Privacy Notice
We are committed to protecting and respecting your privacy. We aim to be transparent in how we look after your personal data. This notice explains when and why we collect personal information about the people who visit our website, or who request information or enquire about a product from us. This notice explains how we use the data, the conditions under which we may disclose it to others and how we keep it secure.
Our privacy practices are in line with requirements set out in the Personal Information Protection Act 2016 of Bermuda (PIPA).
In order to provide you with the best products and experiences, our services are constantly evolving. We may change this notice from time to time so please check this page to ensure that you are happy with any changes. Any questions regarding this notice and our privacy practices should be sent by email to: info@themerch.space.
By using our website, you are agreeing to be bound by this policy.
Scope of this notice
This notice is an information piece for those who interact with any part of our organisation. The policies explained in this notice apply to all external data subjects.
We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it as soon as possible.
If you have any questions about how we collect, store or use personal data that we hold about you, please contact us at Merch, PO Box HM 865, Hamilton HM DX, Bermuda, or at info@themerch.space.
How do we obtain information from you?
We obtain information about you when you use our website, buy from us, or contact us in any way (email, social media, calls, mail). We primarily collect your data when you buy from us, contact us about products and services, or if you register to receive our email newsletter. Other examples of when we collect data include when you:
- use the Site (including collecting data on your browsing habits);
- register for, or create an account with us;
- search for, purchase and/or return products to us;
- request an e-receipt from us;
- communicate with us by telephone, email or otherwise;
- sign up for our newsletters or to receive other marketing communications from us;
- participate in any discussion board or other social media function on or linked to the Site;
- enter any prize draw, or participate in any promotion organised by us (such as if you refer a friend); or
- complete any survey that we send you, for example if we ask for feedback.
What type of data do we process?
We take a variety of different data sets for a number of reasons. We detail how we use the data later. Here we explain what type of data we collect.
Some of the data you may choose to give us includes:
- personal details such as your name, gender, date of birth, address, email and telephone number;
- information you provide us when accessing our services using your social media account;
- account login and password details;
- financial and payment information;
- details relating to your transaction history with us;
- details of your shopping and product preferences; and
- photographs submitted digitally by you for display on the Site.
Some of the data we may collect from you due to your interaction with our site includes:
- technical Information: such as your time zone setting, the Internet Protocol (IP) address used to connect your computer to the Internet, your computer or mobile device and connection information such as your browser type and version and your operating system and platform;
- information about your visit and traffic pattern: such as the full Uniform Resource Locators (URL) clickstream to, through and from our Site (including date and time), frequency, duration and usage of in-Store services, products you viewed and searched for; page response times, download errors, length of visits to certain pages, page interaction information, basket contents and methods used to browse away from the page; and
- email addresses and phone numbers used to contact our customer service number.
We may also collect information from third parties, or combine your information with information lawfully obtained from third parties such as technical, payment and delivery service providers, advertising networks, social media platforms, analytics service providers and search information providers.
We also collect non-personal information or may anonymise personal information in order to make it non-personal. Non-personal information is information that does not allow a specific individual to be identified.
Cookies
Like many other websites, our uses cookies. A “cookie” is a small data file stored by your web browser on your computer’s hard drive. It allows us to recognise your computer (but not specifically who is using it) upon entering our site by associating the identification numbers in the cookie with other customer information you have provided to us. That customer information is stored on secured databases.
We use cookies to keep track of what you have in your basket and to remember you when you return to our site. It also tells us which website you came to us from. You can disable cookies on your computer by changing the preferences or options menus in your browser. However, it is possible that some parts of our Site will not operate correctly if you disable cookies.
Cookies helps us to improve our website and deliver a better more personalised service.
How do we use your data?
The information we collect enables us to:
- Fulfil your requests and manage your accounts with us.
- Tailor our communication with you and create a profile of your interests and preferences so that we can contact you with information relevant to you.
- Otherwise enhance your interaction and experience with us.
Any of these functions may be carried out by us or appointed third parties who must process any personal information in accordance with this Privacy Notice. Who can access your information is more particularly described within the ‘Who we share information with’ section of this policy.
Who we share information with
To achieve the above stated purposes for which we process your personal data, we may have to share your personal data with certain third parties. We shall make all reasonable efforts to ensure that any third-party we share your personal data with is also compliant with PIPA and other applicable data protection laws.
The kinds of third parties we may share your personal data with include organisations where it is necessary to provide goods or services, set up various resources, or that are acting as our marketing agents.
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us, however certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. In particular, remember that certain providers may be, or have facilities that are, located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
More about our communications with you
We send two types of emails: customer service emails required to maintain the Site and our services, and newsletters or other marketing communications containing information about product, news, special offers and information that might be of interest to you.
In line with Bermuda’s personal information protection laws, we may process your personal data for marketing purposes, which can involve legitimate interest or consent. PIPA allows us to use the information you have provided when placing an order to send marketing communications to provide you with an enhanced customer experience. Where you have opted in to receive marketing communications from us, we will process your personal data to provide you with marketing communications in line with the preferences you have provided.
While customer service emails are useful to help you benefit from our services, you may choose not to receive marketing communications when you set up your account. You may also choose not to receive marketing communications at any time, by clicking the ‘unsubscribe’ link in any marketing communications or by modifying your subscription preferences in your account.
By signing up for our newsletters or to receive other marketing communications from us, you accept that your personal data may be used for such purposes. You consent to receive such marketing communications from us using any contact method which you have provided us with such as by post, email and telephone.
You may also receive marketing communications containing information and special offers from third parties by post only if you have consented to receiving such communications.
Your rights generally
You can change your marketing preferences at any time by updating your account online, following the ‘unsubscribe’ link in our emails, or by emailing info@themerch.space.
In some instances, you may have the right to ask us to stop processing your data. This will be the case where we process your data because we have a legitimate interest in doing so (such as where we contact you to follow up on a complaint you made). This right does not always apply but you are always able to raise an objection to our processing and we will do our best to comply, where we are legally able to.
You have the right, in some instances, to have us destroy all the data we hold on you. This is known as the right to erasure or the right to be forgotten. We maintain and follow a retention policy and your data will not be held for longer than the defined retention period without good reason and without consulting our internal data privacy experts. Nonetheless, should you want us to remove our records of your data prior to the end of our defined retention period, please contact info@themerch.space.
How to access and update your information
The accuracy of your information is important to us. We’re working on ways to make it easier for you to review and correct the information that we hold about you. In the meantime, if you change email address, or any of the other information we hold is inaccurate or out of date, please email us at info@themerch.space.
Keeping your information safe
When you give us personal information, we take steps to ensure that it’s treated securely. Any sensitive information (such as bank, credit or debit card details) will always be entered on a secured page and transferred using SSL, a cryptographic protocol designed to provide communication security over the Internet.
Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.
Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
We will keep your personal data only for as long as required to achieve the purposes for which it was collected, in line with this privacy notice. The following criteria are what determine the period for which we will keep your personal data:
- Until we are no longer required to do so to comply with regulatory requirements or financial obligations.
- Until we are no longer required to do so by any law to which we are subject.
- Until all purposes for which the data was originally gathered have become irrelevant or obsolete.
If you would like to submit an erasure request, please email info@themerch.space.
Children and minors
We know it is important to protect the privacy of children aged 18 or under. If you are aged 18 or under‚ please get your parent’s or guardian’s permission beforehand whenever you provide us with personal information. If we learn that we have collected the personal information of a child under the minimum age without the required parental consent, we will take steps to delete the information as soon as possible.
Parents or guardians who believe that their child has submitted personal information to us and would like to have it deleted may contact us at info@themerch.space.
Cross-border transfers of information
We operate internationally. We may need to transfer your personal information outside these areas to a country which may not have equivalent protections for your data as Bermuda or your country of residence.
If we transfer your data outside of Bermuda, we will take steps to ensure that your rights and freedoms in respect of the processing of your personal data are adequately and appropriately protected and comply with all legal requirements.
If you use our services while you are outside Bermuda, your information may be transferred to other jurisdictions in order for us to provide you with those services.By submitting your personal data to us, you are agreeing to this transfer, storing or processing of your information.
Still have questions or concerns?
If you wish to raise a complaint on how we have handled your personal data, you can contact our Privacy Officer who will investigate the matter. The Privacy Officer’s email address is info@themerch.space.
If you are not satisfied with our response or believe we are processing your personal data, you can complain to the Office of the Privacy Commissioner (https://www.privacy.bm/).
September 2025