Politique de confidentialité

How MerlinYes uses personal information when you browse, shop or contact us.

Last updated: 2 November 2026

Terms & conditions · Privacy · Returns & refunds

On this page

Who is responsible · Information we process · Purposes & legal grounds · Service providers & recipients · Cookies, analytics & advertising · Retention, security & international processing · Your privacy rights

Who is responsible

Azienda Agricola Rijsmus Marvin, trading as MerlinYes in Italy, is the controller for personal information used to run merlinyes.com and manage customer relationships. Contact info@merlinyes.com for privacy questions or requests.

Information we process

Order and account information includes your name, email, billing and delivery details, telephone number, purchased items, payment status and correspondence. Support requests may include photographs and details you provide about your order.

Technical information may include IP address, browser and device information, website activity, cookies and security logs. When you use an optional Google sign-in feature, Google provides the identity and profile information authorised during that sign-in, such as your name and email.

Purposes & legal grounds

We use details needed to take and fulfil orders, arrange payment and delivery, and respond to related enquiries to perform a contract or take steps at your request before a contract. Required transaction and accounting records are processed to meet legal obligations.

We rely on legitimate interests for proportionate security, fraud prevention, service administration and handling disputes, balanced against your rights. Where processing or non-essential tracking requires consent, consent is the legal basis. You can withdraw consent without affecting the lawfulness of earlier processing.

Information necessary for payment and delivery must be provided to complete an order. Optional information and optional sign-in features are not required simply to browse the shop.

Service providers & recipients

Information is shared as necessary with website hosting and support providers, payment providers, shipping services and couriers, and accounting or professional advisers. Authorities may receive information when legally required. Payment services available on the site include PayPal and Stripe; the provider handles payment credentials under its own privacy information.

Google services support site measurement and optional sign-in. Meta services support product catalogue integration and measurement. Connecting a product catalogue is distinct from sharing customer data for measurement. The information used by each service depends on the feature used and its configuration.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including Limited Use requirements. Google sign-in user data is not sold or transferred to advertising platforms for advertising purposes.

Cookies, analytics & advertising

WooCommerce uses essential cookies and similar storage to support baskets, checkout and account sessions. The site also has Google Analytics and Meta measurement integrations, which can process device identifiers, interactions and purchase events according to their configuration.

Non-essential analytics and advertising cookies require consent where applicable law requires it. You may manage cookies through your browser, withdraw any consent given, or contact us about privacy choices. Blocking essential cookies can prevent basket or sign-in features from working. Visiting the site or reading this policy is not, by itself, consent to optional tracking.

Retention, security & international processing

We keep information for the period needed for its purpose: orders and invoices for applicable accounting and tax duties; account information while needed to provide the account; support and dispute records while needed to handle the matter and relevant legal claims. Some records must remain after an account-deletion request. Ask us for the retention period applicable to a particular record.

We use access controls and appropriate technical and organisational measures to protect information. No internet service can guarantee absolute security. Service providers may process information outside the European Economic Area. Such transfers require an applicable lawful transfer mechanism, such as an adequacy decision or appropriate contractual safeguards; contact us for information about the safeguards relevant to your data.

Your privacy rights

Subject to applicable conditions, you can request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You can withdraw consent at any time. Send requests to info@merlinyes.com; we may need proportionate information to verify your identity. Do not send passwords or full payment card details.

You may complain to your local data protection authority or the Italian Garante per la protezione dei dati personali. This notice may be updated when our services or processing practices change.

Need help? Contact info@merlinyes.com or +39 379 107 9829. Please include your order number when asking about a purchase.