Last updated: 2 November 2026
This privacy policy explains how Maison Cealus handles personal data collected through this website and through emails sent to the house. It sets out the information that the EU General Data Protection Regulation (Regulation (EU) 2016/679, the GDPR) requires us to give you.
Who is responsible for your data
The controller of your personal data is Maison Cealus, also called House of Cealus, a private marketing house based in Poland. For any question about this policy or your data, write to fabian@mxnndirective.com.
What we collect
When you apply
The application form on the apply page and on the homepage asks for:
- your name;
- your brand or website;
- what is not working in your marketing, in your own words;
- your stage (Pre-launch, Under $1M revenue, $1M to $10M or $10M+);
- your phone number.
The time you send the form is attached to your application. All five fields are required, so we cannot receive an application without them. Applying is voluntary, and no law requires you to give us this information.
Please keep your answer to your marketing and leave out sensitive personal information, such as details about health, religion or political views.
The form also contains a hidden field that people do not see. Automated spam tools tend to fill it in. When it is filled, the form sends nothing, so no data from that submission reaches us.
When you email us
If you write to us, we receive your email address, your name if you include it, and anything in your message and its attachments.
When you visit the site
Each time your browser loads a page, it sends the technical information that every web request carries, such as your IP address, the page requested, the time of the request, and your browser and device type. This goes to Cloudflare, Inc., which hosts the site and uses the information to deliver pages and protect the site against attacks and abuse.
When you send the application form, it travels from your browser to Discord, so Discord may also receive technical information about that request, such as your IP address and browser type.
Cookies and tracking
This site sets no cookies and uses no local storage. It runs no analytics, advertising tags or tracking pixels, and its fonts and scripts are served from our own domain, with no Google Fonts and no third-party scripts. The cookie policy covers this in more detail.
Why we use your data and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Reading your application, deciding whether there is a fit and contacting you about it | Application form data | Article 6(1)(b) GDPR, steps taken at your request before entering into a contract |
| Answering emails about working with us, including requests to join the team | Your email and its contents | Article 6(1)(b) GDPR, steps taken at your request before entering into a contract |
| Answering other emails, such as press and general questions | Your email and its contents | Article 6(1)(f) GDPR, our legitimate interest in replying to correspondence |
| Keeping the site and the form secure, available and free of spam | Technical request data | Article 6(1)(f) GDPR, our legitimate interest in the security of the site |
Where we rely on legitimate interests, you can object at any time, as explained under your rights below.
We do not make decisions about you by automated means, and we do not build profiles of visitors. A person at the house reads every application.
Who receives your data
We share personal data only with the providers we need to run the site, the form and our email, and only for the purposes above.
- Discord Inc. (United States). The application form is delivered through a Discord webhook to a private Discord channel, so the team is notified and can read it. Discord stores the message in that channel.
- Cloudflare, Inc. (United States). Cloudflare hosts this website on Cloudflare Pages and processes the technical data of each visit to deliver and protect the site.
- Our email provider, which stores the emails you send us.
We may also disclose personal data where the law requires it, for example in response to a valid request from a court or public authority. We do not sell personal data.
Transfers outside the European Economic Area
Discord Inc. and Cloudflare, Inc. are based in the United States, so your data may be transferred to and processed in the United States. When personal data leaves the European Economic Area, the GDPR requires appropriate safeguards. Depending on the provider, these are mechanisms such as the European Commission's standard contractual clauses or, where applicable, the EU-U.S. Data Privacy Framework.
You can ask us by email for more information about the safeguards that apply to a transfer and how to obtain a copy of them.
How long we keep it
- Applications. If no work follows, we delete your application, including the notification in our Discord channel, within 12 months of receiving it. If we go on to work together, the details become part of the client relationship and are kept for as long as that work and the law require.
- Emails. We keep them for as long as we need to deal with your message and any follow-up, then delete them, unless the law requires us to keep them longer.
- Technical data. Server and security logs are kept by Cloudflare, and the request data Discord receives when you send the form is kept by Discord, each for the periods set out in its own policies.
Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you and receive a copy of it (Article 15);
- have inaccurate or incomplete data corrected (rectification, Article 16);
- have your data erased (Article 17);
- restrict how we use your data (Article 18);
- receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another organisation, where we process it to take steps before a contract (portability, Article 20);
- object to processing based on our legitimate interests (Article 21).
Some of these rights have limits set by law. Erasure, for example, does not apply where we must keep data to meet a legal obligation. If a limit applies to your request, we will tell you which one and why.
To use any of these rights, email fabian@mxnndirective.com. It costs nothing, unless a request is manifestly unfounded or excessive. We reply within one month. For complex or numerous requests, the GDPR allows us to extend this by up to two further months, and we will tell you within the first month if we need to. We may ask you to confirm your identity before we act on a request.
Complaints
If you believe we have handled your data unlawfully, you can lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland. Its website is uodo.gov.pl.
You can also complain to the supervisory authority in the EU or EEA country where you live or work, or where you believe the problem occurred. We would be glad of the chance to put things right first, so please write to us.
Changes to this policy
We update this policy when the site or the way we handle data changes, for example if we ever add cookies. The date at the top shows the latest version. If a change affects data we already hold, we will take reasonable steps to let the people concerned know.
Contact
For questions about this policy, or to use your rights, write to fabian@mxnndirective.com. The terms of use set out the rules for using the site.