Privacy policy

Introduction

This Privacy Policy explains how MarvoroGoods ("we", "us", "our") collects, uses, stores and protects your personal data when you visit our website at marvorogoodss.myshopify.com, place an order, create an account or otherwise interact with our services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other applicable data-protection legislation in the United Kingdom.

Please read this Privacy Policy carefully. By using our website and services, you acknowledge that you have read, understood and agree to the practices described in this document.

Last updated: October 15, 2026

1. Data Controller

The data controller responsible for your personal data is:

MarvoroGoods
83 Oakmere Street
Runcorn, WA7 5AN
United Kingdom

Email: pinabelespinosa@gmail.com
Telephone: +44 7700 900025

For any questions about this Privacy Policy, how we handle your personal data, or to exercise your data-subject rights, please contact us using the details above.

2. Personal Data We Collect

We collect and process various categories of personal data depending on how you interact with our website and services. The types of personal data we may collect include:

2.1 Information You Provide Directly

  • Contact and Identity Information: Your name, email address, telephone number, billing address and delivery address.
  • Account Information: If you create an account, we collect your username, password, security questions, account preferences and settings.
  • Order and Transaction Information: Details of products you view, add to your basket, purchase, return or exchange; order history, transaction records, payment confirmation details and form of payment (note: we do not store full payment-card details—see section 4 below).
  • Communications: Any information you provide when you contact us via email, telephone, contact forms or customer-support channels, including the content of your messages and any attachments.
  • Marketing Preferences: Your preferences regarding receiving marketing communications from us.
  • Reviews and Feedback: Product reviews, ratings, testimonials or other user-generated content you choose to submit.

2.2 Information We Collect Automatically

  • Device and Technical Information: Information about the device you use to access our website, including IP address, browser type and version, operating system, device identifiers, screen resolution and other unique identifiers.
  • Usage and Behavioural Data: Details of your visits to our website, including pages viewed, time spent on pages, click-stream data, products viewed or searched for, items added to your basket or wishlist, referral source, date and time stamps, and other navigation and interaction data.
  • Location Data: Approximate geographic location inferred from your IP address (we do not collect precise GPS location unless you explicitly grant permission).
  • Server Logs: Our web server automatically logs standard information such as IP address, browser type, access times, requested pages and any errors encountered.

2.3 Information from Third-Party Sources

  • Payment Processors: Transaction and payment-status information from our payment service providers to confirm and fulfil orders.
  • Delivery and Logistics Partners: Delivery status, tracking information and confirmation of receipt from our shipping and courier partners.
  • Marketing and Analytics Platforms: Aggregated or pseudonymised data from third-party marketing, advertising and analytics services (such as Google Analytics) to understand how visitors interact with our website and to improve our services.
  • Social Media Platforms: If you interact with us via social media or use social-media login features, we may receive information from those platforms in accordance with your privacy settings and their terms.

3. Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. The lawful bases we rely on are:

3.1 Performance of a Contract (Article 6(1)(b) UK GDPR)

We process your personal data to fulfil our contract with you when you place an order. This includes:

  • Processing and fulfilling your order, including payment processing and delivery arrangements.
  • Communicating with you about your order (order confirmations, dispatch notifications, delivery updates).
  • Managing returns, exchanges, refunds and customer-support requests related to your order.
  • Creating and maintaining your account (if you choose to register).

3.2 Legal Obligation (Article 6(1)(c) UK GDPR)

We process certain personal data to comply with legal obligations, including:

  • Retaining transaction records and invoices for tax and accounting purposes as required by HM Revenue & Customs.
  • Complying with consumer-protection and e-commerce regulations (Consumer Contracts Regulations 2013, Consumer Rights Act 2015).
  • Responding to lawful requests from law enforcement, regulatory authorities or courts.
  • Maintaining records to demonstrate compliance with data-protection law.

3.3 Legitimate Interests (Article 6(1)(f) UK GDPR)

We process personal data where necessary for our legitimate business interests (or those of a third party), provided your rights and freedoms do not override those interests. Our legitimate interests include:

  • Fraud Prevention and Security: Detecting, investigating and preventing fraudulent transactions, unauthorised access, payment fraud, security incidents and other illegal or malicious activity; protecting the security and integrity of our website, systems and services.
  • Service Improvement and Analytics: Analysing how customers use our website and services to improve user experience, website functionality, product range and business operations; conducting market research and performance analysis.
  • Marketing and Customer Engagement: Sending you information about products, services, offers and promotions we believe may interest you (where you have not objected and we are not required to obtain consent); personalising your shopping experience and showing you relevant product recommendations based on your browsing and purchase history.
  • Customer Support: Responding to enquiries, resolving complaints, managing customer relationships and maintaining records of our communications with you.
  • Business Administration: Managing accounts, maintaining business records, internal reporting, business planning and corporate governance.

3.4 Consent (Article 6(1)(a) UK GDPR)

Where required by law, we will ask for your explicit consent before processing your personal data. This applies to:

  • Marketing Communications: Sending you marketing emails, SMS messages or other direct marketing where consent is required by the Privacy and Electronic Communications Regulations (PECR).
  • Cookies and Tracking Technologies: Placing and reading non-essential cookies and similar tracking technologies on your device (see section 9 below).
  • Special Categories of Data: Processing any sensitive personal data (such as health information) if relevant to your order or enquiry.

You may withdraw your consent at any time by contacting us or using the unsubscribe link in marketing emails. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

4.1 Order Processing and Fulfilment

  • Processing your orders, payments and refunds.
  • Arranging delivery of products to your chosen address (delivery within the UK is FREE).
  • Sending you order confirmations, dispatch notifications and delivery updates.
  • Managing returns, exchanges and customer-service requests.
  • Maintaining records of your purchase history and transaction details.

4.2 Account Management

  • Creating, maintaining and securing your customer account (if you register).
  • Enabling you to manage your account details, preferences, order history and saved items.
  • Authenticating your identity when you log in.
  • Remembering your preferences and providing a personalised experience.

4.3 Customer Service and Communication

  • Responding to your enquiries, questions and support requests.
  • Providing effective customer service and maintaining our relationship with you.
  • Resolving disputes, complaints or issues relating to your orders or use of our services.
  • Sending you service-related messages, such as changes to our terms, policies or services.

4.4 Marketing and Personalisation

  • Sending you marketing communications about our products, services, offers, promotions and news (where you have consented or we have a legitimate interest and you have not objected).
  • Tailoring and personalising our website content, product recommendations and offers based on your browsing behaviour, purchase history and preferences.
  • Displaying targeted advertisements on our website and on third-party platforms (subject to your cookie preferences).
  • Conducting customer surveys and market research to understand your needs and improve our offerings.

4.5 Website Improvement and Analytics

  • Analysing how visitors use our website to identify trends, measure performance and improve functionality.
  • Testing new features, products or services.
  • Understanding customer preferences and behaviour to enhance the shopping experience.
  • Optimising website layout, navigation, search functionality and checkout process.

4.6 Security, Fraud Prevention and Legal Compliance

  • Detecting, preventing and investigating fraudulent transactions, payment fraud, identity theft and other illegal or malicious activity.
  • Protecting the security, integrity and availability of our website, systems and data.
  • Complying with legal and regulatory obligations, including tax, accounting, consumer-protection and data-protection law.
  • Responding to lawful requests from law enforcement, regulatory authorities, courts or government agencies.
  • Enforcing our Terms and Conditions and other legal agreements.
  • Defending or pursuing legal claims and protecting our legal rights.

5. Sharing and Disclosure of Personal Data

We do not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes described in this Privacy Policy:

5.1 Service Providers and Processors

We engage carefully selected third-party service providers who process personal data on our behalf under our instructions. These include:

  • E-commerce Platform Provider (Shopify): Our online store is hosted on Shopify Inc., a leading e-commerce platform. Shopify provides us with the infrastructure, payment processing, order management and other technical services necessary to operate our store. Shopify processes personal data in accordance with their privacy policy and data-processing agreements. Shopify may store and process data on servers located outside the UK and the European Economic Area (EEA); see section 6 below regarding international transfers.
  • Payment Processors: When you make a purchase, your payment information is processed by secure third-party payment service providers (such as Shopify Payments, PayPal, Stripe or other payment gateways). We do not store full credit or debit card details on our own systems; payment data is transmitted directly to the payment processor using encryption and secure protocols. Payment processors handle your payment data in accordance with the Payment Card Industry Data Security Standard (PCI DSS).
  • Delivery and Logistics Partners: We share your name, delivery address, telephone number and order details with courier and delivery companies to fulfil your order and arrange delivery. Delivery within the UK is FREE. Our delivery partners use this information solely for delivery purposes and in accordance with their own privacy policies.
  • Email and Marketing Service Providers: We use third-party email marketing platforms (such as Mailchimp, Klaviyo or similar) to send marketing emails and newsletters (where you have consented or we have a legitimate interest). These providers process your email address, name and marketing preferences on our behalf.
  • Customer Support and Communication Tools: We may use third-party platforms (such as Zendesk, LiveChat or similar) to manage customer enquiries and support tickets.
  • Analytics and Performance Services: We use analytics services (such as Google Analytics) to understand how visitors interact with our website. These services may collect usage data, device information and IP addresses. See section 9 for more on cookies and analytics.
  • Hosting and IT Infrastructure Providers: Third-party providers who host our website, store data, provide cloud services, cybersecurity and technical support.
  • Advertising and Marketing Platforms: We may share pseudonymised or hashed data with advertising platforms (such as Google Ads, Facebook Ads) to display targeted advertisements, measure campaign performance and reach potential customers (subject to your cookie preferences).

All service providers are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our instructions and applicable data-protection law. We have data-processing agreements in place with all processors as required by UK GDPR.

5.2 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement, regulatory bodies, courts, government agencies or other third parties where required or permitted by law, including:

  • To comply with a legal obligation, court order, subpoena or lawful request.
  • To protect our legal rights, property, safety or that of our customers or the public.
  • To detect, prevent or investigate fraud, security incidents or illegal activity.
  • In connection with legal proceedings or to defend or pursue legal claims.

5.3 Business Transfers

If we sell, transfer or merge part or all of our business or assets, or are involved in a corporate restructuring, acquisition, insolvency or bankruptcy proceeding, your personal data may be transferred to the new owner or successor entity as part of the transaction. We will notify you of any such change and the new entity will continue to honour this Privacy Policy unless you are notified otherwise.

5.4 With Your Consent

We may share your personal data with other third parties where you have given us explicit consent to do so.

6. International Data Transfers

Our e-commerce platform is provided by Shopify Inc., a company based in Canada. Shopify may store and process your personal data on servers located in Canada, the United States and other countries outside the United Kingdom and the European Economic Area (EEA).

Where we transfer personal data outside the UK or EEA, we ensure that appropriate safeguards are in place to protect your data and that the transfer complies with UK GDPR. These safeguards include:

  • Adequacy Decisions: Transferring data to countries that the UK Government has recognised as providing an adequate level of data protection (such as countries within the EEA