Privacy Policy | Merchify Studio

This policy explains how we collect, use, and protect your personal data when you use our website, place an order, or contact us.

Last updated: 6th Febuary 2026

This Privacy Policy explains how Merchify Studio Limited (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our website, place an order, or contact us.

We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Company name: Merchify Studio Limited

Registered address: 46 Kings Mill Lane, Settle, BD24 9FD

Email: info@merchifystudio.com

Website: www.merchifystudio.com

We sell merchandise and promotional items to businesses and individuals, including custom-made products. We operate online and ship within the UK, the EU, and internationally.

Merchify Studio Limited is the data controller for the purposes of applicable data protection legislation.

2. What Personal Data We Collect

a) Information You Provide to Us

Name
Company name (if applicable)
Billing and delivery address
Email address
Phone number
Order details and customisation requirements
Artwork or files supplied for custom orders
Information provided via email enquiries or contact forms

b) Payment Information

Payments are processed via secure third-party payment providers. We do not store full card details.

c) Website Usage Data

IP address
Browser type and device information
Pages visited and time spent on the site
Cookies and similar technologies (see Section 10)

3. How We Use Your Data

We use personal data for the following purposes:

To process and fulfil orders
To manage custom orders placed via email
To communicate with you about enquiries, orders, or changes
To arrange shipping and delivery (UK, EU, and international)
To comply with legal and accounting obligations
To improve our website, services, and customer experience
To prevent fraud and ensure website security

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

4. Lawful Basis for Processing

Under UK GDPR, we process personal data on the following lawful bases:

Contractual necessity – to fulfil orders and provide services
Legal obligation – tax, accounting, and regulatory compliance
Legitimate interests – customer service, business administration, and website improvement
Consent – where required, such as marketing communications

Where we send marketing communications, you may opt out at any time by using the unsubscribe link in our emails or by contacting us directly.

Where we need to collect personal data by law or under a contract (for example to process an order), and you do not provide that data when requested, we may not be able to perform the contract or provide our services.

5. Who We Share Your Data With

We may share your data only where necessary with:

Payment processors
Delivery and courier companies
Manufacturers or suppliers involved in fulfilling custom orders
Website hosting and IT service providers
Professional advisers (accountants, legal advisers)
Regulatory or law enforcement authorities where legally required

All third parties are required to handle your data securely and lawfully.

6. International Data Transfers

As we ship internationally and may work with overseas suppliers, your personal data may be transferred outside the UK or EEA.

Where this occurs, we ensure appropriate safeguards are in place, such as:

Adequacy decisions
Standard contractual clauses
Reputable third-party providers compliant with data protection laws

7. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this Policy, including for legal, accounting, or reporting requirements. In general:

Order and invoice data: 6 years (legal and tax requirements)
Customer correspondence: as long as reasonably necessary
Marketing data: until you withdraw consent or opt out

8. Your Data Protection Rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Request erasure of your data (in certain circumstances)
Request restriction of processing (in certain circumstances)
Object to processing where we rely on legitimate interests
Request data portability (in certain circumstances)
Withdraw consent at any time (where we rely on consent)
Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO contact: www.ico.org.uk

ICO registration number: ZC074254

To exercise your rights, contact us at: info@merchifystudio.com

9. Data Security

We implement appropriate technical and organisational measures to protect personal data, including secure systems, access controls, and encrypted services where appropriate.

10. Cookies

Where required by law, we will obtain your consent before placing non-essential cookies on your device. Our website uses cookies to improve functionality and user experience. You can manage cookie preferences through your browser settings.

A separate Cookie Policy may apply. For more information, please refer to our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy policies.