Privacy Policy

Last updated: 20 July 2026

This Privacy Policy explains how Merrion & May collects, uses, stores and shares your personal information when you visit, interact with or make a purchase through merrionmay.com.

It also explains your rights under the General Data Protection Regulation, the Irish Data Protection Act 2018 and other applicable data protection laws.

1. Who Is Responsible for Your Information?

For the purposes of applicable data protection law, the data controller responsible for your personal information is:

Trading name: Merrion & May
Legal business name: [LEGAL BUSINESS NAME]
Registered business address: [REGISTERED BUSINESS ADDRESS]
Country of establishment: [COUNTRY OF ESTABLISHMENT]
Website: merrionmay.com
Email: info@merrionmay.com

2. Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of personal information:

Contact and Account Information

• Your full name

• Email address

• Telephone number

• Account login details, where applicable

Order and Delivery Information

• Billing address

• Delivery address

• Products ordered

• Product preferences, sizes and variants

• Order number

• Order status

• Delivery and tracking information

• Returns, refunds and customer service history

Payment Information

Payments are processed through secure third-party payment providers.

We may receive limited payment-related information, such as:

• Payment confirmation

• Payment method

• Transaction reference

• Billing status

• Limited card details, such as the card type or final digits

Merrion & May does not normally receive or store your complete payment card number.

Website and Technical Information

When you use our website, we or our service providers may automatically collect information including:

• IP address

• Browser type

• Device type

• Operating system

• Approximate location

• Referral source

• Pages viewed

• Products viewed

• Products added to your basket

• Checkout activity

• Cookie identifiers

• Dates and times of visits

• Website interaction and performance information

Communications

When you contact us, we may collect:

• The contents of your message

• Photographs or videos you provide

• Product complaint information

• Details necessary to answer your question or resolve an issue

3. How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, contact us or subscribe to marketing

• Automatically through cookies and similar technologies

• From Shopify and applications connected to our Shopify store

• From payment providers

• From delivery carriers and fulfilment partners

• From customer support, analytics and advertising providers

• From fraud prevention and security providers

• From publicly available sources where legally permitted

4. How We Use Your Personal Information

We may use your personal information to:

• Process and fulfil orders

• Take and confirm payments

• Send order confirmations and delivery updates

• Arrange shipping and tracking

• Provide customer service

• Manage returns, refunds, cancellations and complaints

• Prevent fraudulent transactions and misuse

• Protect the security of our website and business

• Maintain business, accounting and tax records

• Improve our website, products and customer experience

• Analyse website traffic and performance

• Remember your preferences

• Personalise content or advertising where permitted

• Send marketing communications where you have consented or where otherwise permitted by law

• Comply with legal, regulatory, accounting and tax obligations

• Establish, exercise or defend legal claims

5. Our Legal Bases for Processing

We process personal information only where we have a valid legal basis.

Depending on the purpose, we may rely on:

Performance of a Contract

Processing may be necessary to:

• Accept and process your order

• Take payment

• Deliver products

• Communicate about your order

• Process a return, refund or cancellation

• Provide requested customer support

Without certain information, such as your name, delivery address and payment confirmation, we may be unable to fulfil your order.

Legal Obligations

We may process and retain information where necessary to comply with:

• Tax and accounting requirements

• Consumer protection obligations

• Regulatory requests

• Court orders

• Fraud prevention and other legal obligations

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights.

These interests may include:

• Operating and improving our store

• Responding to customer enquiries

• Preventing fraud and security incidents

• Protecting our legal rights

• Understanding store performance

• Maintaining accurate business records

• Improving our products and services

Consent

We may rely on your consent for activities such as:

• Sending certain marketing emails

• Placing non-essential cookies

• Using certain analytics or advertising technologies

• Personalising advertising where consent is legally required

You may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

6. Shopify

Our store is hosted by Shopify.

Shopify provides the ecommerce platform that allows us to offer and sell our products and services. Personal information may be processed through Shopify’s systems, databases, infrastructure and applications.

Shopify may process information as our service provider and may also process certain information for its own stated purposes, as described in Shopify’s privacy documentation.

7. Payments

Payments are securely processed by the payment providers made available during checkout.

Depending on the payment method selected, this may include:

• Credit or debit card providers

• Apple Pay

• Google Pay

• Shop Pay

• Other secure payment services displayed during checkout

Payment providers process information in accordance with their own terms and privacy policies.

8. How We Share Personal Information

We may share personal information with trusted third parties where reasonably necessary to operate our store, fulfil orders or comply with legal obligations.

These third parties may include:

• Shopify

• Payment processors

• Banks and payment networks

• Suppliers

• Fulfilment partners

• Delivery carriers

• Customs and logistics providers

• Customer service providers

• Email and communication platforms

• Analytics providers

• Advertising and social media platforms

• Fraud prevention and security providers

• Professional advisers, including accountants, lawyers and insurers

• Government bodies, regulators, courts or law enforcement authorities where legally required

We do not sell your personal information in the ordinary meaning of selling information in exchange for money.

Some advertising or analytics activities may nevertheless be treated as sharing, targeted advertising or a similar concept under certain privacy laws.

9. Direct Supplier Fulfilment

Some orders may be shipped directly by our suppliers or fulfilment partners.

To fulfil an order, we may need to provide them with information including:

• Your name

• Delivery address

• Telephone number

• Email address, where required for delivery

• Products ordered

• Order and delivery instructions

Some suppliers or fulfilment partners may be located outside Ireland or outside the European Economic Area, including in China.

We only provide information that is reasonably necessary to process and deliver your order.

10. International Data Transfers

Some of our service providers, suppliers or fulfilment partners may process personal information outside Ireland or outside the European Economic Area.

These countries may have data protection laws that differ from those in Ireland.

Where required by law, international transfers will be based on an appropriate transfer mechanism, which may include:

• A European Commission adequacy decision

• European Commission Standard Contractual Clauses

• Binding corporate rules

• Another legally recognised transfer mechanism

• A legally permitted exception for a particular transfer

Where appropriate, additional contractual, organisational or technical safeguards may also be used.

You may contact us for further information about the safeguards relevant to your personal information.

11. Marketing Communications

Where you have subscribed to our mailing list, we may send you information about:

• New arrivals

• Product launches

• Special offers

• Promotions and sale events

• Store news

You can unsubscribe at any time by:

• Selecting the unsubscribe link in a marketing email; or

• Contacting us at info@merrionmay.com

Unsubscribing from marketing does not prevent us from sending necessary service messages about an existing order, return, payment or customer service request.

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

These technologies may be used to:

• Operate essential website and checkout functions

• Keep the website secure

• Remember your basket and preferences

• Measure website performance

• Understand how visitors use the website

• Support analytics

• Personalise content or advertising

• Measure advertising performance

Essential cookies may be used where necessary for the website to function.

Where legally required, non-essential cookies will only be used after you have provided consent through our cookie preference tool.

You can review or change your cookie preferences through the cookie settings available on our website. You may also manage cookies through your browser settings, although disabling essential cookies may affect website functionality.

13. Advertising and Analytics

We may use analytics and advertising services to understand website performance and measure or improve our marketing.

Depending on the services enabled and your cookie choices, these providers may collect information about:

• Your device

• Your browser

• Your website interactions

• Products viewed

• Purchases or checkout activity

• Advertising interactions

• Cookie or advertising identifiers

Where required, these technologies will only be activated after you have provided consent.

14. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access

• Accidental loss

• Improper use

• Alteration

• Disclosure

• Destruction

We also use established ecommerce, payment and service platforms to process information securely.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

The applicable retention period may depend on:

• The duration of our relationship with you

• Whether you maintain a customer account

• Order, return and customer service requirements

• Tax, accounting and legal record-keeping obligations

• Fraud prevention and security requirements

• Applicable limitation periods

• The need to establish, exercise or defend legal claims

• Whether you have withdrawn consent

When information is no longer required, we will delete, anonymise or otherwise securely dispose of it, unless continued retention is required by law.

16. Your Data Protection Rights

Subject to the conditions and exceptions provided by applicable law, you may have the right to:

• Be informed about how your information is used

• Request access to your personal information

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information

• Request restriction of processing

• Object to certain processing

• Object at any time to direct marketing

• Request the transfer of certain information in a portable format

• Withdraw consent at any time

• Request information about international transfer safeguards

• Lodge a complaint with a data protection authority

• Challenge certain decisions based solely on automated processing, where applicable

These rights are not absolute and may not apply in every situation.

To exercise a privacy right, contact:

info@merrionmay.com

Please clearly explain your request. We may need to request additional information to verify your identity before acting on it.

We will respond within the timeframe required by applicable data protection law.

17. Automated Decision-Making

We do not intend to make decisions that produce legal or similarly significant effects based solely on automated processing unless:

• It is necessary to enter into or perform a contract

• It is authorised by law; or

• You have provided explicit consent

Fraud prevention systems may automatically flag transactions for further review. A flagged transaction may be reviewed or additional verification may be requested.

18. Children’s Privacy

Our website is not specifically directed at children.

We do not knowingly collect personal information from children in circumstances where parental or guardian authorisation is legally required.

If you believe that a child has provided personal information to us without appropriate authorisation, contact us at info@merrionmay.com.

19. Third-Party Links

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the privacy policy of any third-party service before providing personal information.

20. Business Transfers

If Merrion & May or the business operating it is sold, merged, reorganised or transferred, personal information may be disclosed or transferred as part of that transaction.

Any recipient will be required to process the information in accordance with applicable data protection law.

21. Complaints

Please contact us first if you have a concern about how we process your personal information:

Email: info@merrionmay.com

We will review your concern and attempt to resolve it.

You also have the right to lodge a complaint with the supervisory authority responsible for data protection in your country.

For customers in Ireland, the relevant authority is:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes to our services

• Changes to the technologies we use

• Legal or regulatory developments

• Changes to our service providers

• Operational or business changes

The revised version will be posted on this page with an updated revision date.

Where required, we will provide additional notice of material changes.

23. Contact Us

For privacy questions, requests or complaints, contact:

Merrion & May
Email: info@merrionmay.com
Website: merrionmay.com