PRIVICY POLICY

PRIVACY POLICY

Last updated: 14 January 2026

Marbessa operates this store and website, including all related information, content, features, tools, products and Services, to provide you, the customer, with a personalised shopping experience (the “Services”). Marbessa is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will govern with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your information as described.

Personal information we collect or process

When we use the term “personal information”, we mean information that identifies you or another person, or that can reasonably be linked to you or another person. Personal information does not include information that has been collected anonymously or has been de-identified so it cannot reasonably be used to identify you.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information (including inferences drawn from this information):

  • Contact information, such as your name, address, billing address, shipping address, phone number, and email address.

  • Financial information, such as credit/debit card details, financial account information, transaction details, payment method, payment confirmation, and other payment-related data.

  • Account information, such as your username, password, security questions, preferences, and settings.

  • Transaction information, including items you view, add to cart, add to a wishlist, purchase, return, exchange, or cancel, and your prior transactions.

  • Communications with us, including information you include when contacting us (for example, customer support enquiries).

  • Device information, such as information about your device, browser, network connection, IP address, and other unique identifiers.

  • Usage information, including information about how you interact with and navigate the Services, and when you do so.

Sources of personal information

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide personal information;

  • Automatically through the Services, including from your device when you use our products or Services or visit our websites, and through the use of cookies and similar technologies;

  • From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;

  • From partners or other third parties.

How we use your personal information

Depending on how you communicate with us or which Services you use, we may use personal information for the following purposes:

1) To provide, personalise, and improve the Services

We use your personal information to deliver the Services and perform our contract with you, including to process payments, fulfil orders, remember your preferences and interests, send account-related notices, process purchases, returns, exchanges, or other transactions, create and manage your account, arrange shipping, facilitate returns and exchanges, enable you to post reviews, and create a tailored shopping experience (including recommending products based on your activity and purchases).

2) Marketing and advertising

We may use your personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications by email, SMS, or post, and showing you online advertisements for products or Services on the Services or other websites, including based on items you previously purchased, added to cart, or other activity on the Services.

3) Security and fraud prevention

We use personal information to verify your account, provide a secure checkout experience, detect, investigate, or take action regarding suspected fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our Services.

If you choose to register an account, you are responsible for keeping your login credentials secure. We strongly recommend that you do not share your username, password, or other access details with anyone.

4) Communicating with you

We use personal information to provide customer support, respond to enquiries, provide effective Services, and maintain our business relationship with you.

5) Legal reasons

We use personal information to comply with applicable law and respond to valid legal process (including requests from law enforcement or government authorities), to investigate or participate in civil discovery, potential or actual litigation, or other legal proceedings, and to enforce or investigate potential violations of our Terms or policies.

How we disclose personal information

In certain circumstances, we may share your personal information with third parties for legitimate purposes consistent with this Privacy Policy. These circumstances may include:

  • With Shopify, vendors, and other third parties who perform Services on our behalf (for example, IT management, payment processing, analytics, customer support, cloud storage, fulfilment and shipping);

  • With business and marketing partners to provide marketing Services and advertise to you. For example, we use Shopify to support personalised advertising with third-party Services based on your online activity across different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to ask us not to share information about you for targeted advertising based on your online activity across different merchants and websites. You can exercise your opt-out rights here: [LINK];

  • When you direct us, request it, or consent, such as to ship products to you, or through your use of social media widgets or login integrations;

  • With our affiliates or within our corporate group;

  • In connection with a business transaction, such as a merger, acquisition, restructuring, or bankruptcy;

  • To comply with legal obligations, respond to subpoenas, search warrants, and similar requests, enforce applicable Terms or policies, and protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services.

Information you submit through the Services will be transmitted to and shared with Shopify and may also be shared with third parties located in countries other than where you live to provide and improve the Services.

To help protect, grow, and improve our business, we may use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, with other merchants, and with Shopify. To provide these enhanced features, Shopify may use personal information collected about your interactions with our store, with other merchants, and with Shopify.

In these circumstances, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights in relation to Shopify’s processing for these purposes. For more information about how Shopify uses personal information and the rights you may have, please refer to Shopify’s customer privacy notice and privacy portal: [LINK].

Third-party websites and links

The Services may include links to websites or online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and terms.

We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information on those sites. Information you provide in public or semi-public spaces (including third-party social networking platforms) may be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply endorsement of the content, owners, or operators of those platforms, except as stated in the Services.

Children’s data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction.

If you are a parent or guardian and believe your child has provided us with personal information, you may contact us using the details below to request deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as defined under applicable law) personal information of individuals under 16 years of age.

Security and retention of your information

No security measure is perfect, and we cannot guarantee “perfect security.” Information you send to us may not be secure while in transit, and we recommend that you do not use insecure channels to communicate sensitive or confidential information.

How long we retain your personal information depends on various factors, including whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may apply only in certain circumstances. In some cases, we may deny your request as permitted by law.

  • Right to access/know: You may have the right to request access to the personal information we hold about you.

  • Right to delete: You may have the right to request that we delete personal information we hold about you.

  • Right to correct: You may have the right to request that we correct inaccurate personal information.

  • Right to data portability: You may have the right to receive a copy of your personal information and request that we transfer it to a third party, in certain circumstances and subject to exceptions.

  • Right to opt out of sale/sharing for targeted advertising: Depending on where you live, you may have the right to opt out of the “sale” or “sharing” of your personal information or opt out of processing for “targeted advertising” as defined by applicable privacy laws. You can exercise these opt-out rights here: [LINK].

Global Privacy Control (GPC): If you visit our site with the Global Privacy Control signal enabled, we will, depending on your location, treat this as an opt-out request for that browser and device. If we can associate the device sending the signal with a Shopify account, we will also apply the opt-out to the account. For more information about GPC, visit globalprivacycontrol.org. Except for GPC, we do not recognise other “Do Not Track” signals.

Managing communication preferences

We may send you promotional emails. You can unsubscribe at any time using the unsubscribe option in our emails. If you opt out, we may still send you non-promotional messages, such as order or account-related emails.

Additional rights for UK and EEA residents

If you live in the United Kingdom or the European Economic Area (EEA), and subject to local law and applicable limitations, you may also have the right to:

  • Object to processing and restrict processing: You may have the right to ask us to stop or limit processing of personal information for certain purposes.

  • Withdraw consent: Where we rely on your consent to process personal information, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn.

You can exercise these rights where indicated in the Services or by contacting us using the details below. For more information about Shopify’s processing and your rights in relation to Shopify-processed data, please visit: [LINK].

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing requests, as permitted or required by applicable law. Where allowed, you may appoint an authorised agent to submit requests on your behalf. We may require proof of authorisation and may ask you to verify your identity directly with us.

Complaints

If you have complaints about how we process your personal information, please contact us using the details below.

Depending on where you live, you may have the right to appeal our decision by contacting us, and/or to lodge a complaint with your local data protection authority. For the EEA, a list of supervisory authorities is available here: [LINK].

International transfers

Please note that we may transfer, store, and process your personal information outside the country where you live.

If we transfer personal information outside the EEA or the UK, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses, or the UK’s equivalent mechanisms, unless the transfer is to a country recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons.

We will post the revised Privacy Policy on this website, update the “Last updated” date, and provide notice as required by applicable law.

Contact

Marbessa
Email: info@marbessa.com
Address: IJburglaan 635