Privacy Policy

1. Data Controller

The Data Controller for the information collected on this website is Marco Trombone, located at 170 Bolton St, Chorley, PR7 3DX, UK. Contact email: marcoartcreations@gmail.com.

2. Data Collected & Purpose

We collect and process the following data:

  • Personal Identity: Name, Surname, Email Address and Date of Birth. Collected to fulfill legal requirements (minimum age verification of 16 years) and contract execution.
  • Shipping Details: Address and Phone Number. Collected to ensure successful delivery of your orders via our courier partners.
  • Technical/Cart Data: Session information and cart contents. Used solely to manage your shopping session and checkout process. These are purged periodically.
  • Marketing: Email address. Processed only upon your explicit consent for newsletters and promotional updates.

3. Data Processors (Third Parties)

Your data is handled by trusted partners necessary for our operations:

  • Supabase: For secure database management and user authentication.
  • Stripe: For secure payment processing. Stripe processes your financial data directly under their own security protocols; we do not store full credit card details.
  • Courier Partners: Only for the delivery of physical goods.
  • Resend: Used for the automated delivery of transactional and marketing emails. Resend processes your email address and name strictly to facilitate our communication with you.

4. Data Retention

We retain your data only for as long as necessary to fulfill the purposes described in this policy, or to comply with UK and international tax/legal obligations (typically 6-10 years for financial records). Inactive shopping carts and session data are cleared automatically via scheduled server tasks.

5. International Data Transfers

Our infrastructure is hosted by Supabase in the European Economic Area (Ireland). When you interact with our website, your data may be processed between the UK and the EEA. We ensure that such transfers comply with applicable data protection laws, utilizing Standard Contractual Clauses (SCCs) where necessary to maintain the highest level of data security.

6. Your Rights

You have the right to:

  • Access, correct, or request the deletion of your personal data.
  • Withdraw consent for marketing communications at any time.
  • Request a portable copy of your data.
  • Lodge a complaint with a Data Protection Authority if you believe your data is not being handled correctly.

7. Updates

This Privacy Policy may be updated periodically. Significant changes will be communicated via email or a notice on our website.