Privacy policy

Mercer & Loxley respects your privacy. This Privacy Policy explains which personal data we collect when you visit or make a purchase from mercerloxley.co.uk, why we collect it, and what your rights are under the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR.

1. Who are we?

Mercer & Loxley (trading name of Difenty) — Haarlem, the Netherlands Dutch Chamber of Commerce (KvK): 77767500 VAT: NL003235354B26 E-mail: info@mercerloxley.co.uk

We are the data controller for your personal data.

2. What data do we collect?

When placing an order:

  • Name
  • Email address
  • Phone number
  • Delivery address and billing address
  • Payment details (processed by our payment partner — we do not store full card details)
  • Order details and order history

When visiting the website:

  • IP address
  • Device and browser information
  • Pages visited and products added to your cart (via analytics)
  • Cookies

When subscribing to the newsletter:

  • Email address

We only collect data that is reasonably necessary to operate our store, process orders, improve our website and provide customer service.

3. Why do we collect this data?

We use your data to:

  • Process and deliver your order
  • Send order confirmations and shipping updates
  • Respond to customer service requests
  • Manage returns, refunds and exchanges
  • Contact you about your order
  • Improve our website and shopping experience
  • Detect fraud or security issues
  • Send you (with your consent) newsletters or offers
  • Comply with legal obligations (such as tax administration)

4. Shopify

Our store is hosted on Shopify. Shopify provides the e-commerce platform that allows us to sell our products to you. Your data may be stored through Shopify's data storage, databases and applications. Transfers to the US take place on the basis of Standard Contractual Clauses.

5. Payments

Payments are processed securely through trusted payment providers. Mercer & Loxley does not store full credit card details.

Depending on the payment method you choose, your payment may be processed by providers such as credit card networks, Apple Pay, Google Pay or other secure payment services available at checkout.

6. Who do we share your data with?

We only share your data with trusted service providers where necessary to operate our business:

  • Shopify (e-commerce platform)
  • Payment providers (for transaction processing)
  • Shipping partners (to deliver your parcel)
  • Suppliers and fulfilment partners
  • Customer support tools
  • Email marketing provider (if you are subscribed)
  • Analytics and website performance tools

We only share data where needed to provide our services, process orders or comply with legal requirements. We never sell your data to third parties.

7. Direct supplier fulfilment

Because some orders are shipped directly by our suppliers, including suppliers located outside the UK and the European Economic Area (such as China), we share the order and shipping details required for delivery with those suppliers.

This includes your name, delivery address, order details and, where required for delivery, your contact details. This transfer is necessary for the performance of your contract with us: without this data, your order cannot be delivered.

8. Marketing and newsletter

If you subscribe to our email list, we may send you updates about new arrivals, offers and sale events. You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us at info@mercerloxley.co.uk.

9. Cookies

Our website uses cookies and similar technologies for functionality, remembering your preferences, analysing website traffic and (with your consent) marketing. Some cookies are necessary for the website to work properly. You can manage cookies through your browser settings.

10. Security

We take appropriate technical and organisational measures to secure your data. Our website uses SSL encryption (HTTPS). However, no method of transmission over the internet or electronic storage is completely secure; we therefore only work with trusted platforms and service providers.

11. How long do we keep your data?

  • Order data: 7 years (statutory retention period for tax purposes)
  • Account data: as long as your account is active
  • Newsletter: until you unsubscribe

12. Your rights

Under the UK GDPR you have the right to:

  • Access your data
  • Have your data corrected
  • Have your data erased (insofar as legally permitted)
  • Object to processing
  • Restrict processing
  • Request a copy of your data (data portability)
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk)

Send a request to info@mercerloxley.co.uk — we will respond within 30 days.

13. Third party links

Our website may contain links to third party websites. We are not responsible for the privacy practices or content of third party websites.

14. Changes

We may update this Privacy Policy from time to time. The current version can always be found on this page.

Contact us

For privacy questions, contact us at:

Mercer & Loxley Email: info@mercerloxley.co.uk Website: mercerloxley.co.uk