Privacy policy
Privacy Policy
Last updated: 2 September 2026
Marshian Cards is a trading name of Marshian Enterprise Ltd ("Marshian Cards", "we", "us" or "our").
We operate the Marshian Cards website and online store. Our store is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and services to you.
This Privacy Policy explains how we collect, use, store and share your personal information when you visit Marshian Cards, make a purchase, create an account, contact us or otherwise use our services.
For the purposes of UK data protection law, Marshian Enterprise Ltd is the data controller for the personal information described in this policy, except where another organisation, such as Shopify or a payment provider, acts as an independent controller.
Personal information we collect
Depending on how you interact with us, we may collect:
Your name.
Email address.
Telephone number.
Billing and delivery addresses.
Order and transaction information.
Products you purchase, return or cancel.
Customer account information.
Communications you send to us.
IP address, browser, device and network information.
Information about how you use our website.
Marketing preferences.
Payment-related information required to process transactions.
Payments are processed through Shopify Payments and/or other payment providers made available at checkout. We do not need to directly store your complete payment-card details in order to process your order.
Where we obtain your information
We may obtain personal information:
Directly from you when you place an order, create an account, contact us or provide information through our website.
Automatically when you use our website, including through cookies and similar technologies.
From Shopify and other service providers that support our store.
From payment providers, delivery companies and other organisations involved in fulfilling your order.
From advertising or analytics providers where those services are enabled and legally permitted.
How and why we use your information
We use personal information where we have a lawful basis under UK data protection law.
To perform our contract with you
We use your information where necessary to:
Process and fulfil orders.
Take and confirm payment.
Arrange delivery.
Provide order updates.
Manage returns, cancellations and refunds.
Provide customer accounts.
Respond to questions relating to an order.
To comply with legal obligations
We may process and retain information where necessary to:
Maintain tax and accounting records.
Comply with consumer-protection requirements.
Respond to lawful requests from authorities.
Meet other obligations applying to Marshian Enterprise Ltd.
For our legitimate interests
Where those interests are not overridden by your rights, we may use information to:
Operate and improve our business and website.
Prevent fraud and protect our customers.
Protect the security of our website and systems.
Investigate suspicious transactions.
Understand how customers use our store.
Maintain appropriate business records.
Establish, exercise or defend legal claims.
With your consent
Where consent is required, we may use information to:
Send marketing emails or other promotional communications.
Use non-essential cookies or similar technologies.
Provide personalised advertising where applicable.
You can withdraw consent at any time. Withdrawal does not affect processing carried out lawfully before consent was withdrawn.
UK data-protection law requires businesses to identify an appropriate lawful basis for each purpose for which they process personal information.
Marketing
We may send promotional communications where you have consented to receive them or where another lawful basis permits us to do so.
You can unsubscribe from marketing emails at any time by using the unsubscribe option contained in the message.
Even if you unsubscribe from marketing, we may still send important non-marketing communications relating to your orders, account, payments, returns or other transactions.
Cookies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website, checkout, shopping basket and other essential functionality to operate.
Where required by law, non-essential cookies, including certain analytics, advertising and personalisation cookies, will only be used after you have made the appropriate choice through our cookie/privacy controls.
You can review or change your cookie preferences through the privacy controls available on our website.
The ICO states that non-essential cookies generally require user agreement and should not be set before the necessary consent has been obtained.
How we share personal information
We may share information where necessary with organisations that help us operate Marshian Cards, including:
Shopify, which hosts and operates our ecommerce platform.
Payment processors and financial-service providers.
Delivery and courier companies.
IT, hosting, security and technical-service providers.
Customer-service providers.
Analytics and marketing providers where applicable.
Accountants, legal advisers and other professional advisers.
Government bodies, regulators or law-enforcement authorities where legally required.
We only share information where there is an appropriate reason to do so.
We may also disclose information in connection with a sale, restructuring or transfer of all or part of our business, subject to applicable data-protection requirements.
Shopify
Our online store is hosted by Shopify.
Shopify processes information relating to your use of our store in order to provide its ecommerce, checkout, security, payment and related services.
In some circumstances Shopify acts as a processor on our behalf, while in others Shopify may act as an independent data controller for its own purposes.
Information processed through Shopify may be transferred to and processed in countries outside the United Kingdom. Appropriate safeguards are used where required by applicable data-protection law.
International transfers
Some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will rely on an appropriate lawful transfer mechanism where required, such as:
A UK adequacy regulation.
Approved contractual safeguards.
Another mechanism permitted under UK data-protection law.
How long we keep your information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, tax, accounting and reporting obligations.
Order, transaction and accounting information may generally need to be retained for up to six years or longer where legally required.
HMRC requires limited companies to retain relevant Corporation Tax and accounting records for six years from the end of the financial year to which they relate in many circumstances.
Other information may be retained for different periods depending on:
Whether you have an active customer account.
Whether an order or dispute remains unresolved.
Our legal obligations.
Fraud-prevention requirements.
Whether information is needed to establish or defend legal claims.
Marketing information will be retained until you withdraw your consent, unsubscribe or it is no longer necessary, subject to any records we need to retain to honour your preferences.
Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
You are responsible for keeping any customer-account password or other login credentials confidential.
Your UK data-protection rights
Depending on the circumstances, UK data-protection law may give you the right to:
Ask for access to personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Ask us to delete personal information.
Ask us to restrict how we use your information.
Object to certain uses of your information.
Receive certain information in a portable format.
Withdraw consent where we rely on consent.
Object to direct marketing.
These rights are not absolute and may be subject to legal exceptions.
If you wish to exercise a data-protection right, please contact:
james@marshiangames.com
We may need to verify your identity before fulfilling a request.
The ICO states that organisations generally need to respond to qualifying data-protection rights requests without undue delay and normally within one month.
Complaints
If you have concerns about how we use your personal information, please contact us first so that we can investigate.
You also have the right to complain to the UK data-protection regulator:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Further information about making a complaint is available from the Information Commissioner's Office.
The ICO recommends that UK privacy notices tell customers about their right to complain to the ICO and provide appropriate contact details.
Children's privacy
Our online store is intended for customers who are able to enter into purchases lawfully or who are using the store with the involvement of a parent or guardian where appropriate.
We do not knowingly use children's personal information for purposes inconsistent with applicable data-protection law.
If you believe a child has provided personal information to us inappropriately, please contact us.
Third-party websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, security or content of websites that we do not control. We recommend reviewing the privacy notice of any third-party website you visit.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, legal obligations or privacy practices.
When we make changes, we will update the date shown at the top of this policy and provide any additional notice required by law.
Contact us
For questions about this Privacy Policy, our privacy practices or your personal information, contact:
Marshian Cards
A trading name of Marshian Enterprise Ltd
Email: james@marshiangames.com
Website: marshiancards.co.uk
CRN: 17319014
Registered Office:
Suite A
82 James Carter Road
Mildenhall
IP28 7DE
United Kingdom