Legal
Privacy Policy
Last updated: 18 October 2026
This policy explains what Maison Maleb's collects when you use our website, shop and the Inner Haus tracker, why, and what you can ask us to do about it.
The short version
- We collect what you give us: your account, your orders, your cat's profile and the records you log.
- We use it to run the shop and the tracker for you. We don't sell it or use it for advertising.
- A few services help us run things, such as our database and email sender. They're listed below.
- Found cat reports are public. The photo, description and area you post can be seen by anyone. Your name, account and any microchip number are not shown.
- You can see, download, correct or delete your information at any time.
Who we are
Maison Maleb's ("we", "us") is a trading name of FIN METHOD LTD, a company registered in England and Wales (company number 16420417), whose registered office is at 86-90 Paul Street, London, England, EC2A 4NE. We are the controller of the personal information described here, which means we decide how and why it is used.
For anything about your information, email hello@malebs.com.
What this policy covers
One policy covers everything we run:
- The website at www.malebs.com, including the blog, care guides, horoscopes and newsletter sign-up.
- The shop, including your cart, orders and reviews. Checkout runs on Shopify, at checkout.malebs.com.
- The Inner Haus tracker, which runs in your web browser.
The Maleb's app for iPhone and Android isn't available yet. Before it launches, we'll update this policy to cover it.
The information you log about your cat (health records, weights, journal entries, photos) is about your cat, but it is linked to your account, so we treat all of it as your personal information.
What we collect
Most of it comes from you directly. A small amount is collected automatically when you use the website or the tracker.
| Information | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, password (stored encrypted), and, if you sign in with Google, the name, email address and profile picture from your Google account | You, when you create a tracker account |
| Phone number | Only if you choose to verify one in your tracker account | You |
| Order details | Name, delivery address, phone number, items bought, order history | You, at checkout. Card details go to Shopify and its payment providers, never to us |
| Your cat's profile | Name, breed, birthday, star sign, microchip number, insurance and vet details, photo | You, in the tracker |
| Your cat's care records | Vaccinations, medications, flea and worming treatments, weights, appointments, journal entries, moments, activity logs, symptom checker answers, documents you upload | You, in the tracker |
| Community content | Product reviews, found cat reports (photo, description, neighbourhood, city and region, and a microchip number if you add one), friends, points and leaderboard | You, when you post or take part |
| Marketing preferences | Newsletter subscription, horoscope email requests (your cat's name, birthday and star sign), which emails you open and click | You, and our email services |
| Device and usage data | IP address, browser or device type, pages visited on the website | Collected automatically |
We don't collect anything about your health. We don't buy information about you from anyone else.
Your cat's health records are about an animal, so they aren't "special category" data under UK law. We treat them with the same care anyway.
The tracker also works out a behaviour baseline: an average of your recent journal entries, used to flag when your cat's mood seems to change. It's calculated only from your own entries, shown only to you, and makes no decisions about you.
Why we use it
UK data protection law requires a lawful basis for each use. Ours are below.
| What we do | Legal basis |
|---|---|
| Run your account and the tracker, store your cat's records, send the reminders you set | Contract: it is the service you signed up for |
| Take payment, deliver orders, send order and dispatch emails, handle returns | Contract |
| Ask you once, after an order, to review what you bought | Legitimate interests. You can opt out in any review email |
| Show your reviews and found cat reports, and your points and streaks to the friends you connect with | Contract, and you choose what to post |
| Check a found cat's microchip number against registered pets, and tell that pet's owner and people who asked for alerts in that region | Legitimate interests: reuniting cats with their owners |
| Pass your name and email address to the finder when you tap "This might be my cat" and confirm | Contract, at your request |
| Send the newsletter and monthly horoscope emails | Consent. You can unsubscribe at any time |
| Tell you when a sold-out product is back, if you join its waitlist | Contract, at your request |
| Keep the website and tracker secure, and prevent spam and fraud | Legitimate interests: protecting you and us |
| Understand which pages are used, so we can improve them | Consent, through the cookie banner on the website |
| Measure whether our advertising works | Consent, through the cookie banner on the website |
| Keep order and tax records | Legal obligation |
We don't sell your information. We don't use it for advertising profiles, and we don't make automated decisions about you that have legal or similarly significant effects.
We don't give your cat's records to vets, insurers or anyone else. If you want your vet to see them, you export the vet report and send it yourself.
Transfers outside the UK
Some of the services above store or process information outside the UK, mainly in the United States and the European Economic Area. Your tracker account and records are stored in Dublin, Ireland, which the UK recognises as giving equivalent protection. For other services, we rely on a UK government data bridge (adequacy decision) for that country, or on contract terms approved for UK transfers, such as the International Data Transfer Agreement or Addendum. You can ask us for details of the safeguard used for any service.
How long we keep it
| Information | How long |
|---|---|
| Account and tracker records | While your account is open. Deleted straight away when you delete your account |
| Records for a cat marked as passed | Kept as a memorial until you delete them |
| Order records | 6 years after the order, for tax and accounting |
| Newsletter subscription | Until you unsubscribe. We keep your email on a suppression list so we don't email you again |
| Waitlist sign-ups | Until we've told you the product is back, or you ask us to remove you |
| Accounts with no sign-in for 3 years | We email you, then delete the account 30 days later unless you sign in |
| Found cat reports | Shown for 30 days after posting, or until marked as reunited. Deleted when you delete them or your account |
| Analytics data | 14 months |
| Email delivery records | Up to 12 months |
| Security logs | Up to 90 days |
Backups can hold deleted data for up to 30 days before they are overwritten.
Cookies
Cookies are small files a website stores in your browser. When you first visit www.malebs.com, a banner asks you to Accept all, Reject all or make Choices. We use four kinds:
- Essential cookies and storage hold your cart, remember your cookie choice and keep you signed in to the tracker. They are always on, because the site and tracker don't work without them. On the website, your cart and your cookie choice are kept in your browser's storage and are not sent to anyone.
- Preference storage remembers small choices. In the tracker, that's things like your weight unit or a dismissed banner. On the website, it remembers whether you've seen our welcome offer or already joined the list, so we don't show it again. It stays in your browser and isn't sent to anyone.
- Analytics cookies (Google Analytics:
_gaand_ga_HTDKBC7FC2, kept for up to 2 years) tell us which pages are read and how people find us. We only set these if you accept them. Until you do, Google's tools are not even loaded. - Marketing cookies let Google measure whether our advertising works. We only set these if you accept them. If we add another advertising platform, we'll name it here first.
You can change your choice at any time from Cookie settings in the footer, or block cookies in your browser. Blocking essential cookies will stop the cart and tracker sign-in from working.
Checkout at checkout.malebs.com is run by Shopify, which shows its own cookie banner there. The tracker sets no analytics or advertising cookies.
The tracker
The tracker asks before using anything on your phone or computer, and only when you use the feature that needs it:
- Camera and photos, to add a photo of your cat, a moment or a document. We only receive the images you choose, and we remove location data (GPS) from photos before they're uploaded.
The tracker doesn't track you across other apps or websites, and contains no advertising.
Your cat's records stay yours. You can download them as a vet report, and they are deleted when your account is deleted.
Your rights
You can ask us to:
- Give you a copy of the information we hold about you.
- Correct anything that is wrong or incomplete.
- Delete your information. You can delete your account yourself in the tracker, under Account → Delete account. This deletes your cats' records, photos and documents straight away, and takes you off the tracker's own email list. Our newsletter is sent separately: to stop it, use the unsubscribe link at the bottom of any newsletter. Order records are kept for 6 years, as tax law requires. You can also email us and we'll do it within 30 days.
- Restrict or object to how we use it, including any use based on our legitimate interests.
- Send it to you or another service in a common format.
- Withdraw consent for marketing emails, analytics or marketing cookies, at any time.
Email hello@malebs.com. We reply within one month, and may ask you to confirm your identity first. There is no charge.
How to complain
If you're unhappy with how we've handled your information, tell us first at hello@malebs.com with "Complaint" in the subject. We'll acknowledge it within 30 days, look into it, keep you updated and tell you the outcome.
You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
The website, shop and tracker are for adults. You must be 18 or over to create an account or place an order. We don't knowingly collect information from children. If you think a child has given us their details, contact us and we'll delete them.
Security
Your information is encrypted in transit and stored with access controls, so each account can only see its own records. Passwords are stored in encrypted form and we can't read them. No system is completely secure; if a breach affects you, we'll tell you and the ICO as the law requires.
Documents you upload, such as vet letters, are kept in private storage. We remove location data (GPS) from photos before they're uploaded. Please don't include personal details such as your address or phone number in journal notes or found cat descriptions.
Changes to this policy
We'll update this page when what we collect or how we use it changes, and change the date at the top. If a change is significant, we'll tell you by email or in the tracker before it takes effect.