Privacy Policy

Last updated: September 2026

Malia Advisory Limited (“Malia Advisory”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry or engage Malia Advisory to provide consultancy and advisory services.

1. WHO WE ARE

Malia Advisory Limited is a company registered in England and Wales.

Company number: 17443643
Website: www.maliaadvisory.co.uk

For the purposes of UK data protection law, Malia Advisory Limited is the data controller responsible for personal information processed in connection with our business.

If you have any questions regarding this Privacy Policy or how we use your personal information, please contact us using the contact details provided on our website.

2. INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect and process information including:

your name;
company or organisation;
job title or professional role;
email address and telephone number;
information provided when you contact us or make an enquiry;
correspondence and communications with us;
information provided in connection with a consultancy or advisory engagement;
business and project information containing personal information where relevant to an engagement; and
technical information relating to use of our website, such as IP address, browser or device information and website usage information.

We aim to collect only the information reasonably necessary for the relevant purpose.

3. HOW WE COLLECT INFORMATION

We may obtain personal information:

directly from you when you contact or engage with us;
through our website or contact forms;
through email, telephone or other business communications;
from your employer, organisation or another party involved in a project or engagement;
through professional introductions and business relationships; and
from publicly available professional or business sources where appropriate.

4. HOW WE USE YOUR INFORMATION

We may use personal information to:

respond to enquiries;
prepare proposals, quotations and scopes of service;
provide consultancy and advisory services;
manage client and supplier relationships;
administer contracts and engagements;
communicate with clients, prospective clients and professional contacts;
manage invoicing, accounting and other business administration;
maintain appropriate business and project records;
comply with legal, regulatory, tax and professional obligations;
establish, exercise or defend legal claims;
maintain the security and operation of our website and IT systems; and
improve our services and website.

We will not use personal information for purposes that are incompatible with the reason it was collected unless permitted or required by law.

5. OUR LAWFUL BASIS FOR PROCESSING

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely upon:

Contract – where processing is necessary to enter into or perform a contract with you.

Legitimate interests – where processing is necessary for our legitimate business interests, including operating and developing our consultancy business, responding to business enquiries, managing professional relationships, maintaining appropriate business records and protecting our business and IT systems, provided those interests are not overridden by your rights and interests.

Legal obligation – where processing is necessary to comply with a legal, regulatory, accounting or tax requirement.

Consent – where we have specifically asked for your consent to process information for a particular purpose. Where we rely on consent, you may withdraw it at any time.

6. BUSINESS COMMUNICATION AND MARKETING

We may contact existing clients, prospective clients and professional contacts regarding our services where permitted by law and where we consider the communication relevant to the professional or business relationship.

You can ask us to stop sending marketing communications at any time by contacting us or by using any unsubscribe facility provided with the communication.

We will not sell your personal information to third parties for marketing purposes.

7. SHARING YOUR INFORMATION

We may share personal information where reasonably necessary with organisations or individuals supporting our business, including:

website hosting and IT service providers;
email and cloud-service providers;
accountants, insurers and professional advisers;
consultants or specialist advisers supporting an engagement;
clients, contractors or other project participants where necessary for the relevant engagement; and
regulators, public authorities, courts or other parties where disclosure is required or permitted by law.

Where third-party service providers process personal information on our behalf, we take reasonable steps to ensure appropriate contractual and data-protection arrangements are in place.

We do not sell personal information.

8. INTERNATIONAL TRANSFERS

Some of the technology and cloud services we use may involve personal information being processed or stored outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data-protection law and that an appropriate level of protection or recognised safeguard is in place.

9. HOW LONG WE KEEP INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, contractual, accounting, insurance and regulatory requirements and establishing, exercising or defending legal claims.

Different categories of information may therefore be retained for different periods.

When information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.

10. HOW WE PROTECT YOUR INFORMATION

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures include appropriate controls over access to our business systems, devices, email, cloud storage and other technology used to provide our services.

No internet-based or electronic system can, however, be guaranteed to be completely secure.

11. COOKIES AND WEBSITE ANALYTICS

Our website may use cookies and similar technologies necessary for its operation and, where applicable, to understand how visitors use the website and improve its performance.

Some cookies may be used without consent where permitted by law. Where consent is legally required for particular cookies or technologies, they will not be used unless the appropriate consent has been obtained.

Further information about the cookies used by our website and the choices available to visitors may be provided through our cookie notice or cookie-management facility.

12. YOUR DATA-PROTECTION RIGHTS

Depending on the circumstances, UK data-protection law may give you rights including the right to:

request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal information in certain circumstances;
request restriction of processing;
object to certain processing, including direct marketing;
request transfer of your information where the right to data portability applies; and
withdraw consent where processing is based upon consent.

These rights are not absolute and may be subject to exemptions or limitations under applicable law.

To exercise any of these rights, please contact us using the details provided on our website.

13. COMPLAINTS

If you have concerns about how we handle your personal information, please contact us in the first instance so that we have an opportunity to address them.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data-protection regulator.

Further information is available from the ICO website at www.ico.org.uk.

14. THIRD-PARTY WEBSITES

Our website may contain links to websites operated by third parties.

Malia Advisory Limited is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy information provided by those organisations before providing personal information to them.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology or legal and regulatory requirements.

The latest version will be published on this website and the “Last updated” date shown above will be amended accordingly.