MerchLab Privacy Policy

What Information We Collect

We collect personal information directly from you when you register through our online portal, place orders, or interact with our services. We'll let you know what information is required and what is optional.

We may also collect website usage information using cookies and similar technologies. This information may include:

All personal information you provide must be true, complete, and accurate. Please notify us of any changes.

How We Use Your Information

We will use your personal information only for the purposes for which it was collected and agreed with you. In addition, where necessary your information may be retained for legal or research purposes.

We use the information we collect or receive:

• To facilitate account creation and login.
• To send you marketing and promotional communications (you can opt-out at any time).
• To send you administrative information about our services and policies.
• To fulfil and manage your orders, payments, returns, and exchanges.
• To request feedback and contact you about your use of our services.
• To protect our services and prevent fraud.
• To enforce our terms, conditions and policies for business purposes, legal reasons and contractual obligations.
• To respond to legal requests and prevent harm.
• To manage user accounts.
• To deliver services to you and respond to your inquiries/offer support to users.
• For other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Services, products, marketing, and your experience. We may use and store this information in aggregated and anonymized form so that it is not associated with individual end users and does not include personal information. We will not use identifiable personal information without your consent.

Disclosure of Information

We may disclose your personal information to our service providers who help us deliver products or services to you. We have agreements in place to ensure they comply with POPIA and GDPR requirements.

We may process your data based on:

• Consent: Where you have given us specific consent for a specific purpose.
• Legitimate Interests: Where it is reasonably necessary for our legitimate business interests.
• Performance of a Contract: Where we have a contract with you, we may process your personal information to fulfil the terms of our contract.
• Legal Obligations: We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
• Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or act regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may share your data in the following situations:

• With vendors, consultants, and other third-party service providers who perform services for us or on our behalf. Examples include payment processing, data analysis, email delivery, hosting services, customer service and marketing efforts. Unless described in this Policy, we do not share, sell, rent, or trade any of your information with third parties for their promotional purposes.
• In connection with a business transfer (merger, sale of assets, financing, or acquisition of all or a portion of our business).
• With third-party advertising companies (subject to your consent where required).
• When legally required to comply with applicable law or legal process.

Information Security

We are legally obliged to provide adequate protection for the personal information we hold and to prevent unauthorized access and use. We continuously review our security controls and related processes to ensure your personal information remains secure.

Retention of Information

We will only keep your personal information for as long as necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by law.

Data Security

We have implemented technical and organizational security measures to protect your personal information. However, we cannot guarantee that the internet is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the services within a secure environment.

Information Related to Minors

Our services are not intended for minors. We do not knowingly collect personal information from children.

Your Rights: Access to Information

You have the right to request a copy of the personal information we hold about you. Contact us and specify what information you require.

If you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

• European Economic Area residents: EEA data protection authorities
• South Africa: Information Regulator POPIA complaints

You also have the right to:

• Correct your information.
• Opt-out of email marketing.

How to Contact Us

If you have any queries about this policy or need further information about our privacy practices; wish to withdraw consent; exercise preferences or access or correct your personal information, please contact us on: hello@merchlab.io

You can also reach us via our contact page.