At MARRMA, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how MB MARRMA ("MARRMA", "we", "our" or "us") collects, uses, stores and protects your personal information when you:
visit marrma.com;
create an account;
place an order;
subscribe to our newsletter;
contact us;
or otherwise interact with our website and services.
We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable privacy laws.
MB MARRMA acts as the data controller of your personal data collected through this website.
We may collect the following types of personal information when you use our website or place an order:
• First and last name
• Billing address
• Shipping address
• Email address
• Phone number (if provided)
• Company name (if provided)
• Products purchased
• Order history
• Payment status
• Shipping method
• Order notes (if provided)
If you create an account, we may store:
• Account login and authentication information
• Wishlist or preferences (where available)
• Account activity
We may automatically collect certain technical information, including:
• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited
• Time spent on the website
• Referral source
• Cookies and similar technologies
If you contact us or subscribe to our newsletter, we may collect:
• Email correspondence
• Customer support messages
• Newsletter subscription preferences
If you choose to sign in using Google, we may receive information from Google such as your name, email address, account identifier and other profile information made available according to your Google account settings and permissions.
Certain personal information, such as your name, email address, delivery address and other information required to process your order, is necessary to enter into and perform a purchase contract with us. If you do not provide the required information, we may be unable to process, fulfil or deliver your order. Optional information is not required unless otherwise stated.
We use your personal information only where necessary and for legitimate business purposes, including to:
• Process and fulfil your orders
• Deliver purchased products
• Provide customer support
• Communicate about your order
• Process payments securely
• Prevent fraud and unauthorized transactions
• Improve our website, products and services
• Send newsletters and marketing communications (only with your consent)
• Comply with legal and tax obligations
• Create and manage customer accounts
• Process returns and refunds
• Establish, exercise or defend legal claims where necessary
We do not sell your personal data for monetary consideration. We disclose personal data only as described in this Privacy Policy and where we have a lawful basis to do so.
We may share your personal information only where necessary to operate our business and provide our services. This may include:
To securely process payments for your orders.
To deliver your order and provide shipment tracking.
To operate, maintain and secure our website and online store.
To understand how visitors use our website, improve our services and, where applicable, measure the effectiveness of marketing campaigns.
If you subscribe to our newsletter, your email address may be shared with our email marketing provider to deliver newsletters and promotional communications.
We may disclose personal information where required by applicable law, legal process or to protect our legal rights.
Where a service provider acts as our data processor, it processes personal information on our documented instructions and subject to applicable data protection requirements. Some recipients, such as payment providers, delivery companies or certain technology platforms, may act as independent data controllers and process personal information in accordance with their own privacy notices and applicable law.
We are established in the European Economic Area (EEA). Some of our service providers may process or store personal data outside the EEA.
However, some of our trusted service providers may process or store personal information outside the EEA where necessary to provide their services.
Where personal information is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
These safeguards may include:
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions issued by the European Commission
• Other legally recognized transfer mechanisms where applicable
Where required, we rely on appropriate transfer mechanisms, which may include European Commission adequacy decisions, the EU–U.S. Data Privacy Framework for eligible certified recipients, Standard Contractual Clauses approved by the European Commission and supplementary safeguards where necessary.
You may contact us for more information about the safeguards applicable to international transfers or, where available, to request a copy of the relevant safeguards.
Under the General Data Protection Regulation (GDPR), we process your personal information only where we have a valid legal basis to do so. Depending on how you interact with our website, these legal bases may include:
We process your personal information to fulfil orders, process payments, deliver products, manage your account and provide customer support.
We process certain personal information where required to comply with applicable laws, including accounting, tax and consumer protection obligations.
We may process personal information where it is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. This includes improving our website, preventing fraud, maintaining website security and responding to customer enquiries. Where the use of cookies or similar technologies requires consent, we rely on consent rather than legitimate interests.
Where required by law, we rely on your consent to process personal information, including for sending marketing communications, newsletters and using certain cookies or similar technologies. You may withdraw your consent at any time.
We retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, including to comply with legal, accounting and tax obligations.
The length of time we retain personal information depends on the type of information and the purpose for which it was collected.
For example:
• Order information may be retained to comply with accounting and tax requirements.
• Customer account information is retained while your account remains active or until you request its deletion.
• Newsletter subscription information is retained until you unsubscribe or withdraw your consent.
• Technical information may be retained for security, fraud prevention and website performance purposes.
When personal information is no longer required, we will securely delete, anonymize or otherwise dispose of it in accordance with applicable laws.
If you choose to subscribe to our newsletter or receive marketing communications from MARRMA, we may use your email address to send you updates about new collections, promotions, exclusive offers and other news related to our products.
You will receive marketing communications only where you have given your consent or where otherwise permitted by applicable law.
You may unsubscribe from marketing emails at any time by:
• Clicking the "Unsubscribe" link included in our emails
• Contacting us at support@marrma.com
Once you unsubscribe, we will stop sending marketing communications, although you may still receive important service-related emails regarding your orders or your account.
Our website uses cookies and similar technologies to operate our online store, remember your preferences, understand how visitors use our website and support our marketing activities.
Some cookies are strictly necessary for the website and online store to function and may be used without consent where permitted by applicable law.
Analytics, advertising and other non-essential cookies or similar technologies are used only where permitted by applicable law and, where required, after you have provided your consent.
We may use cookies and similar technologies provided by third-party service providers, including analytics, advertising and payment-related technology providers. The specific technologies used may change as our website and services develop.
You can accept, reject or manage non-essential cookies through the cookie settings available on our website. You may also change or withdraw your preferences at any time through Cookie Settings.
Further information about the categories of cookies and similar technologies currently used, their purposes, providers and storage periods is available through our Cookie Settings.
Under applicable data protection laws, including the GDPR, you may have the following rights regarding your personal information:
You may request confirmation of whether we process your personal information and request access to the personal information we hold about you.
You may request that inaccurate or incomplete personal information be corrected.
You may request the deletion of your personal information in certain circumstances, subject to applicable legal requirements.
You may request that we restrict the processing of your personal information in certain circumstances.
Where applicable, you may request to receive certain personal information you have provided to us in a structured, commonly used and machine-readable format.
You may object to certain processing of your personal information, including processing based on legitimate interests and direct marketing.
Where we rely on your consent to process personal information, you may withdraw your consent at any time. This does not affect the lawfulness of processing carried out before your consent was withdrawn.
Where applicable, you have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.
We do not currently use solely automated decision-making, including profiling, that produces legal effects or similarly significantly affects you. If this changes, we will provide the information required by applicable law.
To exercise any of these rights, please contact us at:
We may request information reasonably necessary to verify your identity before acting on your request. We will not request more information than is necessary for this purpose.We will respond to valid requests in accordance with the time limits required by applicable data protection law.
You also have the right to lodge a complaint with the State Data Protection Inspectorate (VDAI) in Lithuania or another competent supervisory authority in the country where you live, work or believe an infringement has occurred.
We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure website connections, regular software updates and the use of trusted service providers.
While we take appropriate steps to protect your personal information, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
If we become aware of a personal data breach, we will take appropriate action in accordance with applicable data protection laws.
Our website and products are intended for a general audience and may be of interest to teenagers.
We do not knowingly collect personal information from children below the age at which they may legally provide consent under applicable data protection law without the authorization of a parent or legal guardian.
In Lithuania, where our business is established, parental or guardian authorization may be required for children under the applicable age threshold when personal data processing is based on consent.
If we become aware that we have collected personal information from a child in circumstances where valid parental or guardian authorization was required but not obtained, we will take appropriate steps to delete or otherwise lawfully handle that information.
We may update this Privacy Policy from time to time to reflect changes in our business practices, services, technologies or applicable legal requirements.
When we make changes, we will update the effective date of this Privacy Policy. Where required by applicable law, we may also provide additional notice of significant changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use and protect your personal information.
Effective date: 13 July 2026
If you have any questions about this Privacy Policy, how we process your personal information or wish to exercise your privacy rights, please contact us:
We will review your request and respond in accordance with applicable data protection laws.
