Skip to Content

Privacy notice​

The Great Merch Co Ltd respects your privacy and is committed to protecting your personal data. This privacy notice informs you about how we collect, process, and safeguard your personal data when you visit our website, and provides you with information about your privacy rights and how the law protects you.

Important Information and Who We Are

Purpose of This Privacy Notice

This privacy notice aims to give you information on how The Great Merch Co Ltd collects and processes your personal data through your use of our website, including any data you may provide when you make an enquiry, request a quotation, or contact us.

Our website is not intended for children, and we do not knowingly collect data relating to children.

It is important that you read this privacy notice along with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you. This notice supplements other notices and is not intended to override them.

Controller

The Great Merch Co Ltd ("we", "us", or "our") is the controller and responsible for your personal data.

Contact Details

  • Full name of legal entity: The Great Merch Co Ltd
  • Postal address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
  • Email address: hello@thegreatmerch.com

Data Protection Officer (DPO)

Our DPO is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this notice or any requests to exercise your legal rights, please contact our DPO using the details above.

Changes to Policy

We may amend and update this policy from time to time. Any changes in the future will be posted on this page. The date of the latest update to this privacy policy is set in the footer of this policy.

Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store, and transfer different kinds of personal data, including:

  • Identity Data: First name, last name, username or similar identifier.
  • Contact Data: Email address, telephone number.
  • Interaction History Data: Information about your interactions with the website, including pages viewed and marketing campaigns that brought you to the website.
  • Technical Data: IP address, browser type and version, time zone setting, operating system, and other technology used to access the website.

We do not collect any Special Categories of Personal Data (e.g., race, ethnicity, health, or criminal conviction details).

How is Your Personal Data Collected?

  • Direct interactions: You may provide Identity and Contact Data by filling in forms on our website or by contacting us.
  • Automated technologies or interactions: We may automatically collect Technical Data about your equipment, browsing actions, and patterns through cookies and other technologies.

Cookies

We use cookies to help provide a better user experience, including remembering preferences, collecting analytics data, and enhancing site functionality. The cookie pop-up is at the bottom of the page, allowing you to manage your preferences. More details on cookies are provided below.

how We Use Your Personal Data

We will only use your personal data when permitted by law, most commonly in the following circumstances:

  • Legitimate Interests: To manage our website and respond to your enquiries or quotation requests.
  • Contractual Obligations: Where necessary to fulfill a contract with you or respond to your requests.

Purposes for Which We Will Use Your Personal Data

  • To respond to enquiries and provide you with requested quotations.
  • To administer and protect our business and this website, including troubleshooting, data analysis, system maintenance, and hosting.
  • To use data analytics to improve our website, products, and customer experiences.

Disclosures of Your Personal Data

We may have to share your personal data with the following parties:

  • Service Providers: External providers who help support our website and business operations (e.g., IT support).
  • Third Parties for Advertising: Google, for targeted advertising and marketing activities.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

International Transfers

We do not transfer your personal data outside of the UK or EEA.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. This includes:

  • Access Control: Personal data is accessible only to those employees, contractors, and agents who have a business need to know and are subject to confidentiality obligations.
  • Encryption: Where appropriate, we use encryption to protect your data.
  • Data Breach Procedures: We have procedures in place to deal with any suspected data breaches and will notify you and any applicable regulators if legally required.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including satisfying legal, accounting, or reporting requirements. Personal data collected through enquiries or orders will be retained for three years.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

  • Request access to your personal data.
  • Request correction of incomplete or inaccurate data.
  • Request erasure of your personal data where it is no longer needed.
  • Object to processing where we are relying on legitimate interests.
  • Request restriction of processing under certain conditions.
  • Data portability: Request that we transfer your personal data to another data controller.
  • Withdraw consent where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact us at hello@thegreatmerch.com.

Cookies

Cookies are small files stored on your browser or device. We use the following types of cookies:

Session & Security (Essential): Authenticate users, protect user data, and maintain service delivery. These cookies are essential for the website to function properly (e.g., session_id).

Preferences (Essential): Remember user preferences for site behavior, such as language (frontend_lang).

Interaction History (Optional): Track how users interact with our website, including marketing campaigns (e.g., utm_campaign, im_livechat_previous_operator).

Advertising & Marketing (Optional): Used by Google to provide targeted advertising (e.g., __gads, __gac).

Analytics (Optional): Understand website engagement using Google Analytics (e.g., _ga, _gid).

Most cookies have a maximum lifespan of 2 months. You can set your browser to refuse cookies, but this may affect the functionality of our website.

Glossary

  • Legitimate Interest: The interest of our business in conducting and managing operations to provide you with the best experience and secure services.
  • Performance of Contract: Processing your data where necessary for the fulfillment of a contract to which you are a party.


Version: The Great Merch Co Privacy and Cookie Notice_v1.0
Date of Issue: November 2024