Who we are

Lucy M Merrow is based in Norfolk, United Kingdom. You can contact us about your privacy at lucymmerrow@proton.me.

What information we collect

When you use this website, we may collect:

• Information you give us directly — your name, email address, delivery address, and order details when you make a purchase or contact us

• Payment information — handled securely by Squarespace Payments, which uses Stripe (payment processing) and Sift (fraud detection). We don't see or store your card details. You can read Stripe's privacy policy and Sift's privacy policy.

• Technical information — collected automatically when you visit the site, such as your IP address, browser type, and pages visited. This is collected by our website platform (Squarespace) and by Google Analytics, which helps us understand how visitors use the site.

How we use your information

We use your information to:

• Process your orders and deliver your products

• Reply to messages and enquiries

• Improve the website and understand how visitors use it

• Send order confirmations and updates about your purchase

We don't add you to any marketing list unless you've actively signed up, and we don't sell or share your information with third parties except as needed to fulfil your order.

Cookies

This website uses cookies — small files stored on your device that help the site work and let us understand how it's used. The main types in use:

• Essential cookies — needed for the site to function (for example, remembering items in your cart)

• Analytics cookies — collect anonymous information about how visitors use the site, primarily through Google Analytics

You can manage your cookie preferences through the cookie banner when you first visit, or through your browser settings at any time.

Fonts

This website uses Google Fonts (specifically Barrio, Work Sans, and Cormorant Garamond) to display text. When you visit this site, Google Fonts may receive personal information about you, including:

• Information about your browser, network, or device

• Information about this site and the page you're viewing on it

• Your IP address

Who we share your information with

We share your information only as needed to fulfil our service:

• Squarespace — the platform this website runs on

• Squarespace Payments, Stripe and Sift — to securely process payments and prevent fraud

• Google Analytics — for anonymous usage data to help us understand how the site is being used

We don't sell your information to anyone.

Order and account emails

If you make a purchase, we may email you about your order — for example, order confirmations and shipping notifications. These transactional emails can't be unsubscribed from because they're part of fulfilling your order. We provide your contact information to Squarespace, our website hosting provider, so they can send these emails on our behalf.

How long we keep your information

We keep your order information for as long as needed to meet our legal and accounting obligations (typically 6 years for tax purposes in the UK). Marketing data is kept until you ask us to delete it.

Your rights

Under UK and EU data protection law (GDPR), you have the right to:

• Ask what information we hold about you

• Ask us to correct anything that's wrong

• Ask us to delete your data (where there's no legal reason to keep it)

• Object to certain uses of your data

• Withdraw consent at any time

To exercise any of these rights, please email lucymmerrow@proton.me.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The most recent version will always be on this page.