Home  /  Privacy Policy

Privacy Policy

How we collect, use and look after your personal information — and the rights you have over it.

Last updated: 10 August 2026

1. Who we are

Malamute Matters Limited is a charitable company registered in England & Wales (registered charity no. 1158157, company no. 09155110). Our registered office is 35 Holly Bank Road, Brighouse, West Yorkshire HD6 3JF.

We are the "data controller" for the personal information described in this policy, which means we decide how and why it is used. This policy covers the website malamutematters.co.uk and the ways you can contact or support us.

Our registration with the Information Commissioner's Office (ICO) is [ICO REGISTRATION NUMBER — or delete this sentence if you are exempt].

2. What information we collect

When you contact us

If you use our contact form or email us, we collect your name, email address, phone number (if you give one), the subject you choose and whatever you write in your message. If you are asking us to fund treatment for a dog, that may include details of the dog, the treatment and your vet.

When you order from our shop

Payments are taken by PayPal, not by us. We never see or store your card or bank details. From a completed order we receive your name, delivery address, email address and the details of what you bought, so that we can post it to you.

When you enter the calendar or send us photos

We collect your name, email address, your dog's name and any photographs you send us. If you send us a photo for the calendar or a success story, you are giving us permission to publish it — please don't send photographs of other people's dogs, or photographs containing other people, without their agreement.

When you donate

If you donate by bank transfer or PayPal we will see your name and the payment reference. [If you claim Gift Aid, say so here and mention that you collect the donor's home address and a Gift Aid declaration, which HMRC requires you to keep.]

Information collected automatically

Our web host records standard technical information when a page is requested, such as your IP address, browser type and the page you asked for. This is normal for any website and is used to keep the site running and secure.

When a volunteer signs in to manage the shop

Our shop has a password-protected admin page. Whenever someone signs in, fails to sign in, or changes a product or category, we record the date and time, what was done, the IP address it came from and the browser used. This is a security record, not a record about customers — it exists so we can see who changed a price, and so we would notice somebody trying to guess the password.

This log is kept on our own server, cannot be reached from the web, and is not shared with anyone. It replaces itself as it grows rather than being kept indefinitely.

3. How we use it, and our lawful basis

UK data protection law requires us to have a lawful basis for using your information. Ours are:

What we doWhyLawful basis
Reply to your enquiry So we can answer you Legitimate interests — you contacted us and expect a reply
Process and post your order To fulfil the order you placed Performance of a contract
Consider a funding request To assess whether we can help a dog Legitimate interests — our charitable purpose
Publish a calendar photo or success story To fundraise and share what your support achieved Consent — which you can withdraw at any time
Keep records of donations Charity accounting and, where relevant, Gift Aid Legal obligation
Log admin sign-ins and changes To keep the shop secure and see who changed what Legitimate interests — protecting the charity's systems and money

[If you send a newsletter or fundraising emails, add a row for it. Marketing emails to individuals normally require consent, and every message must offer an easy way to unsubscribe.]

We do not sell your information to anyone, ever, and we do not pass your details to other organisations for their own marketing.

4. Who we share it with

We share personal information only where we need to:

  • PayPal — processes shop payments and donations. PayPal is a separate data controller and handles your payment details under its own privacy policy.
  • Our email and web hosting providers — [NAME YOUR HOST AND EMAIL PROVIDER, e.g. "our website is hosted by X and our email is provided by Y"].
  • A rescue or vet — if you ask us to fund treatment, we will discuss the case with the rescue or veterinary practice concerned.
  • Anyone we are legally required to share it with, such as HMRC for Gift Aid or the Charity Commission.

Some of these providers may process information outside the UK. Where that happens, we rely on the safeguards required by UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision.

5. Cookies and browser storage

This website sets no advertising or tracking cookies, and we use no analytics. We are not counting you, profiling you or following you around the internet.

Our typefaces, images and scripts are all served from our own website rather than from third-party services, so simply reading these pages doesn't share anything about you with anyone else.

The shop basket uses a browser feature called local storage to remember what you have added, under the name mm-cart-v1. It stays on your own device, is never sent to us, and holds only the item names, prices and quantities you chose. Clearing your browser data removes it, and emptying the basket clears it too.

If you go through PayPal checkout, PayPal will set its own cookies on its own pages to make the payment work. That is outside our control and covered by PayPal's privacy policy.

[If you ever add Google Analytics, a Facebook pixel or similar, you must add a cookie banner and update this section. Don't add tracking without doing both.]

6. How long we keep it

  • General enquiries — [e.g. 2 years] after your enquiry is closed.
  • Order records — [e.g. 7 years], as charity accounting rules require.
  • Gift Aid declarations — [HMRC requires these for at least 6 years after the last donation].
  • Calendar photos and success stories — until you ask us to remove them, or the campaign ends.
  • Admin security log — the most recent entries only. The file replaces itself once it reaches its size limit, so older records are removed automatically.

When we no longer need your information, we delete it or securely destroy it.

7. How we keep it safe

Access to enquiries, orders and donation records is limited to the trustees and volunteers who need it to do their job. We take reasonable steps to keep our accounts secure, and we never ask you for a password, PIN or full card number — if you receive a message claiming to be from us that does, it isn't from us. Please tell us about it.

8. Your rights

Under UK data protection law you have the right to:

  • ask what personal information we hold about you, and get a copy of it;
  • have inaccurate information corrected;
  • ask us to delete your information, in certain circumstances;
  • ask us to restrict how we use it, or object to us using it;
  • ask us to transfer it to another organisation, in certain circumstances;
  • withdraw your consent at any time, where we relied on consent — for example, to take a photograph of your dog back down.

These rights are free to use. Write to us using the details below and we will reply within one month.

9. Children's information

Our website is not aimed at children, and we do not knowingly collect information about anyone under 13. If a child has sent us information, please contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page tells you when it was last changed. If we make a significant change to how we use your information, we will say so on our website.

11. How to contact us or complain

For anything to do with your personal information, contact contact@malamutematters.co.uk, or write to Malamute Matters Limited, 35 Holly Bank Road, Brighouse, West Yorkshire HD6 3JF.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.