Privacy Policy

The Mathews Collection ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at themathewscollection.com (the "Site"), and your rights under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

By accessing or using our Site, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use our Site.

If you have any questions about this Privacy Policy, please contact us at tobias@themathewscollection.com.

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to understand how visitors interact with our Site. This helps us improve our services and user experience.

Google Analytics collects information such as how often users visit our Site, what pages they visit, and what other sites they used prior to coming to our Site. We use this information to compile aggregated statistics about Site usage.

Google Analytics uses cookies (see Section 4) to collect this information. The information generated by the cookie about your use of our Site is transmitted to and stored by Google on servers in the United States.

Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We have also enabled IP anonymisation, which means Google will truncate/anonymise the last octet of the IP address for Member States of the European Union.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your cookie preferences (see Section 4).

For more information about Google Analytics, please visit Google's Privacy Policy.

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to the website owners.

When you submit an enquiry through our contact forms (on the Contact, Property, or Lifestyle pages), we collect the information you provide to respond to your request and provide our services.

How we use form submissions:

• To respond to your enquiry and communicate with you about our services
• To provide tailored recommendations for travel, property, or lifestyle services
• To maintain records of our communications for quality and training purposes
• To comply with legal obligations and resolve disputes

We do not sell, rent, or trade your personal information to third parties. Your enquiry details are shared only with necessary team members within The Mathews Collection who are involved in delivering the services you have requested.

We retain enquiry records for a reasonable period (typically up to 3 years) to maintain our business records and comply with legal obligations. After this period, your personal data is securely deleted or anonymised.

Under the General Data Protection Regulation (GDPR), if you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at tobias@themathewscollection.com. We will respond to your request within one month of receipt. We may need to verify your identity before processing your request.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

Under the GDPR, we must have a valid legal basis for processing your personal data. The legal bases we rely on are:

• Consent: Where you have given us clear consent to process your personal data for a specific purpose (e.g., subscribing to marketing communications).
• Contract: Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests. This includes operating our Site, understanding how visitors use it, and improving our services.

We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:

• Service Providers: We may share data with third-party vendors who provide services on our behalf, such as website hosting, analytics, and customer relationship management. These providers are contractually bound to protect your data.
• Legal Requirements: We may disclose your information if required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of our users or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction.

The third-party services we currently use include:

• Google Analytics (for website analytics) — Privacy Policy
• Supabase (for data storage and form processing) — Privacy Policy

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

These measures include:

• SSL/TLS encryption for data transmitted between your browser and our servers
• Access controls and authentication for internal systems
• Regular security assessments and monitoring
• Staff training on data protection and confidentiality

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

General retention periods:

• Enquiry and contact form data: up to 3 years from the date of submission
• Analytics and cookie data: up to 26 months (in line with Google Analytics default settings)
• Marketing consent records: retained until you withdraw consent, or up to 5 years from last interaction

When your personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention policies.

Your personal data may be transferred to, and processed in, countries outside of the European Economic Area (EEA), including the United States, where our service providers (such as Google and Supabase) operate.

When we transfer your personal data outside the EEA, we ensure that appropriate safeguards are in place to protect your data, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfer to countries that have been deemed to provide an adequate level of data protection
• Certification under recognised frameworks (such as the EU-US Data Privacy Framework, where applicable)

Our Site is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will be posted on this page with an updated "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Site after any changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your enquiry as soon as possible, and within one month for data subject requests under the GDPR.