal does not affect processing that was lawful before withdrawal.
Other jurisdictions
Where applicable law uses different legal concepts, including in the United States, India or the UAE, we process personal information only for disclosed, reasonably necessary purposes and rely on the consent, contractual, legal or other grounds available under that law.
6. Forms, storage and regional pricing
Google Forms, Sheets and notification email
Maline’s custom Contact and Shop interfaces submit responses to Google Forms. Responses may be stored in linked Google Sheets and processed through Google Apps Script / Mail services so authorised Maline personnel can receive submission notifications and manage enquiries or orders. Google processes information under its applicable service terms, security controls and privacy arrangements.
Hosting
The website is hosted using Hostinger infrastructure. Hosting and related infrastructure may process technical logs and security information necessary to deliver and protect the site.
Regional Shop pricing
The Shop first uses browser locale/timezone signals to estimate a pricing region. It also requests a country code from ipapi.co. Because that request is made from your browser, the provider receives network information such as your IP address and returns a country result to the site. We use that result only to choose an indicative regional price and do not use it for behavioural advertising.
Browser storage
The Shop stores the contents of your bag in local browser storage under a functional cart key so your requested basket can persist while you browse. The cart remains until you empty it, the site clears it after a successful order request, or you clear browser storage. A temporary order summary may be held in session storage and normally ends when the browser session/tab storage is cleared.
7. Sharing and service providers
We do not sell personal information. We disclose information only as reasonably necessary for the purposes in this notice, including to:
- Google services used for forms, spreadsheets, scripting and email notifications;
- Hostinger and other hosting, domain, infrastructure, security or backup providers;
- ipapi.co for the Shop country lookup described above;
- Google, if you allow Analytics, for Google Analytics measurement and related consent-controlled functionality;
- Meta, if you allow Advertising, for Meta Pixel measurement, audience and advertising functionality;
- authorised Maline personnel, contractors or specialist collaborators who need the information for an enquiry, service or accepted order and are subject to appropriate confidentiality obligations;
- accountants, lawyers, insurers, auditors and other professional advisers;
- courts, regulators, law-enforcement bodies or other parties where disclosure is legally required or reasonably necessary to establish, exercise or defend legal rights;
- a buyer, investor or successor as part of a genuine merger, financing, reorganisation or sale of all or part of the business, subject to appropriate safeguards.
External social-media links on the site lead to third-party platforms. Those platforms process information under their own privacy terms when you choose to visit them.
8. International transfers
Maline serves customers internationally and uses technology providers that may process or allow access to information in countries different from your own.
Where UK restricted-transfer rules apply, we use an available lawful transfer route, such as UK adequacy regulations or appropriate contractual safeguards including the UK International Data Transfer Agreement or UK Addendum where relevant, together with any required data-protection test/transfer assessment.
Where UAE, Indian, US state or other transfer rules apply, we use the safeguards required by the relevant law and provider arrangement. Transfer arrangements are reviewed when processors, data locations or applicable law materially change.
9. Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, security and dispute requirements. Our intended baseline schedule is:
- unsuccessful project enquiries: up to 24 months after the last meaningful interaction;
- active client/project records: for the relationship and normally up to seven years after it ends where needed for contracts, tax/accounting or legal claims;
- accepted Shop order and fulfilment records: normally up to seven years after completion or cancellation where needed for tax/accounting, consumer rights, fraud prevention or legal claims;
- privacy, complaint and rights-request records: normally up to six years after closure where needed to demonstrate how the request was handled;
- security/server logs under Maline’s direct control: ordinarily no longer than 90 days unless needed for an incident, investigation, fraud prevention or legal requirement;
- cart local storage: until the cart is emptied, cleared after a successful request, or removed through browser controls;
- session storage: normally until the relevant browser session/tab storage ends.
Service providers may keep backups or system logs on their own documented schedules. We periodically review Google Form/Sheet records and other stores so information is not retained indefinitely without a reason.
10. Your rights
Your rights depend on your location, the law that applies to the processing, and available exemptions. We will not discriminate against you for exercising a legally protected privacy right.
United Kingdom
Where UK data-protection law applies, you may have rights of access, rectification, erasure, restriction, objection, portability and rights relating to certain automated decisions, as well as the right to complain to the Information Commissioner’s Office.
California and other US states
Where a US state privacy law applies to Maline and to your information, you may have rights to know/access, correct, delete, obtain a portable copy, and opt out of sale, targeted advertising or certain profiling, together with rights against discrimination and any applicable appeal right. California residents may also have a right to limit certain uses of sensitive personal information.
Maline does not sell personal information for money. Where use of an advertising technology is legally treated as sale, sharing or targeted advertising, eligible users can opt out through the site’s Privacy choices control. Our implementation also honours a recognised Global Privacy Control signal by keeping the Advertising category off. We do not require an account to make that choice.
India
As the relevant provisions of India’s Digital Personal Data Protection Act 2023 and Digital Personal Data Protection Rules 2025 come into force and apply to our processing, eligible individuals may exercise the rights and grievance mechanisms available under that framework, including correction/update, erasure and grievance redressal as applicable.
United Arab Emirates
Where the UAE Personal Data Protection Law applies, eligible individuals may have rights including access to information about processing, correction, restriction or cessation of processing, portability and other rights provided by applicable law, subject to lawful exceptions.
How to exercise a privacy right
Email hello@malinemarketing.com with “Privacy request” in the subject line and enough information to identify the relevant relationship and request. We may need to verify your identity proportionately before acting. We will respond within the period required by applicable law.
11. Marketing communications
Submitting a project enquiry or Shop order request does not subscribe you to a marketing list. If we introduce newsletters or promotional email/SMS/telephone marketing, we will use a separate lawful basis or opt-in where required, provide a clear unsubscribe/opt-out method, maintain suppression records and comply with local communications rules.
You can object to or opt out of direct marketing at any time by using the unsubscribe method provided in the communication or emailing hello@malinemarketing.com.
12. Cookies, analytics and advertising technologies
The website uses necessary browser storage for functions you request, including the Shop basket and your privacy choices. These necessary technologies operate without advertising or behavioural-tracking purposes.
The site is also configured to support Google Analytics 4 and Meta Pixel. These are treated as non-essential. They are not loaded until the relevant privacy choice allows them. You can accept, reject or change these choices at any time using the Privacy choices control in the footer.
Google Analytics 4
If you allow Analytics, Google Analytics may process online identifiers and information about how you use the site, such as pages viewed, approximate location derived from network information, browser/device information, referral information, timestamps and interaction/measurement events. Google Analytics may set cookies such as _ga and related measurement cookies. We use this information to understand aggregate site usage, diagnose performance and improve the website.
Google advertising-related consent signals remain denied unless you separately allow Advertising. Our implementation uses a consent-gated/basic approach so Google Analytics is not loaded before Analytics consent.
Meta Pixel
If you allow Advertising, Meta Pixel may receive browser/device information, page URLs, online identifiers and website-event information for advertising measurement, audience creation, remarketing and related Meta advertising features. Meta may set or read identifiers such as _fbp or _fbc and may combine information under its own terms and privacy practices.
Advertising is off by default. If your browser sends a recognised Global Privacy Control (GPC) signal, the website keeps the Advertising category off and does not load Meta Pixel through our consent manager.
Changing your choice
Your choices are stored locally so the site can remember them. We normally ask again after approximately 180 days or when the consent setup materially changes. Withdrawing consent stops future optional tracking through our implementation and we attempt to remove common first-party measurement cookies; third-party providers may retain information already lawfully received according to their own retention rules.
If we add another non-essential analytics, advertising, heatmap, social-tracking or similar technology, we will update the notice and consent controls before activating it where required.
13. Security and personal-data breaches
We use proportionate technical and organisational measures designed to protect personal information, including access controls, restricted sharing, account security, updates, backups and supplier management appropriate to the information involved. No internet service can promise absolute security.
If a personal-data breach occurs, we will investigate, contain and document it and will notify regulators and affected individuals when applicable law requires us to do so.
14. Children
This website is designed for business audiences and is not directed to children. We do not knowingly use the public forms to collect personal information from children under 13, and Shop order requests should be made only by adults with legal capacity to contract. If we learn that a child’s information was submitted inappropriately, we will review and delete or otherwise handle it as required by law.
15. Changes to this notice
We may update this notice when our services, vendors, data practices or legal obligations change. Material new uses of personal information will be brought to individuals’ attention where required before the new processing begins. The date at the top shows the latest published revision.
16. Contact and complaints
For privacy questions, complaints or rights requests, contact hello@malinemarketing.com.
If we cannot resolve your concern, you may have the right to complain to the regulator or authority available in your jurisdiction. Relevant authorities may include the UK Information Commissioner’s Office, the California Privacy Protection Agency or California Attorney General where applicable, the Data Protection Board of India as the relevant provisions come into force, and the competent UAE data-protection authority.