Legal
Privacy & cookie policy
This policy explains how Style by Magda collects and uses your personal data when you visit stylebymagda.com, contact us or book a consultation, and the rights you have under UK data protection law.
Last updated 15 October 2026
1. Who we are
Style by Magda is an interior design studio and blog run by Magda Callery in the United Kingdom. In this policy, “Style by Magda”, “we”, “us” and “our” mean the Style by Magda business. We are the controller of the personal data described here, which means we decide how and why it is used.
If you have any questions about this policy or your data, email hello@stylebymagda.com or call +44 7828 676415. We have not appointed a Data Protection Officer because we are not required to, but Magda is responsible for data protection matters.
2. What we collect
We keep the personal data we collect to a minimum:
- Enquiry details: your name, email address, the service you're interested in and your message when you use our contact form, plus anything you choose to tell us by email or phone.
- Consultation and project details: if you book with us, the information you share about your home or workspace (for example photos, plans, measurements, budget and preferences), your contact details, and records of payments and invoices.
- Technical and usage data: when you browse the site, our hosting and security providers automatically process your IP address, browser and device type, and the pages you request. We also collect anonymous statistics about how the site is used (see section 7).
We don't ask for special category data (such as health information). Please don't include it in your message unless it's genuinely relevant to your project, for example accessibility needs for a room design. The site is not intended for children under 13.
3. How we use it and why
UK data protection law requires us to have a lawful basis for each use of your data:
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry and give you information about our services | Legitimate interests (responding to people who contact us) or steps at your request before entering a contract |
| Arrange and deliver your consultation or project, take payment and keep you updated | Performance of a contract with you |
| Keep accounting and tax records | Legal obligation |
| Keep the website secure, prevent spam and abuse, and fix problems | Legitimate interests (running a safe, working website) |
| Produce anonymous statistics about which pages are read so we can improve the site | Legitimate interests, using the UK “statistical purposes” cookie exemption: you can switch this off at any time |
| Establish, exercise or defend legal claims | Legitimate interests |
We don't sell your personal data, we don't use it for advertising or profiling, and we don't make decisions about you using solely automated means. We don't currently send a newsletter; if we start one, we'll only email you marketing with your consent, and you'll be able to unsubscribe at any time.
4. Who we share it with
We only share personal data with trusted service providers who process it on our behalf, under contracts that require them to keep it secure and use it only as we instruct:
- Base44 (Base44, Inc., part of the Wix.com group): hosts this website, stores contact-form enquiries and provides our site statistics.
- Content delivery and security providers used by our host (such as Cloudflare): deliver pages quickly and protect the site from attacks.
- Image hosting (Wix media and Base44 media servers): serve the photographs on our pages, so they receive your IP address when images load.
- Our email, video-calling and payment providers: when you email us, have an online consultation or pay an invoice.
- Professional advisers such as our accountant, and HMRC or other authorities where the law requires it.
Links to other websites (for example press features) are not covered by this policy: please read their own privacy notices.
5. International transfers
Some of our providers, including Base44, store data on servers in the United States. Where personal data is transferred outside the UK, we make sure it is protected by a lawful transfer mechanism: UK adequacy regulations (including the UK-US “data bridge” where the recipient is certified) or the ICO's International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses. Contact us for more information.
6. How long we keep it
- Enquiries that don't lead to a booking: up to 2 years after our last contact, then deleted.
- Client and project records, invoices and payments: 6 years after the end of the tax year in which the work finished, as required for tax and to deal with any claims.
- Server and security logs: kept by our host for a short period, usually no more than a few months.
- Site statistics: used only in aggregate; the identifier stored in your browser stays until you clear it or switch statistics off.
7. Cookies & similar technologies
Cookies and similar technologies (such as your browser's local storage) store small pieces of information on your device. We don't use advertising, retargeting or social-media tracking cookies, and ordinary visitors aren't sent any cookies by our site.
We use the following local-storage items:
| Name | Purpose | Type | Duration |
|---|---|---|---|
base44_analytics_session_id | A random identifier our website platform (Base44) uses to count visits, page views and time on site, so we can see which content is useful, and to recognise anonymous requests to its servers. Used only to create aggregate statistics for us. Not stored if you switch statistics off. | Statistics (exempt from consent; you can switch it off) | Until cleared |
sbm_privacy_notice | Remembers that you've seen our privacy notice so we don't show it again. | Strictly necessary | Until cleared |
sbm_analytics_optout | Remembers that you've switched statistics off. | Strictly necessary | Until cleared |
base44_access_token | Only set if you sign in to manage the site: keeps you logged in. | Strictly necessary | Until you sign out |
Under the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025, we don't need your consent for storage that is strictly necessary or used only to produce statistics that help us improve our site, but you can object to statistics at any time, free of charge, using the setting below. We also honour the Global Privacy Control signal sent by some browsers.
You can also delete or block site data in your browser settings. Blocking all storage won't stop the site working. For more about cookies, visit the ICO's guide to cookies.
8. Your rights
Under UK data protection law you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data in certain circumstances.
- Restriction: ask us to limit how we use your data in certain circumstances.
- Object: object to our use of your data where we rely on legitimate interests, including site statistics.
- Portability: ask for data you gave us in a structured, machine-readable format, where we process it under a contract or with your consent.
- Withdraw consent: where we rely on consent, at any time, without affecting earlier processing.
To use any of these rights, email hello@stylebymagda.com. There's normally no fee. We may need to confirm your identity, and we'll respond within one month (which can be extended by up to two further months for complex requests: we'll tell you if so).
9. Complaints
If you're unhappy with how we've handled your personal data, please tell us first at hello@stylebymagda.com. We'll acknowledge your complaint within 30 days, look into it and let you know the outcome without undue delay.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
10. Other information
Security. We use reputable providers, encrypted (HTTPS) connections and access controls to protect your data. No website can be completely secure, so please don't send sensitive information by email unless necessary.
Changes. We'll update this policy when our practices or the law change, and show the date of the latest version at the top of this page.
Questions? Get in touch.