Legal

Privacy Policy

Last updated: 18 October 2026

This policy explains what Maison Maleb's collects when you use our website, shop and the Inner Haus tracker, why, and what you can ask us to do about it.

The short version

  • We collect what you give us: your account, your orders, your cat's profile and the records you log.
  • We use it to run the shop and the tracker for you. We don't sell it or use it for advertising.
  • A few services help us run things, such as our database and email sender. They're listed below.
  • Found cat reports are public. The photo, description and area you post can be seen by anyone. Your name, account and any microchip number are not shown.
  • You can see, download, correct or delete your information at any time.

Who we are

Maison Maleb's ("we", "us") is a trading name of FIN METHOD LTD, a company registered in England and Wales (company number 16420417), whose registered office is at 86-90 Paul Street, London, England, EC2A 4NE. We are the controller of the personal information described here, which means we decide how and why it is used.

For anything about your information, email hello@malebs.com.

What this policy covers

One policy covers everything we run:

  • The website at www.malebs.com, including the blog, care guides, horoscopes and newsletter sign-up.
  • The shop, including your cart, orders and reviews. Checkout runs on Shopify, at checkout.malebs.com.
  • The Inner Haus tracker, which runs in your web browser.

The Maleb's app for iPhone and Android isn't available yet. Before it launches, we'll update this policy to cover it.

The information you log about your cat (health records, weights, journal entries, photos) is about your cat, but it is linked to your account, so we treat all of it as your personal information.

What we collect

Most of it comes from you directly. A small amount is collected automatically when you use the website or the tracker.

InformationExamplesWhere it comes from
Account detailsName, email address, password (stored encrypted), and, if you sign in with Google, the name, email address and profile picture from your Google accountYou, when you create a tracker account
Phone numberOnly if you choose to verify one in your tracker accountYou
Order detailsName, delivery address, phone number, items bought, order historyYou, at checkout. Card details go to Shopify and its payment providers, never to us
Your cat's profileName, breed, birthday, star sign, microchip number, insurance and vet details, photoYou, in the tracker
Your cat's care recordsVaccinations, medications, flea and worming treatments, weights, appointments, journal entries, moments, activity logs, symptom checker answers, documents you uploadYou, in the tracker
Community contentProduct reviews, found cat reports (photo, description, neighbourhood, city and region, and a microchip number if you add one), friends, points and leaderboardYou, when you post or take part
Marketing preferencesNewsletter subscription, horoscope email requests (your cat's name, birthday and star sign), which emails you open and clickYou, and our email services
Device and usage dataIP address, browser or device type, pages visited on the websiteCollected automatically

We don't collect anything about your health. We don't buy information about you from anyone else.

Your cat's health records are about an animal, so they aren't "special category" data under UK law. We treat them with the same care anyway.

The tracker also works out a behaviour baseline: an average of your recent journal entries, used to flag when your cat's mood seems to change. It's calculated only from your own entries, shown only to you, and makes no decisions about you.

Why we use it

UK data protection law requires a lawful basis for each use. Ours are below.

What we doLegal basis
Run your account and the tracker, store your cat's records, send the reminders you setContract: it is the service you signed up for
Take payment, deliver orders, send order and dispatch emails, handle returnsContract
Ask you once, after an order, to review what you boughtLegitimate interests. You can opt out in any review email
Show your reviews and found cat reports, and your points and streaks to the friends you connect withContract, and you choose what to post
Check a found cat's microchip number against registered pets, and tell that pet's owner and people who asked for alerts in that regionLegitimate interests: reuniting cats with their owners
Pass your name and email address to the finder when you tap "This might be my cat" and confirmContract, at your request
Send the newsletter and monthly horoscope emailsConsent. You can unsubscribe at any time
Tell you when a sold-out product is back, if you join its waitlistContract, at your request
Keep the website and tracker secure, and prevent spam and fraudLegitimate interests: protecting you and us
Understand which pages are used, so we can improve themConsent, through the cookie banner on the website
Measure whether our advertising worksConsent, through the cookie banner on the website
Keep order and tax recordsLegal obligation

We don't sell your information. We don't use it for advertising profiles, and we don't make automated decisions about you that have legal or similarly significant effects.

We don't give your cat's records to vets, insurers or anyone else. If you want your vet to see them, you export the vet report and send it yourself.

Who we share it with

We use a small number of services to run the website, shop and tracker. They process your information only on our instructions and under a contract with us.

ServiceWhat it does for usWhat it receives
ShopifyProduct catalogue, cart, checkout, payments, and order and dispatch emails. It also sends our newsletter until our move to Resend is completeOrder, delivery and payment details, and newsletter and waitlist sign-ups
Royal Mail, Evri and DPDDeliver your orderName, delivery address, and email or phone number for delivery updates
Judge.meCollects and shows product reviews, and sends review requestsName, email address, the items ordered, and your review
VercelHosts the websiteDevice and usage data
LovableHosts the tracker (moving to Vercel)Device and usage data
SupabaseDatabase, sign-in and file storage for accounts and the trackerAccount details and everything you log in the tracker
ResendSends tracker emails, such as reminders. Our newsletter and welcome email are moving to Resend from ShopifyName, email address, email content, opens and clicks
GoogleSign-in, if you choose "Continue with Google"Your sign-in request
Google Analytics, through Google Tag ManagerWebsite statistics, only if you accept analytics cookiesDevice and usage data
Google (Shopify's Google & YouTube app and Merchant Center)Measures shop visits and purchases at checkout, only if you allow it in Shopify's cookie banner thereDevice and usage data, and order value

We may also share information with professional advisers, or where the law requires it (for example, with HMRC or the police). If Maison Maleb's is ever sold or merged, your information would pass to the new owner under this policy.

Found cats. Found cat reports are public: the photo, description and area (neighbourhood and city) can be seen by anyone, including people without an account. Your name, account and any microchip number you add are not shown. If a microchip number matches a registered pet, we let that pet's owner know in the tracker, without telling them who found the cat. If you tap "This might be my cat" on a report and confirm, we send the finder your display name and email address so they can get in touch. We never show the finder's identity to you.

Transfers outside the UK

Some of the services above store or process information outside the UK, mainly in the United States and the European Economic Area. Your tracker account and records are stored in Dublin, Ireland, which the UK recognises as giving equivalent protection. For other services, we rely on a UK government data bridge (adequacy decision) for that country, or on contract terms approved for UK transfers, such as the International Data Transfer Agreement or Addendum. You can ask us for details of the safeguard used for any service.

How long we keep it

InformationHow long
Account and tracker recordsWhile your account is open. Deleted straight away when you delete your account
Records for a cat marked as passedKept as a memorial until you delete them
Order records6 years after the order, for tax and accounting
Newsletter subscriptionUntil you unsubscribe. We keep your email on a suppression list so we don't email you again
Waitlist sign-upsUntil we've told you the product is back, or you ask us to remove you
Accounts with no sign-in for 3 yearsWe email you, then delete the account 30 days later unless you sign in
Found cat reportsShown for 30 days after posting, or until marked as reunited. Deleted when you delete them or your account
Analytics data14 months
Email delivery recordsUp to 12 months
Security logsUp to 90 days

Backups can hold deleted data for up to 30 days before they are overwritten.

Cookies

Cookies are small files a website stores in your browser. When you first visit www.malebs.com, a banner asks you to Accept all, Reject all or make Choices. We use four kinds:

  • Essential cookies and storage hold your cart, remember your cookie choice and keep you signed in to the tracker. They are always on, because the site and tracker don't work without them. On the website, your cart and your cookie choice are kept in your browser's storage and are not sent to anyone.
  • Preference storage remembers small choices. In the tracker, that's things like your weight unit or a dismissed banner. On the website, it remembers whether you've seen our welcome offer or already joined the list, so we don't show it again. It stays in your browser and isn't sent to anyone.
  • Analytics cookies (Google Analytics: _ga and _ga_HTDKBC7FC2, kept for up to 2 years) tell us which pages are read and how people find us. We only set these if you accept them. Until you do, Google's tools are not even loaded.
  • Marketing cookies let Google measure whether our advertising works. We only set these if you accept them. If we add another advertising platform, we'll name it here first.

You can change your choice at any time from Cookie settings in the footer, or block cookies in your browser. Blocking essential cookies will stop the cart and tracker sign-in from working.

Checkout at checkout.malebs.com is run by Shopify, which shows its own cookie banner there. The tracker sets no analytics or advertising cookies.

The tracker

The tracker asks before using anything on your phone or computer, and only when you use the feature that needs it:

  • Camera and photos, to add a photo of your cat, a moment or a document. We only receive the images you choose, and we remove location data (GPS) from photos before they're uploaded.

The tracker doesn't track you across other apps or websites, and contains no advertising.

Your cat's records stay yours. You can download them as a vet report, and they are deleted when your account is deleted.

Your rights

You can ask us to:

  • Give you a copy of the information we hold about you.
  • Correct anything that is wrong or incomplete.
  • Delete your information. You can delete your account yourself in the tracker, under Account → Delete account. This deletes your cats' records, photos and documents straight away, and takes you off the tracker's own email list. Our newsletter is sent separately: to stop it, use the unsubscribe link at the bottom of any newsletter. Order records are kept for 6 years, as tax law requires. You can also email us and we'll do it within 30 days.
  • Restrict or object to how we use it, including any use based on our legitimate interests.
  • Send it to you or another service in a common format.
  • Withdraw consent for marketing emails, analytics or marketing cookies, at any time.

Email hello@malebs.com. We reply within one month, and may ask you to confirm your identity first. There is no charge.

How to complain

If you're unhappy with how we've handled your information, tell us first at hello@malebs.com with "Complaint" in the subject. We'll acknowledge it within 30 days, look into it, keep you updated and tell you the outcome.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Children

The website, shop and tracker are for adults. You must be 18 or over to create an account or place an order. We don't knowingly collect information from children. If you think a child has given us their details, contact us and we'll delete them.

Security

Your information is encrypted in transit and stored with access controls, so each account can only see its own records. Passwords are stored in encrypted form and we can't read them. No system is completely secure; if a breach affects you, we'll tell you and the ICO as the law requires.

Documents you upload, such as vet letters, are kept in private storage. We remove location data (GPS) from photos before they're uploaded. Please don't include personal details such as your address or phone number in journal notes or found cat descriptions.

Changes to this policy

We'll update this page when what we collect or how we use it changes, and change the date at the top. If a change is significant, we'll tell you by email or in the tracker before it takes effect.

Your cart

Sold out

Join the waitlist

For . We will email you when it is back.

See our Privacy Policy.