Privacy Policy

This Privacy Policy explains how [LEGAL COMPANY NAME], trading as Merhgc, collects and processes personal data when you visit [WEBSITE URL], purchase products from us, contact us, subscribe to our communications, or otherwise interact with us.

1. STRAAT.

In this Privacy Policy, “Merhgc,” “we,” “us,” and “our” refer to the company identified above.

2. Personal data we collect

2.1 Order and contact information

• Name
• Billing and delivery address
• Email address
• Telephone number
• Order number
• Products ordered
• Clothing size, colour, and other product selections
• Delivery instructions
• Order history
• Returns, complaints, and customer-support correspondence

2.2 Payment information

Payments may be processed by third-party payment providers. We may receive limited payment-related information, such as:

• Payment method
• Payment status
• Transaction reference
• Refunded amount
• Limited payment-card details, such as the last four digits

Unless expressly stated otherwise, we do not directly store complete card numbers or card security codes.

2.3 Account information

• Login credentials in encrypted or hashed form
• Saved addresses
• Account preferences
• Purchase history

2.4 Website and device information

• IP address
• Browser and device type
• Operating system
• Language and approximate location
• Pages visited
• Referring website
• Date, time, and duration of visits
• Cookie identifiers
• Shopping-cart activity
• Technical error and security logs

Non-essential analytics or advertising technologies will only be used where permitted by applicable law and, where required, after you have provided consent.

2.5 Marketing information

• Name
• Email address
• Communication preferences
• Consent records
• Information about whether messages were opened or links were selected, where legally permitted

2.6 Information you provide voluntarily

We may process information you provide through contact forms, product reviews, competitions, surveys, social-media messages, and return or complaint forms.

3. Purposes and legal bases

3.1 Processing and delivering orders

We use your identity, contact, order, payment-status, and delivery information to confirm orders, take or verify payment, prepare and deliver products, send order updates, and manage returns or complaints.

Legal basis: Processing is necessary to enter into or perform our contract with you.

3.2 Customer service

We process correspondence and order information to answer questions, resolve problems, and administer requests.

Legal basis: Performance of our contract with you or our legitimate interest in providing customer service and operating our business.

3.3 Compliance with legal obligations

We may retain transaction, accounting, tax, refund, and complaint information to comply with Swedish and EU law.

Legal basis: Compliance with a legal obligation.

3.4 Fraud prevention and website security

We may process transaction, device, log, and account information to prevent fraud, abuse, unauthorised access, and security incidents.

Legal basis: Our legitimate interest in protecting our customers, website, rights, and business.

3.5 Improving our store

We may use aggregated statistics and, where permitted, personal data to understand website performance and improve our products and services.

Legal basis: Our legitimate interest in improving our business. Where non-essential cookies are used, the legal basis is your consent.

3.6 Direct marketing

We may send marketing messages where you have consented or where marketing is otherwise permitted by law.

You may unsubscribe at any time by using the unsubscribe link in a message or contacting us at [EMAIL].

4. Recipients of personal data

We may share personal data with:

• Website-hosting and e-commerce platform providers
• Payment processors and banks
• Warehousing, fulfilment, printing, and packaging providers
• Delivery and logistics companies
• Email and customer-support providers
• Accounting, audit, tax, insurance, and legal advisers
• Fraud-prevention and IT-security providers
• Analytics and advertising providers, where consent has been obtained when required

We do not sell your personal data.

5. International transfers

Where personal data is transferred outside the EEA, we will use an appropriate lawful transfer mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, or another lawful safeguard.

6. Retention periods

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy legal, accounting, tax, security, and dispute-resolution requirements.

7. Your rights

Subject to applicable law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Object to direct marketing
• Withdraw consent
• Request data portability
• Receive information about automated decision-making, where applicable

To exercise your rights, contact [PRIVACY EMAIL].

8. Complaints

You may lodge a complaint with:

9. Cookies

We use cookies and similar technologies for website functionality, shopping-cart features, security, analytics, and advertising where permitted.

You may withdraw or modify cookie consent through [COOKIE SETTINGS LINK OR BUTTON].

10. Security

We use appropriate technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

11. Children

Our store is not specifically directed at children. Customers who are not legally able to enter into a binding purchase agreement must obtain the consent of a parent or legal guardian.

12. Third-party websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

13. Changes to this policy

We may update this Privacy Policy when our processing activities, services, or legal obligations change.

14. Contact