How MALKI handles your information.

The information we collect depends on how you interact with MALKI.

Information you provide directly

We may collect:

• your name, email address, telephone number, and preferred contact method;
• information included in a service request, such as sizing, measurements, style preferences, budget, occasion, timing, location, accessibility needs, and shopping goals;
• photographs, inspiration images, wardrobe images, documents, links, notes, and other materials you choose to share;
• appointment details, availability, service dates, and meeting information;
• agreement acknowledgments, approvals, signatures, and records of decisions made during a service;
• messages, feedback, survey responses, and other communications with MALKI;
• event registration, attendance, guest-list, and preference information when you join or inquire about a MALKI Social;
• mailing-list preferences and marketing consent; and
• information required to coordinate a purchase, pickup, return, delivery, reimbursement, or refund on your behalf.

Please do not send Social Security numbers, government identification numbers, full payment-card details, or other information that MALKI has not requested.

Payment and purchase information

Payments for MALKI services are processed by Stripe. MALKI does not receive or store your full payment-card number. We may retain payment status, amount, date, invoice or receipt information, refund status, and transaction identifiers needed to administer the service and maintain business records.

If MALKI purchases approved items on your behalf, we may maintain a record of the funds you provided, the purchase authorization, retailer, items, taxes, shipping or delivery costs, receipts, returns, credits, and reconciliation of unused funds. Client shopping funds are recorded separately from MALKI’s service fee.

Information collected through the website

When you use the website or a private MALKI Tracker link, we and our service providers may automatically receive limited technical information, such as:

• IP address;
• browser and device type;
• pages or features viewed;
• date, time, and approximate location derived from an IP address;
• referring page;
• error, security, and activity logs; and
• cookies or similar technologies used for site function, security, session management, and aggregated site measurement.

MALKI does not use the website to sell personal information or to build advertising profiles for unrelated third parties.

Information from connected services

We may receive information from services you use to interact with MALKI. For example, Luma or Partiful may provide registration, ticket, RSVP, attendance, or guest information for a MALKI Social. Retailers, couriers, or delivery providers may provide order, pickup, delivery, return, or refund status. The information those companies collect directly is also governed by their own privacy notices.

MALKI may use personal information to:

• review a request and determine whether a service, date, or event is available and appropriate;
• communicate with you and respond to questions;
• prepare, confirm, and deliver styling, shopping, closet-edit, event, and related services;
• create and maintain your private MALKI Tracker and release approved materials to you;
• schedule appointments, fittings, pickups, deliveries, and other agreed activity;
• prepare agreements, invoices, receipts, purchase records, and service history;
• process payments, refunds, shopping funds, and purchase reconciliations;
• administer MALKI Socials, including invitations, registration records, attendance, guest communication, safety, and feedback;
• send transactional messages about a request, service, payment, purchase, event, or account activity;
• send marketing communications when you have asked to receive them, subject to your right to unsubscribe;
• operate, maintain, protect, troubleshoot, and improve the website and MALKI services;
• prevent fraud, misuse, unauthorized access, and other security incidents;
• comply with law, enforce agreements, and establish or defend legal claims; and
• complete a business reorganization, financing, sale, or similar transaction, subject to appropriate protections.

MALKI will not use a client’s photographs, story, testimonial, or service materials in public marketing without separate permission. Agreeing to a service does not require agreeing to a media release.

We may disclose personal information only as reasonably needed for the purposes described above, including to:

• service providers that support website hosting, databases, authentication, email delivery, file storage, scheduling, payments, error monitoring, communications, and business administration;
• event and registration platforms, such as Luma or Partiful, when you register for or attend a MALKI Social;
• retailers, couriers, venues, vendors, and collaborators when the information is needed to complete an approved purchase, delivery, return, appointment, or event;
• professional advisers, such as attorneys, accountants, insurers, and consultants, subject to appropriate confidentiality obligations;
• government authorities or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, property, users, or the public; and
• a successor or transaction partner in connection with a merger, financing, reorganization, sale of assets, or similar business event.

MALKI’s current providers may include Vercel, Supabase, Stripe, Resend, Google Workspace, Google Drive, Google Calendar, Sentry, Luma, and Partiful. Providers may change as MALKI’s services develop. Each provider processes information under its own terms and privacy practices.

MALKI does not sell or rent personal information. MALKI does not disclose personal information for cross-context behavioral advertising.

The website may use cookies and similar technologies that are necessary to operate forms, protect the site, maintain authorized sessions, remember limited preferences, and understand site performance in aggregate. You can adjust cookie settings through your browser, but blocking necessary technologies may cause parts of the website or private tracker not to work properly.

If MALKI later introduces materially different analytics, advertising, or tracking practices, this policy and any required choice mechanism will be updated before those practices are used.

A MALKI Tracker link is created for one service request and may display information about that request, including progress, payments, agreements, materials, messages, and next steps. Treat the link as private, in the same way you would treat a password. Do not post it publicly or forward it to someone who should not have access.

If you believe a tracker link has been lost, shared, or accessed without permission, contact MALKI promptly at [privacy email] so the link can be reviewed and, where appropriate, revoked and replaced.

MALKI keeps personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain transaction and tax records, resolve disputes, enforce agreements, meet insurance requirements, and comply with law.

Retention periods vary by the type of information and the relationship. When information is no longer reasonably needed, MALKI may delete it, anonymize it, or securely isolate it until deletion is possible. Backups and records maintained by service providers may remain for a limited period under their retention processes.

MALKI uses reasonable administrative, technical, and organizational safeguards designed for the nature of the information it maintains. These may include access controls, authenticated staff access, limited-purpose tracker links, private storage, encrypted transmission, provider security controls, and logging.

No website, email, transmission, or storage system can be guaranteed completely secure. You are responsible for using a secure device and for protecting any private link or account information sent to you.

You may:

• unsubscribe from marketing emails by using the link in the message;
• ask to stop receiving non-essential communications;
• request access to or a copy of certain personal information;
• ask us to correct inaccurate personal information;
• ask us to delete certain personal information; or
• withdraw consent where processing is based on consent.

Depending on where you live and subject to applicable law, you may have additional rights, including rights to data portability, to opt out of certain uses, or to appeal a decision about a privacy request.

To make a privacy request, email [privacy email] with the subject line “Privacy Request.” Describe the request and the email address you used with MALKI. We may need to verify your identity before completing it. We will not discriminate against you for exercising an applicable privacy right.

Some information may be exempt from a request or may need to be retained for legal, security, transaction, or recordkeeping reasons. If MALKI cannot complete a request, we will explain the reason when required by law.

MALKI may send marketing emails only where permitted by law. You may unsubscribe at any time using the link in the email or by contacting [marketing or privacy email]. Unsubscribing from marketing does not stop service, payment, safety, or other transactional messages that are necessary for an active request or event registration.

The MALKI website is intended for adults. Clients ages 16–17 may be considered for a MALKI styling or shopping service with the active involvement of a parent or legal guardian. A request for a client under 16 must be started by a parent or legal guardian and is reviewed individually. MALKI may decline a request when the service, circumstances, or available supervision are not an appropriate fit.

For any client under 18, the parent or guardian must submit or approve the request, receive the service details, sign the service agreement, make or authorize payment and shopping funds, approve purchase and final service decisions, remain responsible for communications, and provide any consent required for MALKI to process the minor’s information. A minor cannot independently complete payment, provide shopping funds, sign the agreement, or approve final items.

When a parent or guardian arranges a service for a minor, MALKI may collect information reasonably needed to review and deliver the service, such as the minor’s name, age range, sizing, measurements, preferences, photographs, accessibility needs, appointment details, and service communications. MALKI will communicate through or include the parent or guardian as appropriate for the service.

MALKI does not knowingly collect personal information online directly from a child under 13 without verifiable permission from a parent or legal guardian. If you believe a minor has provided personal information without appropriate permission, contact [privacy email] so MALKI can review and, where appropriate, delete it.

MALKI Socials are adults-only unless a specific event page expressly states otherwise. An event may also set a higher minimum age.

MALKI and its providers may process information in the United States and other locations where they operate. Privacy protections may differ from those in your home jurisdiction. Where required, MALKI will use appropriate measures for an international transfer.

MALKI may update this Privacy Policy to reflect changes in services, technology, providers, or law. The revised version will be posted here with a new “Last updated” date. If a change materially affects how information is used, MALKI will provide additional notice when required.

For privacy questions or requests, contact:

[Full legal business name] Email: [privacy email] Mailing address: [business mailing address]