Privacy policy
This Privacy Policy explains how Merenlo collects, uses, stores and shares personal information when you visit merenlo.co.uk, place an order, contact us, use order-tracking services, subscribe to marketing or otherwise interact with our store.
Merenlo serves customers in the United Kingdom and the Republic of Ireland. Depending on where you are located, the UK GDPR, Data Protection Act 2018, EU General Data Protection Regulation (GDPR), Irish Data Protection Act 2018 and applicable electronic-communications and privacy rules may apply.
1. Who is responsible for your personal information?
Merenlo is operated by BJ-Ecom B.V., which is the data controller responsible for the personal information described in this Privacy Policy.
BJ-Ecom B.V.
J.L. van Rijweg 50
2713 JA Zoetermeer
Netherlands
Chamber of Commerce (KvK): 89168402
VAT number: NL864899269B01
Email: support@merenlo.co.uk
2. Personal information we collect
Depending on how you interact with Merenlo, we may collect:
- your name;
- email address;
- telephone number where required for an order, delivery or support request;
- billing and delivery addresses;
- order details and purchased products;
- payment status and limited payment information made available by our payment providers;
- returns, refund and cancellation information;
- customer-service communications;
- marketing preferences;
- IP address;
- browser and device information;
- website interaction and usage information;
- referral, campaign and attribution information;
- cookie, pixel and similar technology identifiers where permitted;
- shipment and tracking information.
Payment information
Payments are processed through Shopify Payments and other supported payment providers available through checkout. Merenlo does not store your complete payment-card number on its own systems.
We may receive limited payment-related information required to administer an order, such as payment status, transaction amount, payment-method type and other information made available by the relevant payment provider.
3. Where we obtain personal information
We may receive personal information:
- directly from you when you order, contact us, request a return or subscribe to marketing;
- automatically from your browser or device where permitted;
- from Shopify and Shopify Payments;
- from delivery and fulfilment providers;
- from Track123 in connection with order tracking;
- from Google Analytics and Google advertising/measurement services where enabled and permitted;
- from Wetracked.io for permitted advertising attribution and conversion measurement;
- from Omnisend in connection with email marketing and marketing engagement;
- from other service providers involved in operating the store.
4. How we use personal information
We use personal information where necessary to:
- process and fulfil orders;
- process payments;
- send order and delivery information;
- provide shipment tracking;
- handle cancellations, withdrawals, returns, exchanges and refunds;
- provide customer support;
- prevent fraud, abuse and security incidents;
- operate and maintain the website;
- measure and improve website performance where permitted;
- measure advertising performance where you have provided the required consent;
- send marketing communications where permitted;
- maintain marketing preferences and suppression records;
- comply with tax, accounting, consumer-protection and other legal obligations;
- establish, exercise or defend legal claims.
5. Our legal bases
Where the UK GDPR or EU GDPR applies, we process personal information using one or more of the following lawful bases.
Contract
We process information where necessary to enter into or perform our contract with you, including to process your order, take payment, arrange delivery, provide tracking and administer returns or refunds.
Legal obligation
We process information where required to comply with legal obligations, including tax, accounting, consumer-protection and regulatory requirements.
Legitimate interests
We may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include protecting the store against fraud and misuse, securing our systems, managing business operations, handling disputes and improving our services using information that can lawfully be processed for those purposes.
Consent
We rely on consent where required, including for optional advertising tracking, certain analytics technologies and marketing communications. You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
6. Service providers and technologies
We use service providers to operate Merenlo. The confirmed material providers currently include:
- Shopify — ecommerce platform, hosting, cart, checkout and store operations.
- Shopify Payments — payment processing and related payment-security and fraud-prevention functions.
- Google Tag Manager — management and deployment of website measurement and marketing tags.
- Google Analytics — website analytics and performance measurement where permitted.
- Google Ads / Google tag measurement — advertising, conversion measurement and related advertising functions where permitted.
- Omnisend — email marketing, forms and related marketing communications and engagement information.
- Track123 — shipment tracking, tracking-page functionality and delivery-status information.
- Wetracked.io — advertising attribution and conversion measurement where permitted.
- Pandectes — cookie-consent and preference management.
We may also use shipping and fulfilment providers, professional advisers, hosting and security providers and public authorities where necessary.
Some providers act on our instructions, while others may process certain information under their own legal responsibilities. Their own privacy terms may apply to processing for which they independently determine the purposes and means.
7. Cookies and similar technologies
Merenlo uses cookies, pixels, scripts, tags and similar technologies for website operation, security, consent management, analytics and advertising.
Strictly necessary technologies may be used without consent where the law permits because they are required to provide a service you request, such as cart, checkout, security or consent-preference functionality.
Optional analytics, advertising, attribution and marketing technologies are used only where the required consent or other applicable legal permission is in place.
We use Pandectes to provide cookie choices. You can accept, decline or manage optional categories and can later change your choice through the Cookie preferences control on the website.
See our Cookie Policy for further information.
8. Marketing communications
Where permitted, Merenlo may send marketing emails about products, offers or store updates.
You can unsubscribe at any time using the unsubscribe link in a marketing email or by contacting support@merenlo.co.uk.
Opting out of marketing does not prevent us from sending necessary service communications concerning an order, payment, delivery, cancellation, return, refund, security issue or legal obligation.
Merenlo does not use SMS marketing under the current store setup.
9. Advertising, analytics and profiling
Where you have provided the required consent, information about your website interactions, purchases, campaign source and device or cookie identifiers may be used to:
- measure advertising effectiveness;
- attribute purchases or other events to advertising campaigns;
- understand website usage;
- create or measure advertising audiences;
- improve marketing performance.
This may involve Google Analytics, Google Ads / Google tag measurement and Wetracked.io.
You can withdraw cookie consent through Cookie preferences. You also have the right to object at any time to processing of your personal information for direct marketing, including related profiling.
10. Automated decisions
Automated systems may assist with payment processing, fraud prevention and security checks.
Shopify Payments and other payment providers may independently approve, decline or request additional verification for a transaction under their own systems and terms.
Merenlo does not use its advertising or marketing profiling to make a solely automated decision that determines whether you are allowed to purchase a product.
11. Sharing personal information
We may share personal information with:
- Shopify and payment providers;
- shipping and fulfilment providers;
- order-tracking providers;
- customer communication and email-marketing providers;
- analytics, attribution and advertising providers where permitted;
- consent-management providers;
- professional advisers;
- courts, regulators, law-enforcement authorities or other authorities where legally required.
We do not sell your personal information.
12. International transfers
Merenlo's legal operator is established in the Netherlands, but some service providers may process personal information in other countries, including countries outside the European Economic Area or United Kingdom.
Where EU GDPR transfer restrictions apply, transfers are made using an applicable lawful transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses or another mechanism permitted by the GDPR.
Where UK GDPR restricted-transfer rules apply, transfers are made using an applicable mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another lawful UK transfer mechanism.
Where an applicable data-transfer framework or adequacy arrangement is used, we rely on it only to the extent that the relevant recipient and transfer are covered by that framework.
You may contact us at support@merenlo.co.uk for further information about safeguards applicable to your personal information.
13. How long we retain personal information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, tax, fraud-prevention, dispute-resolution and record-keeping requirements.
Order and transaction records may therefore be retained after an order has been completed where required for legal or business-record purposes.
Marketing information is retained until you unsubscribe, withdraw consent, object or the information is no longer required, subject to limited suppression information that may be retained so we can continue to respect an opt-out.
14. Your data-protection rights
Depending on the law that applies to you, you may have the right to:
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request deletion of personal information in applicable circumstances;
- request restriction of processing;
- receive certain information in a portable format;
- object to processing based on legitimate interests;
- object at any time to direct marketing and related profiling;
- withdraw consent where processing relies on consent;
- exercise applicable rights relating to solely automated decisions with legal or similarly significant effects.
To exercise a right, email support@merenlo.co.uk. We may request information reasonably necessary to verify your identity.
15. Direct-marketing objections
You may object at any time to the use of your personal information for direct marketing, including profiling related to direct marketing.
You can do this by using the unsubscribe link in a marketing email or by contacting support@merenlo.co.uk.
We may keep limited information on a suppression list so that we can continue to respect your marketing preference.
16. Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
No online service or method of transmission can be guaranteed to be completely secure.
17. Children's privacy
Merenlo is not directed at children and we do not knowingly collect personal information from children for the purpose of selling products to them.
If you believe that a child has provided personal information to us inappropriately, contact support@merenlo.co.uk.
18. Complaints
If you have concerns about how Merenlo handles your personal information, please contact support@merenlo.co.uk so that we can review the matter.
If you are in the United Kingdom, you also have the right to raise a data-protection concern with the UK Information Commissioner's Office (ICO).
If you are in the Republic of Ireland, you may raise a concern with the Irish Data Protection Commission (DPC). Under the GDPR, individuals may also have the right to complain to the competent supervisory authority in their EU/EEA country.
19. Changes to this Privacy Policy
We may update this Privacy Policy when our website, processing activities, service providers or legal obligations change.
The latest version will be published on this page with an updated revision date.
20. Contact
For privacy questions or data-protection requests:
Merenlo
Operated by BJ-Ecom B.V.
J.L. van Rijweg 50
2713 JA Zoetermeer
Netherlands
Email: support@merenlo.co.uk