Privacy Policy

Marcella Fox or By Marcella (“we”, “us”, “our”)

1. Who we are

We are an Australian stationery studio trading under ABN 29 211 756 408. Our website is hosted on the Squarespace platform.

2. Data we collect, why we collect it, and retention

When you browse or buy from our site we collect:

  • Contact & order details (name, email, postal address, phone) to process orders and provide support. Retained 7 years for tax compliance.

  • Payment data handled by Squarespace’s PCI-compliant processors (Stripe, PayPal, etc.). We never see full card numbers; processors store them per their own retention rules.

  • Uploaded wording / artwork for personalising your stationery; retained up to 2 years for potential re-orders.

  • Marketing preferences (newsletter opt-in); kept until you unsubscribe.

  • Technical & analytics data (IP address, device identifiers, cookie IDs, page views) collected by Squarespace Analytics and Google Analytics to improve site performance. Data is stored up to 26 months.

Our lawful bases under UK/EU GDPR are contract (order fulfilment), legitimate interests (fraud prevention & analytics) and consent (marketing and non-essential cookies).

3. Cookies

Squarespace sets essential cookies for core functionality and non-essential cookies for analytics/marketing. Visitors from the UK or EU see a banner that lets them accept or reject non-essential cookies. Full details appear in our standalone Cookie Policy.

4. How we share your information

We share the minimum required data with:

·      trusted printers (production)

·      carriers (delivery)

·      email-marketing platforms

·      payment processors

·      analytics services.

We never sell or lease your data.

5. Hosting & international transfers

Our site is served from Squarespace’s global infrastructure. Squarespace may store or process data in the United States, the EU or other regions - each transfer is safeguarded by Standard Contractual Clauses or equivalent measures.

6. Security

All pages, including checkout, are protected by Squarespace’s free SSL certificates, encrypting data end-to-end and preventing interception or impersonation. Squarespace continuously monitors its platform for compliance with industry security standards.

7. Your rights

You can access, correct, delete, restrict or port your data, object to certain processing, or withdraw consent at any time. To exercise any right, email us. You may also complain to the OAIC (Australia) or the ICO (UK).

8. Children

We do not knowingly collect data from anyone under 16.

9. Changes

Any updates to this policy will appear here and take immediate effect.