Privacy Policy
Privacy Policy
Last updated: September 2026
Marnie Thorp (“we”, “us”) operates this online store, including all associated information, content, features, products and services (the “Services”). Our store is provided technically through Shopify. This policy explains how we collect, use and share your personal data when you visit or use our Services, make a purchase, or otherwise communicate with us.
Who is responsible for your data
The controller for the purposes of the UK GDPR and the Data Protection Act 2018, and of the EU GDPR where applicable, is:
ML ECOM OPERATIONS B.V.
Prins Frederik Hendriklaan 84, Naarden, Noord-Holland, 1411 GB, Netherlands
Chamber of Commerce (KvK): 96592710
Email: info@marniethorp.com
What personal data we process
Depending on how you use our Services, we process the following categories of personal data:
- Contact details — name, billing and delivery address, telephone number and email address.
- Payment details — payment method, transaction data and payment confirmations. We do not store full card numbers.
- Account details — username, password, settings and preferences.
- Order and transaction data — items viewed, added to basket or purchased, and returns and cancellations.
- Communications — the content of enquiries you send to our customer service team.
- Device and usage data — information about your device and browser, your IP address, and how you interact with our Services.
Where the data comes from
We collect personal data directly from you, automatically through our Services (including cookies and similar technologies), and from service providers and partners.
Cookies and similar technologies
We use cookies and similar technologies to run the store, to understand how it is used, and to measure and target advertising. Strictly necessary cookies are set on the basis of our legitimate interest in operating the store; analytics and advertising cookies are set only with your consent, which you may withdraw at any time.
| Provider | What it is used for | Basis |
|---|---|---|
| Shopify | Running the store: session management, basket contents, checkout, fraud prevention and security. | Strictly necessary — legitimate interest |
| Meta (Facebook and Instagram) Pixel | Measuring the performance of our advertising, and showing you relevant ads on Meta platforms. | Consent |
| Google (Analytics, Ads and Google Tag) | Understanding how visitors use the store, measuring conversions, and advertising and remarketing through Google services. | Consent |
| Klaviyo | Email marketing: identifying subscribers, sending campaigns and automated emails, and measuring how they perform. | Consent |
Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may stop parts of the store working. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and manage Meta ad preferences in your Meta account settings.
Purposes and lawful bases
- Performance of a contract — providing the Services, processing orders, payments, deliveries, returns and account management.
- Legitimate interests — improving our Services, security, fraud prevention and direct marketing within the limits permitted by law.
- Consent — for example sending marketing emails and using analytics and advertising cookies. You may withdraw consent at any time with effect for the future.
- Legal obligation — complying with statutory retention and record-keeping duties.
Who we share data with
We share your data only as far as necessary, in particular with:
- Shopify and service providers acting on our behalf (IT, payment processing, analytics, customer service, cloud storage, fulfilment and shipping);
- marketing and advertising partners, including Meta, Google and Klaviyo, within the limits permitted by law;
- third parties where you instruct us or consent, such as carriers;
- competent authorities where we are legally required to do so.
Relationship with Shopify
Our Services are hosted by Shopify. Shopify processes data about your access and use in order to provide and improve the Services, and data may be transferred to recipients in countries outside your country of residence. Further information is available in Shopify's privacy policy at https://www.shopify.com/legal/privacy/app-users and the Shopify Privacy Portal at https://privacy.shopify.com/en.
Links to third-party websites
Our Services may contain links to third-party websites. We are not responsible for their content or privacy practices.
Children's data
Our Services are not directed at children and we do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so that we can delete it.
Security and retention
We take appropriate technical and organisational measures to protect your data. No system can be guaranteed completely secure. We retain your data no longer than is necessary for the purposes set out above or to comply with legal obligations.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- be informed about how your data is used;
- access your personal data;
- have inaccurate data rectified;
- have your data erased;
- restrict processing;
- data portability;
- object to processing, including direct marketing;
- withdraw consent at any time with effect for the future;
- lodge a complaint with a supervisory authority.
To exercise your rights, contact us using the details below. If you are in the United Kingdom you may complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the Netherlands you may complain to the Autoriteit Persoonsgegevens.
International transfers
Where we transfer personal data outside the United Kingdom or the European Economic Area, we do so on the basis of appropriate safeguards — such as the UK International Data Transfer Agreement, the UK Addendum to the European Commission's standard contractual clauses, or the standard contractual clauses themselves — unless an adequacy decision applies to the country concerned.
Changes to this policy
We may update this privacy policy from time to time. The current version is always available on this page.
Contact and supplier details
Store: Marnie Thorp
Operated by: ML ECOM OPERATIONS B.V.
Registered address: Prins Frederik Hendriklaan 84, Naarden, Noord-Holland, 1411 GB, Netherlands
Chamber of Commerce (KvK): 96592710
VAT: NL867675342B01
Email: info@marniethorp.com
Phone: +44 20 4577 1564
Service hours: Monday to Friday 09:00–17:00, Saturday and Sunday 12:00–17:00 (GMT)
We aim to answer all enquiries within 24 hours.
You can also reach us through our contact page.