Privacy policy

Privacy Policy

Last updated: February 8, 2026

malum (“we”, “us”, “our”) operates this store and website, including all related information, content, features, tools, products, and services (collectively, the “Services”), to provide you with a curated shopping experience. Our store is hosted and powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit, use, or make a purchase through our Services, or otherwise communicate with us.

If there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy governs with respect to the collection, processing, and disclosure of your personal information.

By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect

When we use the term “personal information”, we mean information that identifies, relates to, describes, or can reasonably be linked to you or another identifiable individual. It does not include anonymised or de-identified data.

Depending on how you interact with the Services and where you are located, we may collect the following categories of personal information:

  • Contact details: name, billing address, shipping address, phone number, email address

  • Financial information: payment card details, transaction data, payment confirmations (processed securely by payment providers)

  • Account information: username, password, preferences, and settings

  • Transaction information: products viewed, added to cart or wishlist, purchased, returned, exchanged, or cancelled

  • Customer communications: information you provide when contacting us (e.g. customer support inquiries)

  • Device information: IP address, browser type, device identifiers, operating system

  • Usage information: interactions with the Services, pages visited, and browsing behaviour

Sources of Personal Information

We collect personal information from the following sources:

  • Directly from you, when you create an account, place an order, contact us, or otherwise provide information

  • Automatically, through cookies and similar technologies when you use or browse the Services

  • Service providers, who process information on our behalf (e.g. payment processors, analytics providers, fulfilment partners)

  • Third-party partners, where permitted by law

Legal Basis for Processing (UK & EEA)

If you are located in the United Kingdom or European Economic Area, we process your personal information under the following legal bases:

  • Performance of a contract – to fulfil orders, process payments, deliver products, and manage your account

  • Legitimate interests – to operate, improve, secure, and market our business, provided these interests do not override your rights

  • Legal obligations – to comply with tax, accounting, consumer protection, and regulatory requirements

  • Consent – where required, such as for certain marketing communications or non-essential cookies

How We Use Your Personal Information

We use your personal information for the following purposes:

Provide and Improve the Services

  • Process orders, payments, returns, and exchanges

  • Create and manage your account

  • Deliver products and customer support

  • Personalise your shopping experience and recommend relevant products

  • Improve the functionality, quality, and security of our Services

Marketing and Advertising

  • Send marketing communications by email or other permitted channels

  • Display relevant advertisements on our Services and third-party platforms

  • Measure and improve marketing performance

You can opt out of marketing emails at any time using the unsubscribe link included in our messages.

Security and Fraud Prevention

  • Detect, investigate, and prevent fraud or unauthorised activity

  • Protect our customers, business, and Services

Communications

  • Respond to inquiries and customer support requests

  • Maintain our relationship with you

Legal and Compliance

  • Comply with applicable laws and regulations

  • Respond to lawful requests from authorities

  • Enforce our Terms of Service and policies

Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve our Services, analyse usage, and support marketing activities. These may include necessary, analytics, and marketing cookies.

You can manage or disable cookies through your browser settings or cookie consent tools, where available. For more information, please see our Cookie Policy.

How We Share Personal Information

We may share your personal information in the following circumstances:

  • With Shopify, which hosts our store and provides essential commerce infrastructure

  • With service providers, such as payment processors, analytics providers, fulfilment and shipping partners, and IT support

  • With marketing and advertising partners, where permitted by law

  • With affiliates, within our corporate group

  • With authorities or legal parties, where required by law or to protect our rights

  • In connection with a business transaction, such as a merger or sale of assets

All third parties are required to handle your personal information in accordance with applicable data protection laws.

International Data Transfers

Your personal information may be transferred, stored, and processed outside your country of residence, including outside the UK or EEA.

Where such transfers occur, we rely on recognised legal safeguards, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission

  • UK International Data Transfer Agreements (IDTAs)
    unless the destination country is deemed to provide an adequate level of protection.

Children’s Data

The Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe that a child has provided us with personal information, please contact us and we will take steps to delete it.

Data Security and Retention

We implement reasonable administrative, technical, and organisational measures to protect your personal information. However, no system is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as necessary to:

  • Provide the Services

  • Comply with legal obligations

  • Resolve disputes

  • Enforce our agreements

Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

  • Right to access

  • Right to correct inaccurate information

  • Right to delete

  • Right to data portability

  • Right to restrict or object to processing

  • Right to withdraw consent, where processing is based on consent

You may exercise these rights by contacting us using the details below. We may need to verify your identity before fulfilling your request.

For information on how Shopify processes your data and your rights with respect to Shopify, visit:
https://privacy.shopify.com/en

Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the “Last updated” date and post the revised policy on our website.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: info@malum.uk

For the purposes of applicable data protection laws, malum is the data controller of your personal information.