Privacy Policy

Marlow & Grace Boutique operates this store and website, along with all of the information, content, features, tools, products, and services connected to it, in order to give you, our customer, a curated shopping experience (the "Services"). Our store runs on Shopify, which provides the platform that makes these Services possible. This Privacy Policy explains how we collect, use, and share your personal information when you visit, use, make a purchase or other transaction through the Services, or otherwise communicate with us. If anything in our Terms of Service conflicts with this Privacy Policy, this Privacy Policy takes priority when it comes to how we collect, process, and disclose your personal information.

We handle your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purposes of that legislation, Marlow & Grace Boutique is the "controller" of the personal information we collect about you.

Please read this policy closely. By using or accessing any part of the Services, you confirm that you have read it and understand how your information is collected, used, and disclosed as described here.

Personal Information We Collect or Process

When we say "personal information," we mean information that identifies you (or someone else) or that can reasonably be connected to you. It does not include information gathered anonymously or stripped of identifying details so that it can no longer be linked to you. Depending on how you use the Services, where you live, and what the law allows or requires, we may collect or process the categories below — including any inferences we draw from them:

  • Contact details — your name, address, billing address, shipping address, phone number, and email address.
  • Financial information — credit and debit card numbers, financial account numbers, payment card details, transaction details, payment method, payment confirmation, and other payment-related data.
  • Account information — your username, password, security questions, preferences, and settings.
  • Transaction information — the items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, along with your past transactions.
  • Communications — whatever you include when you contact us, such as a customer support message.
  • Device information — details about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information — how and when you interact with and move through the Services.

Where We Get Your Personal Information

We may collect personal information from these sources:

  • Directly from you — for example, when you create an account, use the Services, contact us, or otherwise give us your information.
  • Automatically through the Services — from your device when you use our products or visit our site, including through cookies and similar technologies.
  • From our service providers — when we rely on them for certain technology, or when they collect or process information for us.
  • From our partners or other third parties.

How and Why We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use your personal information to:

  • Provide, personalise, and improve the Services. This includes performing our contract with you, processing payments, fulfilling and managing orders, remembering your preferences and saved items, sending account-related notifications, handling purchases, returns, exchanges, and other transactions, creating and maintaining your account, arranging delivery, enabling returns and exchanges, letting you post reviews, and building a tailored shopping experience such as recommending related products.
  • Market and advertise. Where the law allows (and, where required, with your consent), we may send marketing and promotional messages by email, text, or post, and show you online ads on the Services or elsewhere — including ads based on items you've bought or added to your cart and your other activity on the Services.
  • Keep things secure and prevent fraud. We use your information to verify your account, provide a secure payment and shopping experience, detect and respond to possible fraud or unsafe or unlawful activity, protect public safety, and keep our Services secure. If you register an account, keeping your login details safe is your responsibility, and we strongly recommend not sharing your username, password, or access details with anyone.
  • Communicate with you. We use it to provide customer support, respond to you, deliver our Services effectively, and maintain our relationship with you.
  • Meet legal obligations. We use it to comply with the law or valid legal process, to take part in or investigate legal claims, and to enforce or look into possible breaches of our terms or policies.

Our lawful bases for processing. Under UK GDPR, we rely on one or more of the following legal grounds when we process your personal information: that processing is necessary to perform our contract with you (for example, to fulfil your order); that it is necessary for our legitimate interests (such as preventing fraud, improving our Services, and marketing to existing customers), provided these are not overridden by your rights; that we have your consent (for example, for certain marketing or cookies), which you can withdraw at any time; and that processing is necessary to comply with a legal obligation.

How We Share Your Personal Information

In certain situations, and in line with this Privacy Policy, we may share your personal information with third parties for legitimate purposes, including:

  • With Shopify and other service providers who carry out work on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and delivery.
  • With business and marketing partners who help us market and advertise to you. For instance, we use Shopify to support personalised advertising through third-party services based on your activity across different merchants and websites. These partners handle your information under their own privacy notices. Depending on where you live, you may have the right to tell us not to share your information for targeted advertising based on your activity across different merchants and sites.
  • When you ask or consent. For example, when we share information to ship your products, or when you use social media widgets or login integrations.
  • With our affiliates or others within our corporate group.
  • In connection with legal or business events — such as a merger or insolvency — to meet legal obligations (including responding to court orders, warrants, and similar requests), to enforce our terms or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes information about how you access and use them in order to provide and improve them. Information you submit may be transmitted to and shared with Shopify, along with third parties that may be located in countries other than where you live, so that the Services can be delivered and improved. To help protect, grow, and improve our business, we also use certain Shopify enhanced features that draw on data from your interactions with our store, other merchants, and Shopify itself. To make those features work, Shopify may use personal information collected about your interactions with our store, with other merchants, and with Shopify. In those cases, Shopify is responsible for processing your personal information, including handling any requests to exercise your rights for those purposes. To learn more about how Shopify uses your information and what rights you may have, you can review the Shopify Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may link to websites or platforms run by third parties. If you follow a link to a site we do not control or are not affiliated with, review that site's privacy and security policies and other terms. We do not guarantee, and are not responsible for, the privacy or security of those sites, including the accuracy or reliability of any information on them. Anything you post in public or semi-public spaces, including on third-party social networks, may also be visible to other users without restriction on how we or a third party might use it. Including a link does not by itself mean we endorse that site or its operators, unless we say so on the Services.

Children's Data

The Services are not meant for children, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and your child has given us their personal information, you can contact us using the details below to ask us to delete it.

Security and Retention of Your Information

We take appropriate technical and organisational measures to protect your personal information. However, no security measures are perfect or completely impenetrable, so we cannot promise "perfect security." Information you send us may also not be secure while it is in transit. We recommend that you avoid using unsecure channels to send us anything sensitive or confidential.

How long we keep your personal information depends on factors such as whether we still need it to maintain your account, provide the Services, meet legal obligations (for example, tax and accounting requirements), resolve disputes, or enforce our agreements and policies. When we no longer need it, we will delete or anonymise it.

Your Rights

Under UK data protection law, you have the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances:

  • Right to be informed about how we use your personal information (which this policy provides).
  • Right of access to the personal information we hold about you.
  • Right to rectification of inaccurate or incomplete personal information.
  • Right to erasure ("right to be forgotten") of personal information in certain circumstances.
  • Right to restrict processing of your personal information in certain circumstances.
  • Right to data portability — to receive a copy of certain personal information and have it transferred to another organisation where technically feasible.
  • Right to object to processing based on our legitimate interests, and to direct marketing at any time.
  • Right to withdraw consent where we rely on consent to process your information. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
  • Rights relating to automated decision-making and profiling, where applicable.

Managing marketing preferences. You can opt out of marketing emails at any time using the unsubscribe link in those emails. Even if you opt out, we may still send you non-promotional messages about your account or orders.

You can exercise any of these rights by contacting us using the details below. We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request, as the law permits or requires, and you may use an authorised agent to make a request on your behalf (we will require proof of that authorisation). We will respond within the timeframe required by law — usually within one month. To learn more about how Shopify uses your information and any related rights, you can visit https://privacy.shopify.com/en.

Complaints

If you have a concern about how we handle your personal information, please contact us first using the details below so we can try to resolve it. You also have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO), at https://ico.org.uk or by calling 0303 123 1113.

International Transfers

We are based in the UK, but we or our service providers (including Shopify) may transfer, store, and process your personal information in countries outside the UK, including the United States.

Where we transfer personal information outside the UK, we take steps to make sure it receives an adequate level of protection — for example, by transferring it to a country the UK Government has deemed adequate, or by putting in place appropriate safeguards such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we do, we'll post the revised version here, update the "Last updated" date, and provide notice where the law requires it.

Contact Information

Store name: Marlow & Grace Boutique (owned and operated by ECOMZONI

Company name: ECOMZONI

Company address: Kapellensteenweg 288, 2920 Kalmthout, Belgium.

Company number: 1020505722

Phone: +32478158129

Email: info@marlowgraceboutique.com

Hours: Monday to Friday: 09:00 – 17:00 GMT

Weekends: 11:00 – 16:00 GMT

We aim to respond to your inquiries within 24 hours.