Privacy

This site is run by MAROVA LIMITED, a New Zealand company (company number 9464451), trading as Marova.

When you order

Payment happens on Stripe's secure checkout page. Stripe collects your card details; we never see or store them. We receive your name, email, shipping address and what you ordered, so we can fulfil it. We pass your name and shipping address to our fulfilment supplier, CJ Dropshipping, and its carrier, only to deliver your order.

What stays in your browser

Each Marova shop keeps its own cart in your browser so it is there when you come back. It is not sent to us until you go to checkout.

How far visitors get

To learn which parts of the shop people use, our own counter (separate from the Meta Pixel below) counts how many visits reach each step (product page, cart, checkout and so on). A count is a number: it carries no name, email, IP address, cookie or identifier.

How people use the shop (our own analytics)

To see which parts of a page help and which get in the way, our own script (not a third party's) records how you move through the shop: the pages you open, how long each part of a page is on screen, how far you scroll, where you click or tap (which element, and where on it and on the page, for heat maps), which photos you swipe to, which options and pack sizes you pick, when you add to cart, open the cart or press Pay, where the pointer rests over prices and buttons, when you switch away from the tab, and whether the welcome wheel was shown, spun or closed and what it gave. It also stores the ad link you arrived from (its utm and fbclid tags), your device type, screen size and the website that sent you. Two first-party cookies hold random ids: mv_vid (the same browser coming back, kept for a year) and mv_sid (one visit, which ends after 30 minutes without activity). It never records what you type: no keystrokes, no form contents, no name, email or address. For the email box in the cart it notes only that the box was clicked into or left. If you go to checkout, the two ids are added to your Stripe checkout so we can tell which visits lead to orders. The data sits in our own database at Cloudflare (our host), is not sold or shared, is used only to improve the shop, and is deleted after 180 days. None of it runs if your browser sends Global Privacy Control.

If you ask to hear when checkout opens

We store the email address you give and the time, and use it only to tell you when checkout opens.

If you tick the reminder box in your cart

The box is unticked unless you tick it. If you do, we pass the email address you type to Stripe with your checkout, and Stripe tells us if the checkout is left unfinished. About an hour later we may send you one reminder email with a link back to your cart (at most one a month), and after that the occasional Marova offer. Every one of these emails has an unsubscribe link, and one click stops them. If you do not tick the box, we send you none of them.

The welcome wheel

If you spin the welcome wheel we store the email address you give, the prize you won, your code and the time. We use it to give you your code, to email you when checkout opens, and nothing else. Reply to any email from us, or write to hello@getmarova.com, and we will delete it.

Advertising measurement (Meta Pixel)

This site loads the Meta Pixel (dataset ID 928971509985994), a script from Meta Platforms, so that we can measure and improve our Facebook and Instagram ads. When you open a page, Meta's script runs in your browser, sets cookies (for example "_fbp") and sends Meta your browser's details (such as your IP address and browser type) and the page you are on, together with these events: page views; product views (product ID and price); add to cart (product ID, quantity and price); checkout started; and a completed purchase (order value, currency and product IDs). We turn off the pixel's automatic matching and automatic button tracking, and we pass it no name, email address, phone number or street address. Meta handles what it receives under its own privacy policy and may link it to your Meta account if you are signed in to Facebook or Instagram.

To opt out: the pixel does not load at all if your browser sends the Global Privacy Control signal; you can also block it with your browser or a tracker-blocking extension, clear the cookies it sets, or manage ad settings at facebook.com/adpreferences. Email hello@getmarova.com if you want help. Apart from the Meta Pixel, our own analytics and our step counts above, the only other measurement is Cloudflare, our host, which may add its own web analytics script that counts page loads without setting cookies. This site loads no other advertising script.

Who stores it

Our hosting provider is Cloudflare, our payment provider is Stripe, and our ad measurement is the Meta Pixel described above. We do not sell your information.

Your choices

To see what we hold about you, or to have it removed, email hello@getmarova.com.