Privacy Policy
Last updated: 14 December 2025
This Privacy Policy explains how Marle & Row (“we”, “us”, “our”) collects and uses personal data when you visit our website and purchase digital products (such as downloadable PDF patterns).
We aim to be clear and transparent about what we do with your data, in line with UK data protection law (including the UK GDPR and the Data Protection Act 2018).
1) Who we are (Data Controller)
Marle & Row is the “data controller” for the personal data we process (meaning we decide how and why it’s used).
Contact details:
Email: admin@marleandrow.co.uk
Address: The Blue Church, Dunrossness, ZE2 9JB
If you have any questions about this Privacy Policy or want to exercise your data rights, contact us using the details above.
2) The personal data we collect
Depending on how you interact with us, we may collect:
Identity and contact data: name, email address, billing address.
Order and transaction data: products purchased, order number, payment status, timestamps.
Customer support data: messages you send us and our replies.
Technical and usage data: device type, browser type, IP address, pages viewed, and interactions with the site (often via cookies/analytics).
Marketing preferences: whether you’ve opted in/out of marketing emails.
We do not intentionally collect special category data (such as health data) and we do not want you to provide it.
3) How we collect your data
We collect personal data when you:
place an order or attempt to check out;
download a digital product;
contact us for support;
sign up to a newsletter (if offered);
browse the website (via cookies and similar technologies).
4) Why we use your data and our lawful bases
UK GDPR requires a “lawful basis” for each purpose.
We typically use personal data for:
A) To process and deliver your order (digital download access)
Purpose: confirm your purchase, provide access/download links, customer service.
Lawful basis: Contract (we need your details to perform the contract with you).
B) To handle refunds, complaints, and faults
Purpose: resolve issues and provide remedies where digital content is faulty/misdescribed.
Lawful basis: Contract and Legal obligation (where applicable).
C) To keep records for accounting/tax and legal compliance
Purpose: bookkeeping, tax, fraud prevention, compliance.
Lawful basis: Legal obligation.
(For companies, records must typically be kept for 6 years from the end of the relevant financial year.)
D) To run, protect, and improve our website and store
Purpose: site security, performance, preventing fraud/abuse, diagnosing technical issues.
Lawful basis: Legitimate interests (running and securing our business and website).
E) Marketing emails (if you opt in)
Purpose: send newsletters/updates/promotions (where offered).
Lawful basis: Consent (and you can withdraw consent at any time).
5) Cookies and similar technologies
We use cookies and similar technologies to make the website work and (if enabled) to understand how it’s used.
Essential cookies are needed for core site/store functions (for example, cart and checkout).
Non-essential cookies (for example, analytics or advertising cookies) should only be used after you give consent via a clear positive action.
You can usually manage cookie preferences via our cookie banner (if enabled) and/or your browser settings. You can withdraw cookie consent at any time by changing your preferences.
6) Who we share your data with
We share personal data only where necessary to run the store and deliver purchases, such as:
Hostinger
Payment service providers shown at checkout (they process payments; we do not receive your full card details).
Email service providers (if you receive order emails/download links and/or marketing emails).
Analytics providers (only if enabled and consented where required).
Professional advisers (accountants, legal advisers) where necessary.
Regulators or authorities if we are legally required to share information.
We do not sell your personal data.
7) International transfers
Some service providers may store or process data outside the UK. Where this happens, we use appropriate safeguards recognised under UK data protection law (for example, adequacy decisions or standard contractual safeguards). The ICO expects you to be told if transfers occur and what safeguards apply.
8) How long we keep your data (retention)
We keep personal data only for as long as necessary for the purposes set out above.
Typical retention periods:
Order and accounting records: kept for 6 years from the end of the financial year they relate to (or longer if legally required).
Customer support correspondence: usually kept for up to 12 months after resolution (unless needed for longer to handle a dispute).
Marketing data: kept until you unsubscribe/withdraw consent.
Analytics data: kept according to the settings of the analytics tool (if used).
Note: the 30-day download availability window is a product access setting; it is not the same as record-keeping retention.
9) Your rights
Under UK GDPR, you may have rights including:
access to your personal data,
correction of inaccurate data,
deletion (in certain circumstances),
restriction of processing,
data portability (in certain circumstances),
objection (including an absolute right to object to direct marketing),
withdrawal of consent (where we rely on consent).
To exercise your rights, contact us at admin@marleandrow.co.uk.
You also have the right to complain to the UK Information Commissioner’s Office (ICO).
10) Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or alteration.
11) Children
Our website and products are not intended for children under 16, and we do not knowingly collect personal data from children.
12) Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised.
