Last updated: 29 August 2026

Mari Gru Studio respects your privacy. This notice explains what information we use when you visit marigru.com, contact the studio, create an account, place an order, or ask to receive Studio Letters, and the choices and rights available to you.

Who controls your information

Mari Gru Studio is the data controller for information collected through this website. Questions or privacy requests can be sent to mari@marigru.com or Mari Gru Studio, 13 Balmoral Avenue, West Bridgford, Nottingham, NG2 7QU, UK.

Information we collect

• Orders and accounts: your name, email address, telephone number, billing and delivery addresses, order details, account details, and messages about an order.
• Payments: Stripe, PayPal, or another payment provider processes payment details. Mari Gru Studio does not receive or retain your full card number.
• Contact and commissions: information you choose to include in an email, contact form, or commission enquiry.
• Studio Letters: your email address, an optional first name, signup source and time, the consent wording shown to you, double-opt-in confirmation status and time, and the information needed to record delivery, unsubscribe, and suppression status.
• Technical and security information: IP address, browser and device information, access times, referring pages, security logs, and information needed to keep the shop, basket, checkout, and accounts working.
• Analytics and advertising information: page visits, product interactions, referral source, campaign information, and shopping events, but only as permitted by your cookie choices.

How and why we use information

• To fulfil orders, arrange delivery, provide downloads, manage returns, and answer customer or commission enquiries. The legal basis is performance of a contract or steps you ask us to take before a contract.
• To maintain accounts, prevent fraud, protect the website, diagnose faults, and understand the operation of the shop. The legal basis is our legitimate interests in operating a secure and effective business.
• To keep transaction and accounting records where required by tax, consumer, or other law. The legal basis is compliance with a legal obligation.
• To send Studio Letters about new artworks, works in progress, behind-the-scenes stories, and occasional offers, including a short welcome series. We rely on your consent under Article 6(1)(a) of the UK GDPR and ask you to confirm your request by email before marketing starts. You do not have to subscribe to shop with us.
• To measure website use and advertising, where you have actively consented to the relevant non-essential cookies or similar technologies. You can withdraw that consent at any time.

Cookies and similar technologies

Strictly necessary technologies keep the website secure and make functions such as the basket, checkout, account login, and cookie preferences work. They do not require consent.

Analytics and advertising technologies are non-essential. The cookie banner lets you accept all, decline, or choose settings. Until you consent, these categories are set to denied. You can change or withdraw your choice at any time using the cookie settings control shown on the website. Declining non-essential cookies does not prevent you from shopping.

Analytics and advertising providers

• Google Analytics and Google Tag Manager: used to measure visits and shopping interactions and to manage measurement tags. Google receives consent signals and adjusts storage and processing according to your choice.
• Meta: Meta Pixel and related WooCommerce integration may measure product views and shopping events for attribution and advertising when advertising consent is granted.
• Pinterest: the Pinterest Tag may measure visits and shopping events for attribution and advertising when advertising consent is granted. Automatic Enhanced Match is disabled, so the tag is not configured to collect and hash details from form fields.

These providers may use cookies, local storage, IP address, page URL, referrer, browser information, identifiers, and event details. Their processing may involve countries outside the UK. We use available contractual and technical safeguards and limit non-essential tracking according to your consent choice.

Who receives information

We do not sell or rent customer lists. Information is shared only where needed with service providers that help operate the shop, including website hosting and security providers, WooCommerce and WordPress services, payment providers such as Stripe and PayPal, delivery providers, and the analytics or advertising providers described above when you consent. We may also disclose information when required by law or to establish, exercise, or defend legal rights.

For Studio Letters, Brevo acts as an email-service provider processing contact, consent-status, delivery, and unsubscribe information on our behalf. Brevo may use approved subprocessors. Where this processing involves a transfer outside the UK, we use an applicable adequacy regulation or appropriate contractual safeguards. You can ask us for more information about those safeguards.

How long we keep information

Order and accounting records are kept for the period required by applicable tax, consumer, and accounting rules. Account information is kept while the account is active or as needed to provide the service. Enquiries are kept only as long as reasonably needed to answer them and maintain relevant business records. Security logs and analytics information are retained according to operational need and the settings of the relevant service, then deleted or anonymised when no longer needed.

Unconfirmed Studio Letter requests are kept for up to 14 days and then deleted or anonymised. If you confirm, we keep your contact details and consent evidence while you remain subscribed. If you unsubscribe, we stop the marketing and remove you from the Studio Letter mailing list, but keep the minimum suppression and withdrawal record needed to honour your choice and demonstrate compliance. We periodically review these records and delete or anonymise information that is no longer needed.

Your rights

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw consent without affecting earlier lawful processing. To make a request, email mari@marigru.com. We may need to verify your identity before responding.

You can withdraw consent to Studio Letters at any time by using the unsubscribe link in any Studio Letter or emailing mari@marigru.com. We will stop the relevant email marketing as soon as possible. If you later subscribe again, we will ask for and record a new consent.

You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Children

This shop is not directed to children under 13, and Mari Gru Studio does not knowingly collect their personal information.

Other websites and embedded content

Links and embedded social content can take you to services operated by other organisations. Their privacy practices are governed by their own notices. Non-essential embedded content may remain blocked until you choose the relevant cookie category.

Security and changes

We use reasonable technical and organisational safeguards, including encrypted connections, access controls, security monitoring, and specialist payment providers. No internet service can guarantee absolute security.

We may update this notice when the website, providers, or legal requirements change. The date at the top shows the latest revision.