Privacy Policy | Marula Products

1. Who we are

Marula Products Zambia (“we”, “us”, “our”) is the data controller for personal data collected through this website (marulaproducts.com). We produce and supply wild-harvested Marula oil sourced from Zambia’s Luangwa Valley.

Contact for data matters: hello@marulaproducts.com

2. Data we collect and why

Wholesale and trade enquiries

When you submit a wholesale enquiry or request a technical data sheet, we collect your name, job title, company name, email address, phone number (if provided), country, and the details of your sourcing needs. We use this to respond to your enquiry and send requested documents. Legal basis: legitimate interests (responding to a business enquiry you have initiated).

Orders and payments

If you purchase through this site, payment is processed by Stripe. We do not store card details. We receive your name, email, and order details for fulfilment purposes. Legal basis: performance of a contract.

Marketing communications

If you tick the optional marketing consent box on our wholesale form, we may send you occasional updates about products and impact reports. Legal basis: consent. You can withdraw consent at any time by emailing us.

Website usage

We do not use analytics cookies or tracking pixels. No behavioural data is collected about how you use this site. Server logs (IP address, browser type, page requested) may be retained by our hosting provider (Vercel) for up to 30 days for security and infrastructure purposes.

3. How long we keep your data

Enquiry data: up to 24 months from the date of enquiry, or until you ask us to delete it.
Order data: up to 7 years for tax and accounting compliance.
Marketing consent records: until you withdraw consent.

4. Who we share your data with

We do not sell your data. We share it only where necessary:

Stripe — payment processing. Stripe Privacy Policy: stripe.com/privacy
Vercel — website hosting and infrastructure.
Sanity — content management system (no personal data is stored in Sanity).
Email service provider — used to send and receive enquiry emails. Provider details available on request.

All third-party processors are GDPR-compliant and bound by data processing agreements where required.

5. International transfers

Our website is hosted on Vercel infrastructure, which may involve data transfers outside the UK or EU. Where data is transferred internationally, appropriate safeguards are in place (standard contractual clauses or adequacy decisions).

6. Your rights

Under UK GDPR and EU GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data (“right to be forgotten”), subject to legal retention requirements.
Restrict processing while a dispute is resolved.
Data portability — receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email hello@marulaproducts.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk, or with the supervisory authority in your EU member state.

7. Cookies

This site uses essential cookies only. We do not use tracking, analytics, or advertising cookies. For full details, see our Cookie Policy.

8. Changes to this policy

We may update this policy as our practices or legal requirements change. Material changes will be noted with a revised “last updated” date at the top of this page.