Privacy Policy

We may collect the following information:

• name
• email address
• phone number
• billing and shipping address
• order details
• payment status and transaction references
• account login details where you create an account
• customer support messages
• product reviews or wishlist activity
• marketing preferences
• technical information such as IP address, device information, browser type, cookie identifiers, and website usage data

We do not store full card numbers, card security codes, or full payment card details on our own systems.

We use your personal data to:

• process and deliver orders
• take and verify payments
• manage payment status, refunds, and transaction records
• provide customer support
• manage returns, refunds, store credit, and delivery issues
• create and manage customer accounts
• save your wishlist, reviews, addresses, and account preferences
• send order confirmations, delivery updates, refund updates, and service messages
• manage your communication preferences
• prevent fraud, abuse, and security issues
• improve website performance and customer experience
• send marketing emails only where you have opted in or where we are otherwise legally permitted to do so
• comply with legal, tax, accounting, and regulatory obligations

We use your personal data only where we have a lawful basis to do so. This may include:

• Contract - to process your order, deliver goods, manage returns, process payments, and provide customer support.
• Legal obligation - to keep accounting, tax, and business records.
• Legitimate interests - to prevent fraud, secure our website, improve our services, and respond to customer enquiries.
• Consent - for optional marketing emails, non-essential cookies, analytics, or session replay where applicable.

You can withdraw consent at any time where we rely on consent.

Payments are handled by our payment provider, Stripe.

We do not store full card numbers, card security codes, or full payment card details on our own systems. Stripe processes payment information securely in accordance with its own privacy and security standards.

We may store payment status, Stripe transaction references, checkout session references, payment intent references, refund references, and limited payment information needed for order management, refunds, fraud prevention, customer support, and accounting.

We use appropriate technical and organisational safeguards to protect personal data.

We only share personal data where necessary to provide our services, operate our website, or meet legal obligations. This may include sharing data with:

• payment providers, such as Stripe
• website hosting, database, and infrastructure providers, such as Supabase or Vercel
• delivery and courier partners
• email and communication providers
• analytics, cookie, and website performance tools, where consent is given where required
• fraud prevention, security, and error monitoring tools
• accountants, legal advisers, insurers, or regulators where required

We do not sell your personal data.

We use essential cookies required for core website functionality, such as basket, checkout, account login, security, and session management.

We may also use non-essential cookies, analytics, or session replay tools to understand website performance and improve the customer experience.

Non-essential cookies and analytics are used only where required consent has been provided. You can decline or manage non-essential cookies through our cookie banner, and you can change your choice later using the Cookie Preferences link in the footer.

We only send marketing emails where you have opted in or where we are otherwise legally permitted to do so.

You can unsubscribe from marketing emails at any time by:

• using the unsubscribe link in any marketing email;
• updating your communication preferences in your Marabusu account; or
• contacting us at support@marabusu.co.uk.

Service emails, such as order confirmations, delivery updates, refund updates, account messages, and important policy or security notices, are not marketing emails and may still be sent where necessary.

Marketing preference changes may take a short time to update across our systems.

We keep personal data only for as long as needed for the purposes described in this policy.

Order, transaction, refund, store credit, tax, and accounting records may be kept for the period required by law.

Customer support messages, account information, marketing preferences, and technical records are kept only as long as necessary for business, legal, security, and customer service purposes.

When personal data is no longer needed, we will delete, anonymise, or securely retain it where legally required.

Some of our service providers may process data outside the United Kingdom.

Where this happens, we will rely on appropriate safeguards where required by data protection law.

Depending on the circumstances, you may have the right to:

• request access to your personal data
• ask us to correct inaccurate data
• request deletion of your data
• restrict or object to certain processing
• request a copy of your data in a portable format
• withdraw consent where processing is based on consent
• object to direct marketing

To make a request, contact us at support@marabusu.co.uk.

We may need to verify your identity before responding to certain requests.

If you have concerns about how we use your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator.

You can contact the ICO at ico.org.uk or by calling 0303 123 1113.