Privacy policy

Last updated: 24 October 2026

This policy explains how marvlus ("we", "us") collects and uses personal data when you visit this website or get in touch with us, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

marvlus is the trading name of Marvlus Ltd, a company registered in England and Wales (company number 14541951), with its registered office at 86-90 Paul Street, London, EC2A 4NE, United Kingdom. Marvlus Ltd provides integration consulting and is the data controller for the personal data described in this policy. If you have any questions about this policy or your data, email us at contact@marvlus.co.uk.

What we collect

• Contact form: your name, email address, project focus, systems involved, timeline, and message.
• Newsletter sign-up: your email address.
• Emails, calls, and bookings: whatever you choose to share when you contact us directly or book a consultation, including your name, email address, and chosen time.
• Technical data: like most websites, our hosting provider automatically records server logs, including your IP address, browser type, pages requested, and the date and time of your visit.

Please don't send us sensitive personal data or confidential business information through the website forms.

How we use it and why

• To respond to your enquiry, including an automatic email confirming we've received it, and, if you wish, to arrange a consultation or prepare a proposal. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
• To send our newsletter, if you have signed up. Our lawful basis is your consent, which you can withdraw at any time.
• To deliver and manage work for clients. Our lawful basis is performing our contract with you, and complying with legal obligations such as accounting and tax rules.
• To keep the website secure and working, using server logs and spam protection on our forms to detect abuse and fix problems. Our lawful basis is our legitimate interest in running a secure website.

We don't sell your data, and we don't use it for automated decision-making or profiling.

Who we share it with

We only share personal data with service providers who help us run the business, under contracts that require them to protect it:

• Website hosting provider, which hosts this site and its server logs.
• Microsoft (Microsoft 365), which we use for email. Messages sent through the website forms are delivered to our Microsoft 365 mailbox.
• Calendly, which we use to schedule consultations. If you book a call, Calendly collects your name, email address, and any details you add, and may set its own cookies on its booking page. Calendly's booking tool only loads when you choose to book.
• Cloudflare (Turnstile), which protects our forms from spam. When you use a form, Cloudflare processes technical data such as your IP address and browser characteristics to check you're not a bot. It doesn't set tracking or advertising cookies.

We may also disclose data if required by law, or to professional advisers such as accountants and lawyers.

International transfers

Some of our providers may process data outside the UK. Where they do, the transfer is protected by appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Agreement and Addendum.

How long we keep it

• Enquiries that don't lead to work: up to 2 years from our last contact, then deleted.
• Client records: for as long as needed to deliver the work, then for up to 6 years to meet legal and accounting obligations.
• Newsletter: until you unsubscribe.
• Server logs: up to 12 months.

Cookies

This website doesn't use cookies for analytics, advertising, or tracking. Our website analytics are cookie-free. If you choose to book a consultation, Calendly's booking window may set its own cookies; see Calendly's privacy notice for details.

Your rights

You have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict or object to how we use your data;
• receive your data in a portable format;
• withdraw your consent at any time, for example by unsubscribing from the newsletter.

To exercise any of these rights, email contact@marvlus.co.uk. We'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.