Privacy policy

Privacy Policy

Effective Date: October 19, 2026

This Privacy Policy explains how MerryTree collects, uses, discloses, and protects personal information when you visit merrytree.uk, place an order, contact customer support, or otherwise interact with our store.

MerryTree is operated by GUSTAVO BAZ LLC.

1. Business Information

  • Brand Name: MerryTree

  • Legal Entity: GUSTAVO BAZ LLC

  • Registered Address: 2750 NE 185th Street, Suite 306 Aventura, FL 33180, USA

  • EIN: 88-2525367

  • Email: support@merrytree.uk

  • Phone: +1 332 234 5077

  • Website: https://merrytree.uk

For privacy-related questions or requests, contact support@merrytree.uk.

2. Personal Information We Collect

Depending on how you interact with our store, we may collect the following categories of information.

Information You Provide

  • Name and contact details.

  • Billing and shipping addresses.

  • Email address and telephone number.

  • Order details, purchased products, transaction amounts, and order history.

  • Information you provide when requesting a refund, reporting a damaged item, or contacting support.

  • Preferences and communications relating to marketing, where applicable.

Payment Information

Payments are processed through the payment methods and payment service providers made available at checkout. We may receive transaction confirmations, payment status, billing information, and limited payment identifiers.

Full payment card details are generally handled by the relevant payment processor rather than stored directly by MerryTree, subject to the payment provider's systems and processing arrangements.

Automatically Collected Information

When you visit our website, we and our service providers may collect:

  • IP address and approximate location derived from it.

  • Browser type, device type, operating system, and language.

  • Pages viewed, referring websites, clicks, and interactions.

  • Session information and website usage patterns.

  • Cookie identifiers, advertising identifiers, and analytics events.

  • Technical information relating to security, fraud prevention, and website performance.

Information From Service Providers

We may receive information from payment processors, shipping and logistics providers, e-commerce service providers, analytics services, advertising platforms, and customer relationship management or email marketing providers, to the extent necessary for their services.

3. How We Use Personal Information

We use personal information for the following purposes:

  • Processing and fulfilling orders.

  • Arranging shipment and providing tracking information.

  • Processing payments, refunds, and transaction-related inquiries.

  • Providing customer service and responding to complaints.

  • Managing our business records and accounting obligations.

  • Detecting, investigating, and preventing fraud, unauthorized transactions, and security incidents.

  • Operating, maintaining, and improving our website.

  • Measuring website traffic, conversions, and marketing performance.

  • Delivering advertising and measuring advertising effectiveness, where permitted.

  • Sending marketing communications where we have the necessary consent or another lawful basis.

  • Complying with legal obligations and enforcing our contractual rights.

We do not use personal information for purposes materially incompatible with the purposes described here without providing any notice or obtaining any consent required by law.

4. Legal Bases for Processing in the European Union and United Kingdom

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process personal data on one or more of the following legal bases:

Contractual necessity. To process your order, arrange delivery, handle payment, provide support, and administer refund requests.

Legal obligation. To comply with applicable tax, accounting, consumer protection, and other legal requirements.

Legitimate interests. To secure our website, prevent fraud, maintain business records, improve our services, and defend legal claims, where those interests are not overridden by your rights and freedoms.

Consent. To use non-essential cookies, certain analytics technologies, advertising pixels, or send marketing communications where consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Shopify and Other Service Providers

Our store operates on Shopify. Shopify and other service providers may process personal information to provide hosting, checkout, payment processing, order management, security, analytics, communications, and related services.

We may also disclose relevant information to:

  • Payment processors and financial institutions.

  • Shipping carriers, fulfillment providers, and our third-party supplier in China.

  • Website analytics and advertising providers.

  • Email marketing and customer support providers.

  • Professional advisers, auditors, and insurers.

  • Government authorities, courts, or regulators where required or legally permitted.

We share only information reasonably necessary for the relevant purpose, subject to applicable law and the arrangements governing each service provider.

6. International Data Transfers

GUSTAVO BAZ LLC is established in the United States. Our service providers, payment processors, shipping partners, and supplier may operate in other countries, including China.

Consequently, personal information may be transferred to, accessed from, or stored in countries other than the country where you live.

Where the GDPR or UK GDPR applies, we will use an applicable lawful transfer mechanism where required, which may include an adequacy decision, appropriate contractual safeguards such as approved standard contractual clauses, or another legally recognized transfer mechanism.

You may contact us for further information about applicable safeguards, subject to legal limitations.

7. Cookies and Tracking Technologies

Our website may use cookies, pixels, tags, scripts, and similar technologies to operate the store, remember preferences, understand website usage, measure advertising, and support marketing.

Shopify and Essential Cookies

Shopify and related technologies may use cookies necessary for shopping cart functionality, checkout, security, session management, and other essential store functions.

These technologies are generally necessary to provide services you request. Blocking them may affect website functionality.

Google Analytics 4

Google Analytics 4 may be used to understand how visitors interact with our website, including page views, traffic sources, engagement, and conversion events.

Depending on configuration and your consent choices, information may include device and browser data, online identifiers, approximate location, and website interactions.

Meta Pixel

Meta Pixel may be used to measure advertising performance, understand actions taken on our website after an advertisement is viewed or clicked, and support advertising measurement and audience-related features.

Depending on configuration and consent, it may transmit browsing events and online identifiers to Meta.

TikTok Pixel

TikTok Pixel may be used to measure advertising performance, understand website interactions following TikTok advertising, and support campaign measurement and audience-related advertising features.

Depending on configuration and consent, it may transmit browsing events and online identifiers to TikTok.

Klaviyo

Klaviyo may be used to manage email marketing, customer communications, and marketing performance. Depending on configuration and consent, its technologies may measure email engagement, website activity, and interactions with marketing messages.

Your Cookie Choices

Where required by law, non-essential analytics and advertising cookies will be activated only after you provide the necessary consent. You can reject non-essential cookies through the cookie consent controls presented on our website, where available.

You may also:

  • Change your cookie preferences through our website's cookie settings, where available.

  • Configure your browser to block or delete cookies.

  • Use available advertising preference tools provided by Meta, Google, or TikTok.

  • Unsubscribe from marketing emails using the unsubscribe link included in those emails.

Browser-level blocking does not necessarily disable every tracking technology, and deleting cookies may not erase information already processed by a service provider.

For users in the European Union and United Kingdom, consent for non-essential tracking will be requested where required under applicable data protection and electronic privacy rules.

For California residents, certain advertising-related disclosures may constitute a sale or sharing of personal information under California law, depending on how the technologies are configured and the relevant data flows. You may exercise applicable opt-out rights as described below.

8. Email Marketing

We may send promotional emails where permitted by law and where any required consent has been obtained.

You may unsubscribe at any time by using the unsubscribe link in a marketing email or contacting support@merrytree.uk.

Unsubscribing from promotional communications does not prevent us from sending non-marketing messages necessary for an order, refund, security matter, or other legitimate transactional purpose.

9. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this policy, including order fulfillment, customer support, accounting, legal compliance, dispute resolution, fraud prevention, and the establishment or defense of legal claims.

Retention periods vary according to the type of information and the applicable legal requirements.

When personal information is no longer required, we will delete it, anonymize it, or securely retain it only where continued retention is legally permitted or required.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction.

No website, transmission method, or electronic storage system can be guaranteed to be completely secure. We cannot promise absolute security.

11. Your Rights Under the GDPR

If the GDPR applies to your personal data, you may have the right to:

  • Access your personal data.

  • Request correction of inaccurate or incomplete data.

  • Request erasure of personal data where the legal conditions are met.

  • Request restriction of processing.

  • Receive certain personal data in a portable format.

  • Object to processing based on legitimate interests.

  • Object to direct marketing.

  • Withdraw consent where processing relies on consent.

  • Lodge a complaint with your competent data protection supervisory authority.

These rights are subject to legal conditions and exceptions. For example, we may retain information necessary to comply with legal obligations or establish, exercise, or defend legal claims.

12. Your Rights Under the UK GDPR

Individuals in the United Kingdom may exercise the applicable rights described above under the UK GDPR and the Data Protection Act 2018, as amended.

Where relevant, you may lodge a complaint with the UK Information Commissioner's Office (ICO).

You may submit a privacy request by emailing support@merrytree.uk. We may request reasonable information to verify your identity before acting on a request.

13. California Privacy Rights Under the CCPA and CPRA

If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our processing, you may have the following rights, subject to applicable exceptions:

  • Right to Know and Access: Request information about the categories and specific pieces of personal information collected, the sources, the purposes, and the categories of recipients.

  • Right to Delete: Request deletion of personal information, subject to statutory exceptions.

  • Right to Correct: Request correction of inaccurate personal information.

  • Right to Opt Out of Sale or Sharing: Opt out of the sale or sharing of personal information as those terms are defined under California law, including certain disclosures for cross-context behavioral advertising.

  • Right to Limit Sensitive Personal Information: Where applicable, limit certain uses and disclosures of sensitive personal information.

  • Right to Non-Discrimination: Exercise privacy rights without unlawful discrimination.

  • Right to Information About Disclosures: Receive information concerning relevant categories of personal information disclosed for business purposes, where required.

We may collect identifiers, commercial information, internet or electronic network activity, approximate geolocation, and inferences derived from website interactions, depending on your use of the store and the technologies enabled.

We may disclose relevant information to service providers, payment processors, shipping providers, analytics providers, and advertising partners for the purposes described in this policy.

We do not knowingly collect or process sensitive personal information for purposes beyond those reasonably necessary and permitted by applicable law without the required notice or consent.

To exercise a California privacy right, email support@merrytree.uk with the subject line "California Privacy Request." Please identify the right you wish to exercise. We will verify your request as required by law and respond within the applicable statutory period.

You may designate an authorized agent where permitted by law, subject to applicable verification requirements.

Where our use of advertising technologies constitutes a sale or sharing under California law, you may opt out through the cookie preference controls available on our website, where provided, or by contacting us directly. We will process qualifying Global Privacy Control signals as required by applicable California law.

14. Children's Privacy

Our store is not intended to knowingly collect personal information directly from children in circumstances where parental consent is legally required. If you believe a child has provided personal information to us unlawfully, contact support@merrytree.uk so we can assess and address the request.

15. Third-Party Websites

Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies. We are not responsible for the privacy practices of third parties that operate independently of MerryTree.

16. Changes to This Privacy Policy

We may update this policy to reflect changes in our business, technology, service providers, or legal requirements. The updated version will be published on merrytree.uk with its revised effective date.

17. Contact Us

For privacy questions, data access requests, correction requests, deletion requests, or other privacy concerns, contact:

MerryTree
GUSTAVO BAZ LLC
2750 NE 185th Street, Suite 306 Aventura, FL 33180, USA
EIN: 88-2525367
Email: support@merrytree.uk
Phone: +1 332 234 5077
Website: https://merrytree.uk