PRIVACY POLICY

Last updated: June 2026

Who I Am

My name is Maria and I run Mariflo Designs, a small independent art studio based in London. My website address is mariflodesigns.com. I take your privacy seriously and I’m committed to being open and honest about how I use your information.

What Information I Collect

When you place an order, I collect your name, email address, delivery address, and payment information. Payment details are processed securely through my payment provider — I never see or store your full card details.

When you sign up to my newsletter, I collect your email address and, if you choose to share it, your name.

When you use the contact form on my website, I collect your name, email address, and the contents of your message.

My website also uses cookies and analytics tools (including Google Analytics) to understand how visitors use the site. This may include information such as which pages you visit, how long you spend on them, and what device or browser you’re using. This data is anonymous and is used only to help me improve the website experience.

How I Use Your Information

I use your information to:

Process and fulfil your order and send you shipping updates. Respond to your enquiries and messages. Send you my newsletter if you have signed up (you can unsubscribe at any time). Improve my website and understand how people find and use it.

I will never sell your personal data to third parties or use it for any purpose other than those listed above.

Who I Share Your Data With

In order to fulfil your order and run my business, I share your data with a small number of trusted third parties, including Royal Mail and other delivery partners to ship your order, WooCommerce and WordPress to process and manage orders on my website, my email marketing platform to send newsletters, and Google Analytics to analyse website traffic. All third parties are required to handle your data securely and in accordance with data protection law.

How Long I Keep Your Data

I keep order records for up to 7 years in line with HMRC requirements. Newsletter subscribers’ data is kept for as long as you remain subscribed. You can ask me to delete your data at any time by getting in touch via the contact form.

Your Rights

Under UK GDPR you have the right to access the personal data I hold about you, request that I correct or delete it, withdraw your consent at any time, and lodge a complaint with the Information Commissioner’s Office (ico.org.uk) if you believe your data has been mishandled.

Cookies

My website uses cookies to remember your preferences and to collect anonymous analytics data via Google Analytics. You can control or disable cookies through your browser settings at any time. Please note that disabling cookies may affect how some parts of the website work.

Contact

If you have any questions about this Privacy Policy or how I handle your data, please get in touch via the contact form.