Privacy Policy

Data Controller

Marymia Ltd, registered in England & Wales, is the data controller responsible for your personal data. You can contact us at hello@marymia.co.uk for any privacy-related queries.

Information We Collect

We collect information you provide directly to us, including:

• Name, email address, postal address, and phone number when you place an order or create an account
• Payment details (processed securely by Stripe; we do not store card numbers)
• Order history and preferences
• Communications you send to us via email or our contact form
• Technical data such as IP address, browser type, and device information collected automatically when you visit our site

How We Use Your Data

• To process and fulfil your orders
• To send order confirmations, dispatch notifications, and delivery updates
• To respond to your enquiries and provide customer support
• To send marketing communications where you have opted in (you can unsubscribe at any time)
• To improve our website, products, and services
• To comply with legal obligations

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: to fulfil orders you have placed with us
• Consent: for marketing communications and non-essential cookies
• Legitimate interest: to improve our services and protect against fraud
• Legal obligation: to comply with tax, accounting, and regulatory requirements

Sharing Your Data

We do not sell your personal data. We share information only with trusted third parties who assist in operating our business:

• Payment processors (Stripe) for secure transactions
• Delivery partners for order fulfilment
• Email service providers for order and marketing communications
• Analytics providers to help us understand site usage

All third parties are required to handle your data in accordance with applicable data protection laws.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Order data is retained for a minimum of six years to comply with UK tax and accounting requirements. Marketing data is retained until you unsubscribe.

Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where legally permissible)
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time (where consent is the legal basis)

To exercise any of these rights, email us at hello@marymia.co.uk. We aim to respond within 30 days.

International Transfers

Your data may be processed in countries outside the UK where our service providers operate. We ensure appropriate safeguards are in place, including standard contractual clauses, to protect your data.

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.