Last updated: 6 October 2026. This notice replaces our privacy policy of 10 October 2025.
Maad House is a design studio. This notice explains what information we hold about people, where it comes from, why we hold it, and what you can do about it. It is here to inform you; you are not asked to agree to it.
If we have written to you out of the blue, start at section 2.
1. Who we are
Maad House is a trading name of Etsion Brands Ltd, a company registered in Israel, company number 517176301, registered address Meitav 5, Tel Aviv 6789804, Israel. Our team works in the United Kingdom and Israel.
For anything about your information, write to [email protected]. We read it every working day. You never need to explain why you are asking.
2. If we contacted you about your business
What we do. We contact businesses, one at a time, to offer our design services. Usually that means sending a short, private review of the business’s brand and website, written for the people whose job it concerns. We do not publish these private reviews.
Who we contact. Only people in their work role, at their work address: owners, directors, or whoever leads marketing, brand or the website. A small number of people at each business, in proportion to its size. We email only businesses that are registered companies or LLPs. We do not cold-email sole traders or ordinary partnerships; where we want to reach one, we write by post or call the published business number instead.
What we hold about you. Your name, job title, work email, business phone number and business address, the business you work for and its company number, where each of these came from and when, what we sent you or said to you and when, any reply, and, if we called, the date we checked the phone-preference registers.
Where it came from. We did not get it from you. We use: the business’s own website (team, news and careers pages); Companies House; trade and local press; trade body member lists; the business’s own LinkedIn and social media pages; your LinkedIn profile, only to confirm your role; Hunter.io, only where it shows the public page an email address appears on; people we meet or are introduced to; and emails people send us. We never buy or rent lists, use enrichment tools, scrape data, guess addresses, or use personal social media, home addresses or personal mobile numbers.
Why we may do this. Our lawful basis is our legitimate interest in finding clients for our design work. We have written down how we weighed that interest against yours, and the conditions below are what keep the balance fair. You can ask us for a summary of that assessment.
How much contact. One first message and at most one follow-up, at least five working days later and only if we have something new to say. If you never reply, we may write once more, at least six months later, if something has changed at your business. After that we stop. If you ask us to come back at a particular time, we will, once.
Saying no. You can object at any time and we must stop. There is nothing to weigh up and nothing to explain. Reply “no thanks”, or write to [email protected]. We stop the same day, confirm within two working days, and keep only your email address, your business’s name and domain, and the date on a do-not-contact list, so that we never contact you or your business again. We will not ask later whether you have changed your mind.
How long we keep it. If you never reply, we delete your details twelve months after our last message. If we looked you up but did not contact you within a month, we delete what we found. If you asked us to come back later, we keep your details until then. A do-not-contact entry is kept for good, with the minimum detail, because that is the only way to honour it.
Other ways we may reach a business. By post, to the named person at the business address, never a home address. By phone, only to the business’s published number, only by a person (never automated or recorded), on weekdays in office hours, after checking the Telephone Preference Service and Corporate Telephone Preference Service registers and our own do-not-contact list; we never hide our number. On LinkedIn, only a connection request with no sales message, sent by hand.
3. If you contact us
Enquiries. Our contact form asks for your name, email, company and message. The form sends your message to us by email; the website itself does not keep a copy today. We use it to reply to you and, if you want, to prepare a proposal. In our reply we may ask how you found us; answering is optional and helps us understand where our work is seen. Lawful basis: the steps you ask us to take before any contract, and our legitimate interest in answering people who write to us.
Booking a consultation. The “Book a Consultation” button takes you to Calendly, which collects your name, email and chosen time on our behalf. Calendly’s own privacy notice also applies to that page.
Replies and conversations. If you reply to us, we keep the conversation while it is live.
How long. An enquiry that does not become work is kept for twelve months after our last contact. After that we remove your name, email and message and keep only the date and, if you gave it, how you found us.
4. If you are a client
We hold your contact details, our correspondence, the work itself and our billing records. Lawful bases: our contract with you, and the law on accounting and tax for billing records. We keep client records for the life of the work and then for as long as accounting and tax law requires.
5. Our reviews and proposals
Published reviews. We sometimes publish on this site our opinion of a business’s public brand and website. A review is opinion, with the reasons beside it and the date we looked. It is about the business, not the people in it: we do not name or picture individuals unless it is essential, and we never write about anyone’s private life. Where a business is a sole trader, or trades under the names of the people who run it, a review is also information about those people. Lawful basis: our legitimate interest in showing how we think and in reaching businesses that may want our help.
- Something wrong? Tell us at [email protected]. We check it against the live site and correct any error in place, with a dated note. We will publish a short reply from you under the review if you would like one.
- Want it taken down? Ask, and we take the page offline the same working day.
Private proposals. Before contacting some businesses we prepare a short proposal about their brand. It sits on an unlisted web page addressed to that business, hidden from search engines, uses only public information about the business, and is taken down when the conversation ends or when the business asks.
6. If you visit this website
What the site records. Our hosting and security providers log technical details of each visit (such as your IP address, browser and the pages requested) to run and protect the site. Cloudflare sets the cookies it needs to protect the site from attacks and bots. Lawful basis: our legitimate interest in keeping the site working and secure.
Measurement. We use Google Analytics, loaded through Google Tag Manager, to see which pages are visited, from roughly where, and on what kind of device. It sets an identifier cookie. Google keeps the detailed, visit-level data for up to 14 months.
Advertising tags. We are not running advertising at present. The site still carries the code for a Microsoft Advertising tag and for Google Ads conversion tracking, but both are switched off in Tag Manager. If we start advertising again we will update this notice first.
There is no cookie banner on this site. To stop measurement or advertising tags you can block cookies or scripts in your browser’s settings, use a content blocker, or install Google’s opt-out add-on for Analytics.
7. Who else sees your information
We do not sell personal information and we do not share it for anyone else’s marketing. We use these providers, who work to our instructions:
| Provider | What for |
|---|---|
| DigitalOcean and RunCloud | Hosting the website |
| Cloudflare | Network, security and protection from attacks |
| Microsoft 365 | Our email and files |
| Resend | Sending contact-form messages to us |
| Calendly | Consultation bookings |
| Tag Manager, Analytics and, when we advertise, Google Ads | |
| Microsoft Advertising | Advertising measurement, when we advertise |
| Stripe | Card payments |
We also share information with our professional advisers (accountants, lawyers) where needed, and with authorities when the law requires it. Within Maad House, your information is seen by Yohay Etsion and Reece Heron.
8. Where your information is handled
Etsion Brands Ltd is registered in Israel, so your information is handled there as well as in the United Kingdom. The United Kingdom recognises Israel as providing adequate protection for personal data. Some of our providers are in the United States, and our server-management provider, RunCloud, is in Malaysia. For each of them we rely on one of the United Kingdom’s approved arrangements: the UK Extension to the Data Privacy Framework where the provider is certified under it, or the provider’s UK transfer terms (the UK International Data Transfer Addendum). Write to us if you would like a copy of the safeguards that apply to a provider.
9. How long we keep things
| What | How long |
|---|---|
| Businesses we contacted that never replied | Deleted twelve months after our last message |
| Businesses we looked up but did not contact within a month | Deleted |
| Businesses that asked us to come back later | Kept until then, then the twelve-month rule runs again |
| Live conversations | While live, then as an enquiry or a client record |
| Do-not-contact list | Kept for good, with the minimum detail |
| Enquiries that do not become work | Twelve months after our last contact, then personal details removed |
| Client records | The life of the work, then as long as accounting and tax law requires |
| Published reviews, and our notes behind them | While the review is published; the notes follow the rules for business contacts above |
| Website logs | Per our hosting and security providers’ settings |
| Analytics (visit-level data) | Up to 14 months |
10. Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it while something is sorted out, and, where it applies, ask for it in a form you can take elsewhere. Where we rely on legitimate interests, you can object, and for marketing the objection always wins. Where we rely on your consent, you can withdraw it at any time.
Write to [email protected]. We answer within one month and we do not charge. We may ask you to confirm who you are.
11. Complaints
If something has gone wrong, please tell us first at [email protected] so that we can put it right. We acknowledge every complaint within thirty days and aim to answer far sooner. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, or on 0303 123 1113.
12. A few more things
Children. This site and our services are for businesses and are not aimed at anyone under sixteen. We do not knowingly hold information about children; if you think we do, tell us and we will remove it.
Security. We protect your information with access controls, two-step sign-in on our accounts, and reputable providers. No system is perfectly secure, and we will tell you and the regulator if a breach puts you at real risk.
Changes. When we change this notice we update the date at the top. If a change matters to you, for example a new source of contact details or a new way of contacting businesses, we add it here before we start using it.
