Last updated: April 2026
This Privacy Policy explains how Masaat London collects, uses, stores, and protects your personal data when you visit www.masaatlondon.co.uk or interact with us by any means, including email, telephone, WhatsApp, and in-person consultations.
Masaat London is the data controller responsible for your personal data.
| Detail | Information |
|---|---|
| Company name | Masaat London |
| Registration no. | 15964141 (Companies House, England & Wales) |
| Registered address | Masaat London Ltd, Orega, Arkwright House, Parsonage Gardens, Manchester, M3 2LF |
| sales@masaatlondon.co.uk | |
| Telephone | +44 (0)161 696 7302 |
| Website | www.masaatlondon.co.uk |
| VAT number | GB483380083 |
We collect and process the following categories of personal data:
We process your personal data on the following legal bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Processing your order and managing delivery | Performance of a contract (Article 6(1)(b)) |
| Managing bespoke commission enquiries and consultations | Performance of a contract / Legitimate interests |
| Responding to customer service enquiries | Legitimate interests (Article 6(1)(f)) |
| Sending marketing emails (where you have opted in) | Consent (Article 6(1)(a)) |
| Improving our website and understanding how it is used | Legitimate interests |
| Complying with legal and regulatory obligations | Legal obligation (Article 6(1)(c)) |
| Fraud prevention and account security | Legitimate interests / Legal obligation |
| Personalising your experience based on previous interactions | Legitimate interests / Consent |
We will only send you marketing emails or messages if you have explicitly opted in to receive them — for example, by subscribing to our newsletter or ticking the marketing consent box on our contact form.
You can withdraw your consent and unsubscribe at any time by:
Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
We do not sell your personal data to third parties. We share data only where necessary with the following categories of trusted partners:
| Recipient | Purpose | Location |
|---|---|---|
| Payment processor (e.g. Stripe, PayPal) | Secure processing of transactions | UK / EEA / USA — adequacy protections apply |
| Shopify Inc. | E-commerce platform hosting and order management | USA — Standard Contractual Clauses apply |
| Delivery couriers (UPS, DHL, FedEx) | Fulfilment and shipment of orders | UK / International |
| Google LLC | Analytics, advertising, and site performance (anonymised) | USA — Standard Contractual Clauses apply |
| Email service provider | Delivery of transactional and marketing emails | UK / EEA |
| Legal and professional advisers | Where required by law or to protect our legal rights | UK |
Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V.
| Data Type | Retention Period | Reason |
|---|---|---|
| Order and transaction records | 7 years from date of order | HMRC tax and legal compliance |
| Customer correspondence | 3 years from last interaction | Legitimate interests / dispute resolution |
| Bespoke commission records | 7 years from completion | Legal compliance and warranty obligations |
| Marketing preferences / consent | Until consent is withdrawn | Legal basis for marketing |
| Website analytics data | Up to 26 months (Google Analytics) | Site improvement |
| Job applicant data (if applicable) | 6 months from application | Legitimate interests |
After the relevant retention period, personal data is securely deleted or anonymised.
You have the following rights in relation to your personal data:
To exercise any of these rights, contact us at sales@masaatlondon.co.uk or in writing to our registered address. We will respond within one calendar month. We may need to verify your identity before processing the request.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
We use cookies and similar tracking technologies on our website. Full details of the cookies we use, why we use them, and how to control them are set out in our Cookie Policy, which forms part of this Privacy Policy.
We take the security of your personal data seriously. Our website operates over HTTPS (SSL encryption). Access to personal data is restricted to authorised personnel only. Payment data is handled exclusively by our payment processor and is never stored on our systems.
No method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO in accordance with our legal obligations.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last updated. We encourage you to review this page periodically. Where changes are material, we will notify you by email or a prominent notice on our website.
For any queries, requests, or concerns relating to this Privacy Policy or your personal data: