GDPR Privacy Policy

🛡️ Privacy Policy for Marshall Sparkles

Effective Date: 31 August 2025
Last Updated: 04 January 2026

At Marshall’s Sparkles, we’re committed to protecting your privacy and handling your personal data with transparency, care, and a touch of sparkle ✨. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR).

📍 Who We Are

Marshall’s Sparkles is a UK‑based small business providing diamond painting kits, accessories, custom designs, and creative crafting products.

Registered Address: Marshall Sparkles, Neale Street, S43 4SD
Contact Email: info@marshallsparkles.co.uk

For the purposes of data protection law, we are the data controller of your personal information.

📦 What Data We Collect

We may collect and process the following types of personal data:

Identity Data

Name
Username or account identifier

Contact Data

Email address
Phone number
Billing and delivery address

Transaction Data

Order history
Payment details (processed securely by third‑party providers — we do not store full card information)

Technical Data

IP address
Browser type and version
Device information
Cookies and tracking data

Marketing Preferences

Your choices about receiving promotional emails or updates

Shopify Data

Customer account details
Order information
Behavioural analytics collected through Shopify’s platform

🎯 How We Use Your Data

We use your data to:

Process and fulfil your orders
Communicate with you about purchases, deliveries, and support
Respond to questions or customer service requests
Send marketing emails (only if you’ve opted in)
Improve our website, products, and customer experience
Analyse store performance and customer behaviour through Shopify analytics

We only process your data when we have a lawful basis, such as:

Fulfilling a contract
Complying with legal obligations
Your consent
Our legitimate business interests (e.g., improving services)

🔒 How We Protect Your Data

We use appropriate technical and organizational measures to safeguard your personal data, including:

Secure servers and encrypted connections
Limited access to personal data by authorized personnel only
Regular reviews of our data protection practices
Shopify’s built-in security features and compliance tools

🤝 Sharing Your Data

We may share your data with trusted third parties, such as:

Payment processors (e.g., Stripe, PayPal)
Delivery services
Marketing platforms (e.g., Mailchimp, Meta Ads)
Shopify apps and integrations that support our store operations
We ensure all partners comply with GDPR and only process your data for agreed purposes.

🌍 International Transfers

If we transfer your data outside the UK or EEA, we ensure it’s protected by appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions.

⏳ How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes outlined above, or as required by law. Typically:

Order data: 6 years (for tax and accounting)
Marketing data: Until you unsubscribe or withdraw consent
Shopify account data: As long as your account remains active or until deletion is requested

🧭 Your Rights

Under GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to or restrict processing
Withdraw consent at any time
Lodge a complaint with the ICO (Information Commissioner’s Office)

To exercise your rights, contact us at info@marshallsparkles.co.uk

🍪 Cookies

Our website uses cookies to enhance your experience. You can manage your cookie preferences via your browser settings. For more info, see our [Cookie Policy].