Privacy Policy

Last updated: 1 March 2026

Marv Fan Shop ("we", "us", "our") operates the website marvfanshop.com and our flagship retail store at 55 Pall Mall, King St, Manchester M2 4LQ. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect personal information when you place an order, subscribe to our newsletter, contact us, or visit our website. This includes:

• Name, email address, phone number, and shipping address (for orders)
• Payment information (processed securely by Stripe — we do not store card details)
• Email address (for newsletter subscribers)
• IP address, browser type, and pages visited (via analytics tools)
• Any information you provide when contacting us

2. How We Use Your Information

• To process and fulfil your orders
• To send order confirmation and shipping updates
• To send our weekly newsletter (only if you have subscribed and consented)
• To respond to your customer service enquiries
• To improve our website and services through analytics
• To comply with legal obligations

3. Legal Basis for Processing

We process your personal data on the following legal bases: contract performance (for orders), legitimate interests (for fraud prevention and analytics), consent (for marketing emails), and legal obligation (for accounting and tax purposes).

4. Cookies

We use cookies to improve your experience. Essential cookies are required for the website to function. Analytics cookies (Google Analytics) help us understand how visitors use our site. You can manage your cookie preferences using the consent banner when you first visit our site, or by adjusting your browser settings.

5. Data Sharing

We do not sell your personal data. We share it only with trusted service providers including Stripe (payment processing), our email service provider (newsletter delivery), and shipping carriers (order fulfilment). All processors are contractually bound to handle your data securely.

6. Data Retention

We retain order data for 7 years for accounting purposes. Newsletter subscriber data is held until you unsubscribe. Contact enquiry data is held for 2 years. You may request deletion of your data at any time (see Section 8).

7. International Transfers

Some of our service providers are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

8. Your Rights

Under UK GDPR, you have the right to: access your personal data, correct inaccurate data, request deletion ("right to be forgotten"), restrict processing, data portability, and to object to certain processing. To exercise these rights, contact us at [email protected].

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated by email to registered customers and newsletter subscribers. The updated date at the top of this page reflects the latest revision.