Privacy policy
Last updated: September 4, 2026
Merdello (“we”, “us”) operates the online store at merdello.com (the “Site”). This Privacy Policy explains what personal information we collect when you visit the Site, buy from us or contact us, how we use it, who we share it with, and the choices you have. The Site is hosted on Shopify, which processes personal information on our behalf so that we can run the store.
Who is responsible for your data
The data controller is Merdello, a business registered in Poland (EU). Contact: contact@merdello.com.
Personal information we collect
- Contact details: name, shipping and billing address, e-mail address, phone number.
- Order and payment information: products purchased, order history, subscription status, and payment details. Card numbers are processed by our payment providers; we never see or store your full card number.
- Account information: if you create a customer account, your login details and preferences, including your subscription settings.
- Communications: messages you send us by e-mail, Instagram or Facebook, and any photos you attach (for example, for a refund or shipping claim).
- Device and usage data: IP address, browser and device type, pages viewed, referring links and similar data collected automatically through cookies and pixels.
How we use it
- To process and deliver your orders and subscription refills, send order confirmations, shipping updates and receipts, handle returns, refunds and shipping-protection claims.
- To run your customer account and let you manage your subscription.
- To answer your questions and provide customer support.
- To send marketing e-mails if you signed up for them. You can unsubscribe at any time with the link in every e-mail.
- To show you relevant ads and measure how our ads perform, including through Meta (Facebook, Instagram) and similar platforms.
- To detect fraud, keep the Site secure and comply with legal obligations.
Who we share it with
- Shopify, which hosts the Site and processes orders and payments. See Shopify’s privacy policy at https://www.shopify.com/legal/privacy/customers.
- Payment providers (for example Shopify Payments, PayPal, Shop Pay) to process your payment.
- Fulfillment and shipping partners who pack and deliver your order, and the tracking service that shows you where your package is.
- Apps we use to run the store, such as subscription management, order tracking, shipping protection and customer support tools. They may only use your data to provide their service to us.
- Advertising and analytics partners, such as Meta, which may collect information about your activity on the Site through cookies and pixels to show ads and measure results.
- Authorities or other parties when required by law, to protect our rights, or in connection with a business transfer.
We do not sell your personal information for money. Some US state laws treat sharing data with advertising partners as a “sale” or “sharing” for targeted advertising; you can opt out as described below.
Cookies and tracking
We use cookies and similar technologies to keep your cart, remember your preferences, understand how the Site is used and show relevant ads. You can control cookies in your browser settings. Blocking some cookies may affect how the Site works.
Your rights and choices
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy of it, object to or restrict certain processing, and opt out of targeted advertising or the “sale” or “sharing” of your data. We will not discriminate against you for exercising these rights.
US residents (including California, Virginia, Colorado, Connecticut, Texas and other states with privacy laws): to opt out of targeted advertising, e-mail us at contact@merdello.com with the subject “Opt out”, or use the Global Privacy Control signal in your browser, which we honor where required. You may authorize an agent to make a request on your behalf; we may ask to verify your identity or the agent’s authority.
Residents of the EU, EEA and UK: we process your data under the GDPR on the basis of contract (orders), legitimate interests (security, analytics, support), consent (marketing, cookies) and legal obligations. You may withdraw consent at any time and you have the right to lodge a complaint with your local data protection authority.
To exercise any right, e-mail contact@merdello.com. We respond within the time required by applicable law, usually within 30 days.
Marketing e-mails
You will only receive marketing e-mails if you signed up for them. Every marketing e-mail has an unsubscribe link. We may still send you non-marketing e-mails about your orders, subscription and account.
Children
The Site is not intended for children under 18 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
Security and retention
We use reasonable technical and organizational measures to protect your information, but no method of transmission or storage is completely secure. We keep personal information for as long as needed to fulfill your orders and subscription, provide support, meet legal, tax and accounting obligations, resolve disputes and enforce our agreements.
International transfers
We are based in Poland and our service providers may be located in the United States, Canada, the European Union and elsewhere. When we transfer personal information from the EEA or UK, we rely on recognized safeguards such as the European Commission’s standard contractual clauses or an adequacy decision.
Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available on the Site with the date at the top. Significant changes will be communicated as required by law.
Contact
Merdello
E-mail: contact@merdello.com
Instagram / Facebook: @merdello