Privacy Policy

1. Who we are

We are Marcella Emily Groom, trading as By Marcella, a sole trader based in Scotland, United Kingdom. Our website is hosted on a third-party platform. You can contact us at hello@bymarcellafox.com.

2. Data we collect, why we collect it, and how long we keep it

When you browse or buy from our site we collect:

Contact and order details (name, email, postal address, phone) to process orders and provide support. Retained for seven years for tax and legal compliance.
Payment data handled by our store’s PCI-compliant payment processors (including Stripe and PayPal). We never see full card numbers; processors store them per their own retention rules.
Uploaded wording and artwork for personalising your stationery; retained for up to two years in case of re-orders.
Marketing preferences (newsletter opt-in); kept until you unsubscribe.
Technical and analytics data (IP address, device identifiers, cookie IDs, page views) collected by our website platform and Google Analytics to improve site performance; stored for up to 26 months.

Our lawful bases under UK GDPR are: contract (order fulfilment); legitimate interests (fraud prevention and analytics); and consent (marketing communications and non-essential cookies).

3. Cookies

Our website platform sets essential cookies required for core site functionality and non-essential cookies for analytics and marketing. Visitors from the UK and EU will see a cookie consent banner that lets them accept or reject non-essential cookies. Full details appear in our platform’s cookie policy.

4. How we share your information

We share the minimum necessary data with:

• Trusted printers (for production of your order)

• Carriers such as Royal Mail and DHL Express (for delivery)

• Email-marketing platforms

• Payment processors

• Analytics services

We never sell or lease your personal data.

5. Hosting and international transfers

Our site is served from our hosting provider’s global infrastructure. Our hosting provider may store or process data in the United States, the EU or other regions; each transfer is safeguarded by Standard Contractual Clauses or equivalent measures recognised under UK GDPR.

6. Security

All pages, including checkout, are protected by industry-standard SSL certificates, encrypting data in transit. Our hosting provider continuously monitors its platform for compliance with industry security standards.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or port your personal data, to object to certain processing, and to withdraw consent at any time. To exercise any of these rights, email us at hello@bymarcellafox.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.