Privacy policy

Last updated: 5th November 2026

1. About this policy

1.1 This Privacy Policy explains how Maru Swimwear Limited ("we", "us" and "our") collects, uses, shares and protects your personal information when you use the website at www.maruswim.com (the "Website"), buy our products or otherwise contact us.

1.2 We are the controller of your personal information for the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1.3 Maru Swimwear Limited is a company registered in England and Wales under company number 02475744, with its registered office at 21 Bedford Square, London, WC1B 3HH, United Kingdom. Our business address is 24 Mark Road, Hemel Hempstead Industrial Estate, Hemel Hempstead, HP2 7BN, United Kingdom.

1.4 You can contact us about this Privacy Policy or your personal information by email at enquiries@maruswim.com, by telephone on +44 (0)1442 430692, or by post at our business address.

2. Personal information we collect

2.1 Depending on how you use the Website and our services, we may collect:

(a) Contact details, such as your name, billing and delivery addresses, email address and telephone number.

(b) Order information, such as the products you buy, return or exchange, order history and payment confirmation. Payments are processed by our payment providers. We do not see or store your full card details.

(c) Account information, such as your login details and preferences, if you create an account.

(d) Customer service information, such as the content of emails, messages and calls with our customer service team.

(e) Reviews and other content you submit to us.

(f) Marketing preferences, such as whether you have subscribed to or unsubscribed from our emails.

(g) Device and usage information, such as your IP address, browser and device type, and how you use the Website, collected through cookies and similar technologies (see section 6).

3. How we collect personal information

3.1 We collect personal information:

(a) directly from you, for example when you place an order, create an account, sign up to our emails or contact us;

(b) automatically when you use the Website, through cookies and similar technologies; and

(c) from third parties, such as our payment providers and delivery partners.

4. How we use personal information and our lawful bases

4.1 We use personal information for the purposes below. UK GDPR requires us to have a lawful basis for each purpose, which is shown alongside it.

Purpose	Lawful basis
Processing and delivering your orders, including payments, returns, refunds and exchanges	Performance of our contract with you
Creating and managing your account	Performance of our contract with you
Responding to your questions and complaints	Performance of our contract with you, or our legitimate interests in providing good customer service
Sending you marketing emails	Your consent, or, where you have bought from us before, our legitimate interests in telling you about similar products (you can opt out at any time)
Showing you relevant advertising and measuring how the Website is used	Your consent, given through our cookie banner
Publishing reviews you submit	Our legitimate interests in sharing genuine customer feedback
Preventing fraud and keeping the Website secure	Our legitimate interests in protecting our business and customers
Keeping financial and tax records and meeting other legal requirements	Compliance with our legal obligations

4.2 Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights. You can ask us for more information about this.

5. Marketing

5.1 We send marketing by email only. We will only send you marketing emails if you have agreed to receive them or, where you have bought from us before, about similar products, unless you have opted out.

5.2 You can unsubscribe at any time using the link in any marketing email or by contacting us at enquiries@maruswim.com. We will still send you emails about your orders and account.

5.3 We do not sell your personal information.

6. Cookies

6.1 Cookies are small files placed on your device when you visit a website. We use:

(a) strictly necessary cookies, which the Website needs to work, for example to keep items in your basket and process checkout; and

(b) analytics and marketing cookies, which help us understand how the Website is used and show you relevant advertising on other websites.

6.2 We only use analytics and marketing cookies if you agree to them through our cookie banner. You can change your choices at any time using the cookie settings link on the Website, or by adjusting your browser settings.

6.3 The Website runs on Shopify. For details of the cookies Shopify uses, see Shopify's cookie policy.

7. Children's information

7.1 Some of our products are designed for children, but they are bought by adults. We do not knowingly collect personal information directly from children.

7.2 If you believe a child has given us personal information directly, please contact us and we will delete it.

8. Who we share personal information with

8.1 We may share personal information with third parties where necessary for the purposes described in section 4. This may include sharing it:

(a) with Shopify and other service providers who perform services on our behalf, such as website hosting, IT management, payment processing, data analytics, customer service, email delivery, cloud storage, fulfilment and delivery;

(b) with advertising and marketing partners, to show you relevant advertising on other websites and measure how effective it is, where you have agreed to the relevant cookies. These partners use your information in line with their own privacy notices;

(c) where you ask us to, or agree to us doing so, for example to deliver your order or when you use social media features on the Website;

(d) with other companies in our group;

(e) with professional advisers, such as lawyers, accountants and auditors;

(f) with a buyer or potential buyer of all or part of our business, who will be required to use it in line with this Privacy Policy; and

(g) where required by law, or where necessary to establish, exercise or defend legal claims, enforce our terms and policies, or protect our rights, property or safety, or those of our customers or others.

8.2 Our service providers act on our instructions and are required to keep your information secure.

8.3 The Website is hosted by Shopify, which processes personal information about your use of the Website in order to provide and improve its services. We also use certain Shopify features that combine information about your interactions with the Website with information from other Shopify merchants and from Shopify itself, to help protect and grow our business. For these features, Shopify is responsible for the processing of your personal information, including responding to requests to exercise your rights. For more information, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

9. International transfers

9.1 Some of our service providers are based outside the United Kingdom, including in the United States and the European Economic Area. Where we transfer personal information outside the United Kingdom, we make sure it is protected, either because the country has been found by the UK Government to provide adequate protection, or by using approved safeguards such as the International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses.

10. How long we keep personal information

10.1 We keep personal information only for as long as we need it for the purposes in section 4, including to meet legal, tax and accounting requirements. In particular:

(a) order and financial records are kept for six years from the end of the financial year in which the order was placed;

(b) account information is kept while your account is open, and deleted within a reasonable period after you close it;

(c) customer service records are kept for six years after the enquiry is closed; and

(d) marketing preferences are kept until you unsubscribe, after which we keep a record that you have opted out so that we do not contact you again.

11. Security

11.1 We use appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access. However, no transmission over the internet is completely secure, so please do not send sensitive information to us by unsecured email.

12. Your rights

12.1 Under UK GDPR you have the right to:

(a) ask for a copy of the personal information we hold about you;

(b) ask us to correct inaccurate or incomplete information;

(c) ask us to delete your information;

(d) ask us to restrict how we use your information;

(e) object to our use of your information where we rely on legitimate interests, and to object at any time to direct marketing;

(f) ask for your information in a portable format; and

(g) withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.

12.2 Some of these rights apply only in certain circumstances. To exercise any of them, contact us using the details in section 1.4. There is normally no charge, and we will respond within one month. We may need to confirm your identity before responding.

13. Complaints

13.1 If you have a concern about how we use your personal information, please contact us first so that we can try to resolve it.

13.2 You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113. If you live in the European Economic Area, you can also complain to the data protection authority in your country.

14. Changes to this Privacy Policy

14.1 We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. Where changes are significant, we will take reasonable steps to let you know.