top of page

privacy policy

Last updated: 8 April 2026

​​​​

This notice outlines how we handle your personal information and what you can expect when you engage with our studio.

​​

1. Contact Us

Milk Rabbit ("we", "us", or "our") is operated by Flavia Pastore Giorgetti Medeiros trading as Milk Rabbit (the “data controller”). Business address: 42, 21 Courthouse Way, London, SW18 4PR

​

Email: hello@milkrabbit.co.uk

​

2. Who This Notice Is For

This privacy notice applies to clients, prospective clients, website visitors, and anyone who interacts with Milk Rabbit in a professional capacity.

​

3. The Information We Collect & Why

We collect information to provide a seamless design experience and to keep you updated on our latest hospitality and retail projects.

  • To Deliver Our Design Services: We collect names, contact details, addresses, and occupations to manage our mandates. We also maintain records of our meetings, decisions, contract, and financial transactions to ensure project accuracy.

  • To Improve Your Experience: We use website usage data and user information to refine how you interact with our portfolio. This data is collected using cookies and similar technologies.

  • For Inspiration & Updates: With your permission, we use names, contact details, and IP addresses to share marketing updates and understand your journey through our site.

  • To Stay Compliant: We retain specific details, such as client account information, to meet our legal and regulatory obligations.

  • To Resolve Enquiries: We keep correspondence, purchase history, and project photographs to effectively handle any queries or claims.

  • To Carry Out Business Development (Including Direct Outreach): We may process business contact details (such as name, role, company, and business email address) to contact potential clients.

  • For Marketing and Portfolio Purposes: with your permission, we may use your contact details to share updates. We may also showcase completed work, which may include project images, business names, or branding where contractually agreed.

 

4. Our Legal Basis for Using Data

Under UK data protection law, we rely on the following "lawful bases" to use your information:

  • Contract: Necessary for us to enter into or carry out our design agreement with you.

  • Consent: Used when you grant us explicit permission for marketing updates. You can withdraw this at any time.

  • Legal Obligation: Required for us to stay compliant with the law.

  • Legitimate Interests: We use this when it benefits you or our studio without causing harm. Our interests include:

    • The smooth administration of our studio and website and performance of a contract.

    • Showcasing the Milk Rabbit portfolio to prospective clients.

    • Growing our business and offering relevant design services.

    • Protecting our business rights, managing client relationships and resolving enquiries.

 

The lawful basis we rely on depends on what we are using your information for — for example, contracts for client work, consent for marketing, legal obligations for financial records, and legitimate interests to run and promote our studio responsibly. Where we rely on legitimate interests, we have carried out an assessment to ensure that our interests are not overridden by your rights and freedoms.

 

5. Cookies and Website Tracking

We use cookies and similar technologies on our website, including Google Analytics, to understand how visitors use our site and to improve performance.

​

These cookies are not strictly necessary and are only used with your consent.

 

You can manage or withdraw your consent at any time through our cookie banner.

 

For more information, please see our Cookie Policy.

 

6. Your Data Protection Rights

You have several rights under UK data protection law, including:

  • The right to access your personal information and receive a copy of it

  • The right to correct information that is inaccurate or incomplete

  • The right to ask us to delete your information in certain circumstances

  • The right to limit how we use your data

  • The right to object to how we use your information, including for marketing

  • The right to data portability, which allows you to receive your data in a usable format

  • The right to withdraw consent at any time, where consent is our lawful basis

 

To exercise any of these rights, simply contact us using the details above. We aim to respond to all requests within one month.

 

7. Where Your Data Comes From & Who Sees It

Most of the personal information we hold comes directly from you. In some cases, where this is relevant to our services, we may also obtain information from publicly available sources or from professional partners involved in delivering your project.

​

We only share your personal information where necessary and responsibly, including with:

  • Wix: Our website hosting and management platform (Israel/USA).

  • Google & Meta: For analytics and to share relevant content with prospective clients (USA).

  • Zoho: For email and document management, including e-signatures.

  • QuickFile: For invoicing and VAT reporting.

  • Professional Consultants: Specialist tradespeople, contractors, or advisors required to execute your design mandate.

 

We do not sell your personal information.

 

8. International Transfers

Some of our service providers are located outside the UK.

 

Where data is transferred internationally:

  • Transfers to Israel rely on UK adequacy regulations

  • Transfers to countries such as the United States or India rely on approved safeguards, including the UK International Data Transfer Agreement (IDTA) or the UK Addendum to Standard Contractual Clauses

 

You may request further information about these safeguards by contacting us.

 

9. How Long We Keep Your Information

We only hold your data for as long as necessary to fulfil our professional and legal duties:

  • Website Analytics: 14 months to allow for year-on-year studio performance analysis.

  • Enquiries: 2 years from our last contact if a project doesn't go ahead.

  • Contract & Financial Records: 6 years following the relevant tax year to satisfy HMRC requirements.

  • Marketing: We keep your details until you choose to opt out. If you withdraw consent, we will delete your marketing details. We may retain your email address on a minimal suppression list to make sure we do not contact you again.

 

10. How to Complain

If you have any concerns, please contact us directly.

​

If we cannot resolve your issue, you have the right to lodge a complaint with the UK supervisory authority:

 

Information Commissioner’s Office (ICO):

 

We believe in being transparent about how we use your information. If anything in this notice isn’t clear, please feel free to get in touch — we’re always happy to help.

bottom of page