Customer Privacy Notice

Last updated: August 2026

This privacy notice tells you what to expect us to do with your personal information when you visit our website, place an order, or contact us.

1. What Information We Collect, Use, and Why

To provide services and goods, including delivery

• Names and contact details
• Addresses
• Purchase or account history
• Payment details (processed securely via Shopify and Stripe on our behalf)
• Website user information (including user journeys and cookie tracking)

For the operation of customer accounts and order records

• Names and contact details
• Addresses
• Purchase history
• Marketing preferences

For service updates or marketing purposes

• Names and contact details
• Marketing preferences
• Purchase or viewing history
• Records of consent, where appropriate

To comply with legal requirements

• Name
• Financial transaction information

For dealing with queries, complaints or claims

• Names and contact details
• Address
• Purchase or service history
• Customer or client accounts and records
• Financial transaction information
• Correspondence

2. Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information. You can find out more about lawful bases on the ICO's website.

Your data protection rights

To make a data protection rights request, please contact us at hello@mercer79.com. We will respond within one month.

Our lawful bases

For providing goods and services (fulfilling orders):

• Contract - we need your information to fulfil your order and carry out the contract between us.
• Legal obligation - we keep certain records because the law requires it.
• Legitimate interests - we use your information where it benefits you or us without causing undue harm, for example for website analytics and operational improvements.

For customer account and order records:

• Contract - we hold your order history as part of our ongoing relationship.
• Legitimate interests - maintaining accurate customer records benefits both you and us.

For service updates and marketing:

• Consent - we only send marketing communications if you have explicitly opted in. You can withdraw consent at any time by unsubscribing.

For legal compliance:

• Legal obligation - we are required by law to retain financial records for six years.

For queries, complaints and claims:

• Contract - handling complaints about orders is part of our contractual relationship with you.
• Legitimate interests - keeping records of queries and correspondence benefits both parties.

3. Where We Get Personal Information From

We collect all personal information directly from you - when you place an order, sign up to our email list, or contact us with a query or complaint. We do not purchase data from third parties or obtain your information from any other source.

4. How Long We Keep Information

5. Who We Share Information With

We share personal information with the following data processors - organisations that handle personal information on our behalf.

We may also share personal information with relevant regulatory authorities (including HMRC) and organisations we are legally required to share information with, where required by law.

6. Sharing Information Outside the UK

Where necessary, our data processors may transfer personal information outside of the UK. When doing so, they comply with UK GDPR, ensuring appropriate safeguards are in place. Shopify, Stripe, Xero, and Google Workspace all rely on the UK Addendum to the EU Standard Contractual Clauses (or an equivalent UK-recognised mechanism) as their transfer mechanism.

For further information or to obtain a copy of the appropriate safeguard, please contact us at hello@mercer79.com.

7. How to Complain

If you have any concerns about our use of your personal data, please contact us in the first instance at hello@mercer79.com. We will respond within one month.

Mercer 79 Ltd  ·  mercer79.com  ·  Last updated August 2026