Privacy Policy

This Privacy Policy explains how Marvellous Games (“we”, “us”, “our”) collects, uses and protects your personal information when you use this website and when you place an order. We are committed to respecting your privacy and handling your data in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

Who we are

Marvellous Games is a small business run by a sole trader based in the United Kingdom, trading as Marvellous Games. For the purposes of data protection law, we are the “data controller” of the personal information we collect about you through this website.

What information we collect

We may collect and process the following types of personal information:

  • Contact details – such as your name, email address, postal address and phone number.
  • Order details – products you purchase, order dates and amounts, delivery details.
  • Payment information – limited information related to payments (for example, transaction IDs and status) provided by our payment processors. We do not store or have access to your full card details.
  • Communication data – information you provide when you contact us (for example by email or via the contact form), including the content of your message.
  • Technical data – such as IP address, device and browser type, and basic analytics data collected via cookies or similar technologies to help us understand how the site is used.

How we use your information

We use your personal information for the following purposes:

  • To process your orders – including taking payment, arranging delivery, and sending you order and shipping confirmations.
  • To provide customer support – for example, responding to enquiries, resolving issues with your order, handling returns or replacements.
  • To operate and improve this website – including monitoring its performance, fixing problems, and making it easier to use.
  • To comply with legal obligations – for example, keeping appropriate records for tax and accounting purposes, and responding to lawful requests from authorities.
  • To protect our business – including preventing fraud and abuse of our website or services.

Legal bases for processing

Under UK data protection law, we must have a legal basis for using your personal information. Depending on the context, we rely on one or more of the following:

  • Contract – where processing is necessary to enter into or perform a contract with you (for example, to take payment and deliver your order).
  • Legal obligation – where we need to comply with a legal or regulatory duty (for example, keeping records for tax purposes).
  • Legitimate interests – where we have a legitimate interest in running and protecting our business and this is not overridden by your rights and interests (for example, preventing fraud or improving our website).
  • Consent – where we rely on your consent (for example, if we ever send optional marketing communications by email, which you can opt out of at any time).

Payment processing

We use third‑party payment providers (such as Stripe) to process card payments securely. Your payment details are collected and processed directly by the payment provider and are not stored on our servers. The provider acts as an independent data controller for your payment data and will process it in accordance with its own privacy policy.

How long we keep your information

We keep your personal information only for as long as is reasonably necessary for the purposes set out in this Privacy Policy, including to meet any legal, accounting or reporting requirements. For example, we may keep basic information about your orders for a number of years for tax and accounting purposes, even after you have stopped shopping with us.

Sharing your information

We do not sell your personal information to third parties. We may share it with trusted service providers who help us run our business, such as:

  • Payment processors who handle card transactions;
  • Delivery and courier companies who deliver your orders;
  • IT and hosting providers who help us operate this website and related systems;
  • Professional advisers (for example, accountants) where reasonably necessary.

Where we share data with service providers, we do so only to the extent necessary for them to provide their services, and we take reasonable steps to ensure your data is kept secure.

International transfers

Some of our service providers or their servers may be located outside the UK. Where this is the case, we take appropriate steps to ensure that your personal data continues to be protected in line with UK data protection standards, for example by relying on adequacy regulations or suitable contractual safeguards.

Your rights

Under UK data protection law, you may have the following rights in relation to your personal data:

  • The right to access a copy of the personal data we hold about you;
  • The right to ask us to correct inaccurate or incomplete data;
  • The right to ask us to delete your data in certain circumstances;
  • The right to restrict or object to certain types of processing;
  • The right to data portability in some cases (moving your data to another provider);
  • The right to withdraw consent where we rely on your consent (for example, marketing emails).

These rights are not absolute and may only apply in certain circumstances. To exercise any of these rights, please contact us using the details below.

Cookies and similar technologies

This website may use cookies or similar technologies to make the site work, to remember your preferences, and to help us understand how the site is used (for example, basic analytics). You can control cookies through your browser settings, but disabling certain cookies may affect how the site functions.

Children

This website is not intended for children under 13 and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us so that we can delete it where appropriate.

Links to other websites

Our site may contain links to other websites that are not operated by us. We are not responsible for the content or privacy practices of those sites. We encourage you to read the privacy policies of any third‑party sites you visit.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in the law or in how we operate our business. The most current version will always be available on this page, and the date of the latest update will be indicated at the top or bottom of the page.

Contact and complaints

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us via the contact form on this website or by email at hello@marvellous.games.

You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office (ICO), if you are unhappy with how we handle your personal information. You can find details about how to do this on the ICO’s website.