Privacy policy

Last updated: 5 September 2026

1. Scope of this policy
2. What data we collect
3. Cookies and similar technologies
4. Google services (Analytics, Ads & Merchant Center)
5. How and why we use your data
6. How we share your data
7. International data transfers
8. Data retention
9. Your privacy rights
10. Data security
11. Children’s privacy
12. Changes to this policy
13. Contact us

1. Scope of this policy

This Privacy Policy explains how Mavrak Studio collects, uses, discloses, and safeguards your personal data when you visit www.mavrakstudio.com (our “Website”), browse our products, create an account, subscribe to our newsletter, or purchase from us.

We are committed to complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the UK GDPR, as well as the Google Merchant Center “personalised ads” and privacy requirements that apply to merchants who advertise through Google Shopping.

2. What data we collect

We may collect the following categories of personal data:

• Identity & contact data: name, email address, billing and shipping address, phone number.
• Order & transaction data: products purchased, order history, invoices, returns and refund records. We do not store full payment card numbers — payments are processed by our payment service providers (see section 6).
• Account data: username, password (hashed), account preferences.
• Technical & usage data: IP address (or truncated IP where IP anonymisation is active), browser type and version, device type, operating system, referring pages, pages visited, time spent on pages, and the approximate location derived from your IP address.
• Communications data: messages you send us by email or through contact forms, newsletter engagement (opens, clicks).
• Marketing data: your preferences for receiving marketing, your interactions with our ads and emails, and consent records.

3. Cookies and similar technologies

We use cookies and similar technologies (e.g. pixels, local storage) to operate the Website, understand how it is used, and — with your consent — to deliver personalised advertising. When you first visit, a cookie banner lets you choose which non-essential cookies to accept; you can change or withdraw your choice at any time via the “Cookie settings” link in our website footer.

You can also control cookies through your browser settings and via industry opt-out tools. Blocking strictly necessary cookies may affect checkout and site functionality.

4. Google services (Analytics, Ads & Merchant Center)

We use the following Google services, each governed by Google’s own Privacy Policy (policies.google.com/privacy):

• Google Analytics — helps us understand how visitors interact with the Website. Google Analytics uses cookies to generate statistics about use (pages visited, session duration, traffic source). Where available, we enable IP anonymisation so your full IP address is not stored by Google. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Google Ads & remarketing — third-party vendors, including Google, use cookies (including the Google Advertising ID and the DoubleClick/DART cookie) to serve ads based on your prior visits to this Website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet. You may opt out of personalised advertising by visiting Google Ads Settings or www.aboutads.info/choices.
• Google Merchant Center / Google Shopping — we submit product data (titles, descriptions, prices, images, availability) to Google Merchant Center so our products can appear in Google Shopping listings and Shopping ads. Product feeds do not include your personal data; however, conversions and site interactions measured through Google may be used to improve the performance of our Shopping ads (e.g. via conversion tracking and, where enabled, enhanced conversions, which rely on consented, first-party data that Google hashes before use).
• Google Ads conversion tracking — when you complete a purchase after clicking one of our ads, a conversion cookie records this so we can measure advertising effectiveness. These cookies expire and do not identify you personally.

Where required by law (including the EU ePrivacy Directive and GDPR), these Google cookies are only set after you have given your consent via our cookie banner. We use Google Consent Mode (or equivalent) to ensure signals are only sent for the purposes you have consented to.

5. How and why we use your data

We only process your personal data where we have a lawful basis under the GDPR/UK GDPR:

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects about you.

6. How we share your data

We share personal data only with service providers who help us run our business, under contracts that require them to protect your data and use it only for our instructions:

• Payment processors (e.g. Stripe, PayPal — [list the ones you use]): to accept and process payments. Card data is captured directly by the processor and never stored on our servers.
• Shipping & logistics partners: name and delivery address to fulfil your order.
• Google and other advertising/analytics providers (as described in section 4).
• Email & marketing platforms (e.g. Mailchimp/Klaviyo — [list the ones you use]): to send order confirmations and, with your consent, newsletters.
• Website hosting & e-commerce platform (e.g. Shopify/WooCommerce — [list yours]): to operate the online store.
• Professional advisers and authorities: auditors, lawyers, tax authorities, courts, or law enforcement where we are legally required.

7. International data transfers

Some of the providers listed above (including Google) process data outside the UK/European Economic Area. Where this happens, we rely on adequacy decisions or Standard Contractual Clauses (or the UK International Data Transfer Addendum) together with supplementary measures, so your data remains protected to UK/EU standards. Google participates in the EU–US Data Privacy Framework for eligible transfers.

8. Data retention

We keep personal data only as long as necessary:

• Order and transaction records: up to [6–10] years, as required by tax and accounting law.
• Account data: until you ask us to delete your account.
• Marketing data: until you withdraw consent or unsubscribe.
• Analytics & cookie data: for a maximum of [14 months] per Google Analytics defaults.

9. Your privacy rights

Under the GDPR and UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to pause processing while a dispute is resolved.
• Data portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests, including profiling for direct marketing.
• Withdraw consent — at any time, for processing based on consent (e.g. marketing cookies), via support@mavrakstudio.com or the “Cookie settings” link.

To exercise any right, email support@mavrakstudio.com. We will respond within one month. If you are unsatisfied with our response, you may complain to your national data protection authority (in the UK, the Information Commissioner’s Office at ico.org.uk).

10. Data security

We use appropriate technical and organisational measures to protect your data, including TLS/SSL encryption for all traffic, hashed passwords, restricted access on a need-to-know basis, and secure payment processing (we never see or store your card details). No method of transmission over the Internet is 100% secure, but we take our responsibilities seriously and review our safeguards regularly.

11. Children’s privacy

Our Website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. The “Last updated” date at the top shows the current version; material changes will be announced on the Website before they take effect.

13. Contact us

Mavrak Studio
Email: support@mavrakstudio.com
Address: Unit A1369 4-6 Greatorex Street, London E1 5NF, United Kingdom