Privacy Policy

Last updated: 24 May 2026

1. Who We Are

Van Merino ("we", "us", "our") operates the website vanmerino.com. We are the data controller responsible for your personal data. For any privacy-related enquiries please contact us at hello@vanmerino.com.

2. Data We Collect

We collect personal data only when you actively provide it:

Email address — when you subscribe to our newsletter.
Payment and order data — name, shipping address, payment card details — collected and processed by Stripe, Inc. on our behalf. We do not store your card details on our servers.

We do not use cookies for tracking or advertising. Our website may load fonts from Google Fonts CDN; Google may collect your IP address in connection with this request, governed by Google's own privacy policy.

3. How We Use Your Data

Email (newsletter) — to send you product updates, exclusive drops, and promotional communications. Legal basis: consent (Art. 6(1)(a) GDPR).
Order data — to process and fulfil your purchase, issue invoices, and handle returns. Legal basis: contract performance (Art. 6(1)(b) GDPR).
Legal obligations — to comply with applicable tax and consumer protection law (Art. 6(1)(c) GDPR).

4. Third-Party Processors

We share your data with the following processors only to the extent necessary:

Stripe, Inc. — payment processing. Stripe's privacy policy: stripe.com/privacy.
Google LLC — web font delivery via Google Fonts CDN. Google's privacy policy: policies.google.com/privacy.
Hostinger International Ltd. — web hosting and server infrastructure. We do not share your personal data with Hostinger beyond what is technically necessary for hosting.

5. Data Retention

Newsletter email addresses are retained until you unsubscribe. Order records are retained for 7 years to comply with EU accounting and tax obligations. You may request deletion at any time subject to our legal obligations.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Request erasure ("right to be forgotten"), subject to legal retention obligations.
Restrict or object to processing.
Data portability.
Withdraw consent at any time (e.g. unsubscribe from the newsletter) without affecting the lawfulness of prior processing.
Lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at hello@vanmerino.com. We will respond within 30 days.

7. Data Security

Our website is served exclusively over HTTPS with TLS encryption. Payment data is processed entirely by Stripe using PCI DSS-compliant infrastructure and never transmitted to or stored on our servers.

8. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy periodically. The "Last updated" date above reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related requests or questions, please email hello@vanmerino.com.