Privacy Policy

When you visit our site, create an account, or purchase, we may collect: name; email address; phone number; shipping and billing address; order history; payment method details (processed by Stripe—we do not store full card numbers); account identifiers from email, Google, or TikTok sign-in; device and browser information; IP address; pages viewed and products browsed; cookie and marketing-consent preferences; and messages you send through Contact or support channels.

We use this information to process orders, calculate tax and shipping, send transactional emails (confirmations, shipping updates, receipts), operate your account, respond to support requests, improve our site and products, prevent fraud, and—with your consent—send marketing about new collections and offers. We may use aggregated, anonymized data for analytics.

We do not sell your personal information. We share data only with service providers that help us operate the business, including: Stripe (payments); EasyPost and shipping carriers (labels, tracking, delivery); Resend (transactional email); Google Firebase (authentication and, if you opt in, analytics); Google Tag Manager / Google Analytics (site analytics, if you opt in); Meta Pixel (advertising measurement, if you opt in to marketing cookies); Google reCAPTCHA (invisible bot and fraud protection on forms, sign-in, and checkout); and TikTok (sign-in authentication when you choose that option). Each provider is authorized to use data only to perform services for us and must protect it appropriately.

We use essential cookies to run the site, keep your cart and session active, and remember affiliate references. Optional analytics and marketing cookies load only after you choose them in our cookie banner or Cookie settings link in the site footer. You can change preferences anytime via Cookie settings or your browser. Declining optional cookies does not block browsing or checkout.

Transactions are encrypted with industry-standard TLS/SSL. Payment data is handled directly by Stripe and not stored on our servers. We use access controls and secure infrastructure practices to protect information against unauthorized access or disclosure.

We use Google reCAPTCHA v3 on forms and account actions (such as sign-in, checkout, contact, newsletter signup, order tracking, and reviews) to help block automated abuse. reCAPTCHA runs invisibly in the background and may analyze device and interaction signals to produce a risk score. Google processes this data under its own Privacy Policy and Terms of Service. You may see a small reCAPTCHA badge on our site when this service is active.

You may request access to, correction of, or deletion of personal information we hold about you. You may opt out of marketing emails anytime via unsubscribe links or by contacting us. California residents may have additional rights under the CCPA, including knowing what we collect, requesting deletion, and not being discriminated against for exercising those rights. To submit a privacy request, email consult@mercilash.com with the subject line "Privacy request" and enough detail for us to verify your identity. EU/UK residents may have rights under applicable data-protection laws; contact us to exercise them.

We keep personal data only as long as needed for the purposes in this policy, to comply with law, resolve disputes, and enforce agreements. Order and payment records are retained for at least seven years for tax and accounting compliance. You may request deletion of account data subject to legal retention requirements.

Our site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Changes take effect when posted on this page with an updated "Last updated" date. Material changes may also be noted on the site or by email where appropriate.

For privacy questions or requests, email consult@mercilash.com or use our Contact page. We aim to respond within a reasonable time, typically within a few business days.