Legal

Privacy Policy

Last updated: 19 June 2026  ·  Applies to montalvi.com and the Montalvi Design Studio

1. Who We Are

Montalvi is a trade furniture brand operating at montalvi.com. We supply made-to-order furniture to trade buyers — hotels and serviced apartments, property developers, build-to-rent operators, letting and estate agents, landlords, interior designers and architects.

For the purposes of UK data protection law, Montalvi is the data controller responsible for your personal information. Our registered contact email is enquiries@montalvi.com.

Registered company: Mando Systems Ltd  ·  Registered in England & Wales · Company no. 17168657  ·  Registered office available on request

2. What Personal Data We Collect

We collect only what is necessary to handle your trade enquiry:

• Contact details — name, email address, telephone or WhatsApp number, business name
• Design data — furniture configurations you create or share via the Design Studio (dimensions, finish, accessories, quantity)
• Correspondence — the content of enquiries you submit by email, form, or WhatsApp
• Technical data — IP address, browser type, pages visited, session duration (collected automatically via server logs)

We do not collect payment card numbers. If you place a purchase order, payments are handled by our chosen payment processor and governed by their privacy notice.

3. How We Use Your Personal Data

We process your data under the following lawful bases:

• Performance of a contract (Article 6(1)(b) UK GDPR) — to prepare quotes, process orders, and arrange delivery of furniture you have ordered.
• Legitimate interests (Article 6(1)(f) UK GDPR) — to respond to trade enquiries, maintain our business records, prevent fraud, and improve our services. We have assessed that our legitimate interests do not override your rights.
• Compliance with a legal obligation (Article 6(1)(c) UK GDPR) — to retain financial records as required by HMRC and UK company law.
• Consent (Article 6(1)(a) UK GDPR) — only where we have explicitly asked for your consent (for example, to send you trade news or product launches). You may withdraw consent at any time.

4. How Long We Keep Your Data

• Enquiry and order data: 7 years from the date of the last transaction, to comply with HMRC requirements.
• Non-order enquiry data: 2 years from the date of enquiry, or until you ask us to delete it.
• Marketing consent records: until you withdraw consent, plus 1 year for audit purposes.
• Technical logs: up to 90 days.

5. Who We Share Your Data With

We do not sell your personal data. We share it only when necessary:

• Our manufacturing partner — your design specification and delivery address are shared with our production facility to manufacture your order. This partner is bound by confidentiality obligations and processes your data solely to fulfil your order.
• Delivery contractors — your name and delivery address are shared with our white-glove delivery partners to arrange and complete delivery.
• Professional advisers — lawyers, accountants, and insurers, where legally required or to protect our business.
• Regulatory bodies — where required by law (e.g. HMRC, a court order).

We do not transfer your data outside the United Kingdom or European Economic Area unless adequate safeguards are in place.

6. Your Rights Under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data where there is no compelling reason to continue processing it.
• Restriction — ask us to restrict processing while we resolve a dispute about accuracy or legitimacy.
• Portability — receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Objection — object to processing based on legitimate interests (including direct marketing).
• Automated decision-making — not be subject to decisions made solely by automated means that produce legal or significant effects.

To exercise any of these rights, contact us at enquiries@montalvi.com. We will respond within one calendar month.

7. Cookies

We use minimal cookies necessary to operate the website. For full details, see our Cookie Policy.

8. Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS/TLS), access controls, and regular security reviews. No transmission over the internet is guaranteed to be 100% secure; we will notify you and the ICO promptly of any breach affecting your rights.

9. Right to Complain

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113  ·  ico.org.uk

Our ICO registration reference is available on request.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be notified via the website or by email if we hold your contact details. The date at the top of this page shows when the policy was last revised.