Privacy policy

Heading 2
Heading 3
Heading 4
Heading 5
Heading 6

Last updated May 28, 2026

This Privacy Policy describes how Mam Sham collects, uses, processes, and stores your personal data exclusively through your use of this website.

We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with the UK General Data Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies solely to information collected online via this website and does not apply to information collected offline or via other channels.

1. Data controller

For the purposes of applicable data protection legislation, the data controller responsible for this website is Mam Sham.

If you have any questions regarding this Privacy Policy or our online data protection practices, please contact us at: maria@mamsham.com.

2. What data do we collect via our website?

We may collect, use, store, and transfer different kinds of personal data about you during your visit to our website, which we have categorised as follows:

  • Identity Data: Includes first name and last name provided via website webforms.
  • Contact Data: Includes email address and telephone numbers submitted through online inquiries or newsletter sign-ups.
  • Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: Includes information about how you navigate and interact with our website.
  • Marketing and Communications Data: Includes your preferences in receiving digital marketing or newsletters from us.
3. How do we collect your data?

We use different methods to collect data from and about you through our website, including:

  • Direct Interactions: You may give us your Identity and Contact Data by filling in forms or requesting information on our website.
  • Automated Technologies or Interactions: As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
4. Lawful basis and how we use your website data

We will only use your personal data when the law allows us to. Most commonly, we use data collected under the following lawful bases:

  • Consent: Where you have given explicit consent for us to process your personal data for a specific purpose (e.g., subscribing to an online newsletter or submitting a digital contact form).
  • Legitimate Interests: Where it is necessary for our legitimate interests to optimise, secure, and monitor our website performance and user experience, and your interests do not override those interests.

5. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed while using this website. In addition, we limit access to your website data to those employees, contractors, and third-party service providers (such as web hosting and analytics partners) who have a business need to know. They are contractually bound to process your personal data strictly on our instructions and are subject to a duty of confidentiality.

6. Data retention

We will only retain the personal data collected via this website for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, or reporting requirements.

To determine the appropriate retention period for web-collected personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and the specific purposes for which we process it.

7. Your legal rights

Under certain circumstances, you have rights under UK data protection laws in relation to the personal data we hold about you:

  • Request access to the personal data we hold about you.
  • Request correction of any inaccurate or incomplete personal data.
  • Request erasure of your personal data from our website systems, under certain conditions.
  • Object to processing of your personal data where we are relying on a legitimate interest.
  • Request restriction of processing of your personal data.
  • Request the transfer of your personal data to you or to a third party (data portability).
  • Withdraw consent at any time where we are relying on consent to process your website submission.

If you wish to exercise any of the rights set out above, please contact us at maria@mamsham.com. We respond to all legitimate requests within one month.

8. Cookies and automated tracking

Our website uses cookies to distinguish you from other users. This helps us to provide you with a functional browsing experience and allows us to analyse and improve our digital presence.

Types of cookies used:
  • Strictly Necessary / Functionality Cookies: Required for the core operation of this website and to remember your preferences.
  • Analytical / Performance / Advertising Cookies: Allow us to recognise and count the number of visitors and to track how visitors move around our website. We may share limited aspects of this analytics data with third parties for targeted advertising or performance monitoring purposes.

You can configure your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or fail to function properly. 

9. Third-party links on the website

This website may include links to third-party websites, plug-ins, and applications (such as social media platforms or external booking systems). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these external websites and are not responsible for their privacy statements. 

10. Complaints

Should you wish to report a complaint or if you feel that Mam Sham has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner's Office.

‍