Privacy Policy

Last updated: 6 July 2026

Your privacy matters to us. This policy explains what personal data MARL (“we”, “us”) collects when you use this website or buy our products, how we use it, and the choices you have.

1. Data we collect

Order data: when you check out, our payment provider Stripe collects your name, email address, shipping address and payment details to process your order. We receive the order details but never your full card number.
Contact data: if you email us, we keep your message and contact details so we can respond and improve our support.
Usage data: basic technical information (such as pages viewed, device type and approximate location derived from IP address) collected through privacy-respecting analytics to understand how the site is used.

2. How we use your data

To fulfil and deliver your orders and manage subscriptions.
To provide customer support and honour our guarantee.
To send service messages about your order or subscription (e.g. shipping confirmations, renewal reminders).
To send marketing emails only if you have opted in — you can unsubscribe at any time using the link in every email.
To improve our website, products and customer experience.

3. Legal bases

We process your data under the following legal bases: performance of a contract (fulfilling your order), legitimate interests (improving our site and preventing fraud), consent (marketing communications), and legal obligation (tax and accounting records).

4. Sharing your data

We never sell your personal data. We share it only with the service providers who make our store work — payment processing (Stripe), shipping carriers, email delivery and website hosting (Vercel) — and only to the extent needed to provide their service. Each provider is bound by its own data-protection obligations.

5. Cookies

We keep cookies to a minimum. We use only cookies and similar technologies that are strictly necessary for the site to function (for example, secure checkout). We do not use advertising or cross-site tracking cookies.

6. Data retention

We keep order records for as long as required by tax and accounting law (typically six years in the UK), and support correspondence for up to two years. Data that is no longer needed is securely deleted.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these rights, email us at hello@marlbalm.co.uk. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).

8. Security

All traffic to this site is encrypted with TLS, payments are handled by Stripe (a PCI-DSS Level 1 certified provider), and access to customer data is limited to the people who need it to serve you.

9. Children

Our website and products are intended for adults. We do not knowingly collect personal data from children under 16.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with a new “last updated” date.

11. Contact

For any privacy question or request, contact us at hello@marlbalm.co.uk.