Privacy and Cookie Policy

Who We Are

iMerchy is a trading name of Hardvance LTD, a company registered in England and Wales under company number 16616863 (VAT number 505554110), with its registered office at Unit A, 82 James Carter Road, Mildenhall, England, IP28 7DE, United Kingdom, which is also our address for written correspondence. Orders are not posted to or returned to this address; where a return is needed we send a prepaid label. Our products are printed and shipped by production partners inside the United States. We are the data controller for the personal information described in this policy. You can reach us at [email protected].

What We Collect

  • Order details: your name, email address, delivery address, billing address and phone number, and the items you bought.
  • Payment information: handled entirely by Stripe. We receive confirmation that a payment succeeded and the last four digits of the card. We never receive or store your full card number or security code.
  • Account information: if you create an account, your username and password (stored encrypted).
  • Messages: anything you send us through the contact form, by email or by phone.
  • Technical data: IP address, browser type, device type and the pages you visit, collected through cookies and analytics.

How We Use It

  • To take payment, produce your order and deliver it to you.
  • To send order confirmations, dispatch notices and tracking updates.
  • To answer your questions and handle returns or claims.
  • To detect and prevent fraud.
  • To meet our legal and accounting obligations.
  • To send marketing emails, but only if you have opted in, and you can unsubscribe from any of them.
  • To understand how the site is used so we can improve it.

Our legal bases are: performance of our contract with you (orders and delivery), our legitimate interests (fraud prevention, improving the site), your consent (marketing and non-essential cookies) and legal obligation (tax records).

Who We Share It With

We do not sell your personal information. We share it only with the parties who make your order possible:

  • Our US print and fulfilment partners: your name and delivery address, so your order can be produced and shipped.
  • Shipping carriers: your name, address and phone number for delivery.
  • Stripe: to process payment securely.
  • Our hosting, email and analytics providers: who process data on our behalf under contract.
  • Authorities: where we are legally required to disclose information.

International Transfers

We are based in the United Kingdom and our production and shipping partners are based in the United States, so some information is transferred between the UK and the US. Where we transfer personal data outside the UK we rely on appropriate safeguards such as the UK International Data Transfer Addendum or standard contractual clauses.

Cookies

We use cookies to keep your basket working, keep you logged in, remember your preferences and measure how the site is used.

  • Essential cookies: required for the basket, checkout and account areas. The site does not work without them.
  • Analytics cookies: help us understand which pages are useful.
  • Marketing cookies: may be used to measure advertising performance.

You can block or delete cookies in your browser settings. Blocking essential cookies will stop checkout from working.

How Long We Keep It

Order and payment records are kept for 7 years to meet tax and accounting requirements. Account data is kept while your account is open. Marketing consent is kept until you withdraw it. Support messages are kept for 2 years.

Your Rights

Depending on where you live you may have the right to:

  • ask for a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • ask us to delete your data, where we are not legally required to keep it;
  • object to or restrict how we use it;
  • receive your data in a portable format;
  • withdraw consent to marketing at any time.

If you are a California resident, you also have the right to know what personal information we collect, to request its deletion, and to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, email [email protected]. We respond within 30 days.

Security

This site is served over an encrypted HTTPS connection. Payments are handled by PCI-compliant providers. Access to customer data is limited to the people who need it to run the shop.

Children

Our shop is not intended for children under 16 and we do not knowingly collect their personal data. If you believe a child has given us personal information, contact us and we will delete it.

Complaints

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

Changes

We may update this policy. The current version is always published on this page.

Contact Us

If you have any questions about this policy, please get in touch and we will reply within 2 business days.

  • Email: [email protected]
  • Phone: +44 333 054 1072
  • Registered address: Unit A, 82 James Carter Road, Mildenhall, England, IP28 7DE, United Kingdom
  • Support hours: Monday to Friday, 9:00am – 6:00pm (UK time)