Murr Mall

Privacy policy

Last updated 5 November 2026

1. Who we are

Murr Mall is run by Company name Ltd, a company registered in England and Wales (company number 00000000), registered office registered office address. We decide how your personal data is used, which makes us its controller under UK data protection law.

For anything about this policy or your data, write to hi@murrmall.io.

2. What we collect

If you make an account

If you visit a wishlist as a guest

You don’t need an account and we don’t ask your name. When you reserve a gift, your browser makes up a random ID and keeps it on your device. We store that ID with the reservation, so your browser can cancel it. The list’s owner can also remove a reservation if they’ve chosen to see reservations, but never learns who made it. It doesn’t tell us who you are.

From everyone

We don’t take payments, so we hold no payment details. Please don’t put sensitive information, such as about your health, into a wishlist.

3. Who can see your wishlists

Only people who have a wishlist’s link can see that list: its title, description and items. Links are long and random, we don’t publish them anywhere, and there’s no way to find a wishlist without its link. But a link isn’t a password: one you share can be passed on, so don’t put anything in a wishlist that you wouldn’t show a guest.

Birthday decorations are off unless you switch them on in your profile. When they’re on, for the 14 days before your birthday and on the day itself, anyone with the link to one of your wishlists sees the mall dressed for a birthday and how many days are left, so they can work out the date. They don’t see the year or your name.

Guests can see that an item is reserved, never who reserved it. As the owner you don’t see reservations at all unless you switch them on in your profile, and even then you see which gifts are taken, not by whom.

4. Why we use it

The only emails we send are sign-in links and, rarely, messages about your account or important changes to Murr Mall. We don’t send marketing, sell data, show adverts or make automated decisions about you.

5. What we keep on your device

Murr Mall doesn’t use tracking cookies. It keeps a few things in your browser’s storage, each one needed for something you use:

You can clear these in your browser’s site settings. You’ll be signed out, and you won’t be able to cancel reservations made from that browser.

6. Who else handles your data

We use a few providers to run Murr Mall. They handle data only to provide their service to us:

We may also share data with professional advisers, with authorities when the law requires it, or with whoever takes Murr Mall over if the service changes hands, who would then have to look after it as this policy says.

7. Data outside the UK

Our database is in the EU, which the UK recognises as protecting data adequately. Some of our providers are based in the United States or work around the world, so data can be handled there too. When that happens we rely on the UK’s adequacy rules (including the UK–US data bridge) or on the standard contractual clauses in our providers’ data processing terms.

8. How long we keep it

Deleted data can stay in our providers’ backups for a short time before it is overwritten.

9. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to object to how we use it, or to have it in a form you can take elsewhere. You can change your profile and delete wishlists yourself in the app. To delete your account or for anything else, write to hi@murrmall.io from the email you sign in with. We’ll answer within a month.

If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.

10. Children

You need to be at least 13 to make an account. If you’re under 18, ask a parent or guardian first. If we learn that someone under 13 has made an account, we’ll delete it.

11. Security

Everything travels over encrypted connections. Database rules stop anyone changing a list they don’t own, and profile photos sit in private storage. No system is perfectly secure, so if you spot a problem, please tell us.

12. Changes

If we change this policy, we’ll update this page and the date at the top. If the change matters, we’ll also tell you by email or in the app before it takes effect.

Terms of use · ← Back to Murr Mall