Privacy policy
Last updated: 21 May 2026
Merithra Ltd ("Merithra", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have under data protection law, including the UK GDPR and the Data Protection Act 2018.
By using www.merithra.com (the "Site") or providing us with your information, you agree to the practices described here.
1. Who we are (the data controller)
Merithra Ltd is the controller responsible for your personal data. We are a company registered in England and Wales under company number 16702912, with our address at 12 Charlton Place, Manchester, M12 6HS, United Kingdom.
If you have any questions about this policy or your data, contact us at support@merithra.com.
2. What information we collect
Depending on how you interact with us, we may collect:
- Information you give us — your name, email address, postal/delivery address, phone number, and order details when you make a purchase, create an account, or sign up to our email list.
- Payment information — card or payment details are processed securely by our payment providers. We do not store full card numbers ourselves.
- Information collected automatically — when you visit the Site, we may collect technical data such as your IP address, device and browser type, pages viewed, and how you arrived at and use the Site, through cookies and similar technologies (see section 8).
- Marketing engagement — if you subscribe to our emails, we collect data on how you engage (for example whether you open or click), to help us send you relevant content.
We collect the minimum information needed for the purposes set out below.
3. How and why we use your information (lawful bases)
Under the UK GDPR we must have a lawful basis for using your personal data. We rely on the following:
| What we do | Why | Lawful basis |
|---|---|---|
| Process and deliver your orders | To fulfil our contract with you | Performance of a contract |
| Send order, shipping and account emails | To keep you informed about your purchase | Performance of a contract |
| Send marketing emails | To tell you about products and content | Your consent (you can withdraw it at any time) |
| Improve our Site and products | To run our business effectively | Our legitimate interests |
| Prevent fraud and keep the Site secure | To protect you and us | Our legitimate interests / legal obligation |
| Keep financial and tax records | To comply with the law | Legal obligation |
You gave consent for marketing when you signed up (for example through our website pop-up). You can withdraw that consent at any time — see section 6.
4. Who we share your information with
We do not sell your personal data. We share it only with trusted parties who help us run our business, and only as far as necessary. These include:
- Shopify — our e-commerce and hosting platform.
- Klaviyo — our email marketing platform, which stores subscriber data and sends our emails.
- Payment providers — to process payments securely.
- Delivery and fulfilment partners — who receive your name, address and contact details to deliver your order.
- Service providers — such as analytics or review tools that help us operate and improve the Site.
These providers are required to keep your data secure and use it only for the purposes we specify. We may also disclose information where required by law, or to protect our rights, property or safety.
5. International transfers
We ship worldwide and some of our service providers are based outside the UK. Where we transfer your personal data outside the UK, we take steps to ensure it is protected to a standard equivalent to UK law — for example by relying on adequacy decisions or appropriate safeguards such as standard contractual clauses.
6. Your rights
Under the UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data ("right to be forgotten") in certain circumstances.
- Restrict or object to how we process your data, including for direct marketing.
- Data portability — receive your data in a portable format.
- Withdraw consent at any time, where we rely on consent (such as marketing).
You can unsubscribe from marketing emails at any time using the link at the bottom of every email, or by emailing us. To exercise any of your other rights, contact support@merithra.com. We will respond within one month.
If you are not happy with how we handle your data, you have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the chance to address your concerns first.
7. How long we keep your data
We keep your personal data only for as long as necessary for the purposes we collected it for, including to satisfy legal, accounting or reporting requirements. Order and transaction records are typically kept for at least six years to meet tax and accounting obligations. Marketing data is kept until you unsubscribe or ask us to delete it.
8. Cookies
The Site uses cookies and similar technologies to make it work, remember your preferences, understand how the Site is used, and support marketing. You can control cookies through your browser settings and, where shown, through the cookie banner on our Site. Disabling some cookies may affect how the Site functions.
9. Data security
We use appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access and disclosure. While we work hard to protect your information, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Children
The Site and our products are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with their data, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be posted on this page with the "Last updated" date above. Significant changes will be communicated where appropriate.
12. Contact
For any questions about this Privacy Policy or to exercise your rights, email us at support@merithra.com.
Merithra Ltd · Company No. 16702912 · 12 Charlton Place, Manchester, M12 6HS, United Kingdom