Privacybeleid
Mersa is committed to protecting your personal data. This Privacy Policy explains what we collect, why we collect it, and how we keep it safe — written in plain language, as it should be.
Last updated: 27 April 2026
Who We Are
Mersa (the "we", "us", "our") is the data controller responsible for your personal information.
- Registered in: Le Mairekade 77, 1013 CB Amsterdam, The Netherlands
- KvK: 87296632
- BTW (VAT): NL004391060B79
- Contact: hello@mersastudio.com
What We Collect
Depending on how you interact with us, we may collect:
- Identity & Contact — name, email address, shipping and billing address, telephone number.
- Order Data — items purchased, order history, sizes, returns and exchanges.
- Payment Data — processed by our payment providers; we never see or store full card details.
- Account Data — login credentials, saved addresses, wishlists.
- Technical Data — IP address, browser type, device, time zone, pages viewed.
- Marketing Data — your preferences for receiving communications from us.
Why We Collect It
We use your data only where we have a lawful basis under the GDPR:
| Purpose | Lawful Basis |
|---|---|
| Fulfilling your order | Contract |
| Customer service and returns | Contract |
| Fraud prevention and account security | Legitimate interest |
| Improving our website and collections | Legitimate interest |
| Marketing communications | Consent (which you may withdraw at any time) |
| Tax, accounting, and legal obligations | Legal obligation |
Who We Share It With
Your data is shared only with carefully selected partners who help us run our business:
- E-commerce platform — Shopify, which hosts our online store and processes orders
- Payment processors — Shop Pay (Shopify Payments), PayPal, and Google Pay
- Shipping and logistics partners — for the fulfilment and delivery of your order
- Email and marketing platforms — for transactional and (where consented) promotional communications
- Analytics providers — to understand how our site is used and improve it
Each partner is bound by contract to handle your data with the same care we do, and acts only on our instructions.
International Transfers
Some of our service providers — including Shopify (Canada and the United States), Google Pay (United States), and our fulfilment partner — are located outside the European Economic Area. Whenever we transfer your data internationally, we rely on Standard Contractual Clauses approved by the European Commission and additional safeguards to ensure your information remains protected to GDPR standards.
How Long We Keep It
We retain personal data only for as long as necessary:
- Order records — 7 years (Dutch tax law)
- Account data — for the lifetime of your account, plus 1 year
- Marketing data — until you unsubscribe
- Website analytics — up to 24 months
Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, write to hello@mersastudio.com. We will respond within 30 days.
Cookies
Our site uses cookies to remember your preferences, analyse performance, and personalise your experience. You may adjust your preferences at any time through the cookie banner or your browser settings.
Security
We use encryption, access controls, and secure infrastructure to protect your data. While no system is entirely impenetrable, we take every reasonable measure to keep your information safe.
Updates
We may update this policy from time to time. The most current version will always be published on this page, with the date of the last revision shown above.
Questions
For any question about how we handle your data, please write to hello@mersastudio.com.
Mersa · KvK 87296632 · BTW NL004391060B79