Privacy Policy

Last updated: March 25, 2026
1. Introduction
At DeMercy ("we"), we are committed to protecting your privacy. This policy outlines how we collect, use, store, and safeguard your personal information when you visit our website, place an order, or interact with us in any way.
We value your privacy and treat your data with care, transparency, and in full compliance with applicable data protection laws including RGPD, UK GDPR and CCPA. This Privacy Policy explains how DeMercy collects and processes your personal data.

Contact: julie@demercy.fr


2. Data We Collect
We only collect necessary data:
  • personal data: name, email, address, phone
  • transaction data: orders, payments
  • browsing data: IP, cookies, device data

This data is collected when you:

  • place an order
  • create an account
  • subscribe to marketing
  • browse our site

3. How We Use Your Data
We process your data to:
  • fulfill your orders (contractual performance)
  • manage customer relationships (legitimate interest)
  • send marketing communications (consent)
  • improve our website (legitimate interest)
  • ensure security (legal obligation / legitimate interest)

4. Data Sharing
We do not sell your personal data in the traditional commercial sense.
However, certain activities (especially advertising) may qualify as "sharing" under the CCPA.
We share your data with:
  • Shopify (hosting and e-commerce)
  • payment providers (e.g., Stripe, Shopify Payments)
  • logistics partners
  • marketing tools (e.g., Klaviyo, Meta, Google)
These providers are contractually obliged to protect your data.

5. International Transfers
Your data may be transferred outside the European Union (especially to the United States).
In such cases, we implement appropriate safeguards (standard contractual clauses of the European Commission).

6. Cookies and Advertising
We use cookies for:
  • website functionality
  • performance analysis
  • personalized advertising
Some advertising cookies may involve sharing data with partners.
You can:
  • manage cookies via our consent banner
  • change your preferences or withdraw consent anytime
We also honor Global Privacy Control (GPC) signals when required.

7. Retention Period
We retain your data for limited periods:
  • Orders: 10 years (legal obligation)
  • Customer accounts: account duration + 3 years
  • Prospects: 3 years
  • Cookies: up to 13 months

8. Your Rights
In accordance with the GDPR, you have the following rights:
  • access, correct, delete
  • restrict or object
  • data portability
For any questions, please contact: julie@demercy.fr

9. US Privacy Rights
Depending on your State (e.g., California), you can:
  • refuse the "sale" or "sharing" of your data
  • refuse targeted advertising
You can exercise these rights by emailing: julie@demercy.fr

10. Security
We implement appropriate technical and organizational measures and safeguards to protect your data.

11. Modifications
This policy may be updated from time to time. We encourage you to review it periodically. The date of the latest update is shown at the beginning of the policy and the applicable version is the one published on the site.