Privacy & Cookies
Last updated: October 3, 2026
Who is responsible for your data
Arsenii Karpovych, trading as MerryDrop, Przyjaciół Żołnierza 55 lok. 4, 71-670 Szczecin, Poland, NIP: 8513313234, email: merrydrop1@gmail.com, is responsible for (the “controller” of) your personal information. Write to us about anything related to your data.
What we collect and why
| Purpose | Information | Legal basis (for EU customers) | How long we keep it |
|---|---|---|---|
| Processing and delivering your order, returns and complaints | Name, email, phone, billing and shipping address, order details | Contract | For the contract and until claims expire |
| Accounting and tax records | Order and invoice data | Legal obligation | As required by tax law (usually 5 years) |
| Customer account | Login email, order history, saved addresses | Contract | Until you delete your account |
| Newsletter | Email address | Consent | Until you unsubscribe |
| Answering your messages | Name, email, message | Legitimate interest | Up to 12 months after the conversation |
| Security, fraud prevention and store statistics | IP address, device and browser data, usage data | Legitimate interest | Up to 12 months |
| Advertising (only if you allow marketing cookies) | Cookie IDs, pages viewed, items added to cart | Consent | Up to 13 months |
Who we share it with
Only as needed with: Shopify (store platform and hosting), payment providers (e.g. Shopify Payments, PayPal), our fulfillment and shipping partners (including warehouses outside your country that pack and ship your order), carriers, accounting and IT providers, and email service providers. Some of them process data outside your country, including in the United States and China. For EU customers, such transfers are protected by an adequacy decision or the European Commission's Standard Contractual Clauses.
Cookies
We use cookies that the store needs to work (cart, checkout, language and currency). Analytics and marketing cookies are used only if you agree to them in the cookie banner, where required by law. You can change your choice at any time.
Your rights
You can ask us to access, correct, delete or receive a copy of your personal information, and to stop using it for marketing. Email us to use these rights; we'll respond within 30 days (45 days where US state law allows) and won't treat you differently for using them.
US residents (including California)
Depending on your state (e.g. California, Colorado, Connecticut, Virginia, Texas and others), you have the right to know what personal information we collect, use and disclose, to access, correct and delete it, and to opt out of the “sale” or “sharing” of personal information for targeted advertising. We do not sell your personal information for money. If you allow marketing cookies, some data may be shared with advertising partners, which some laws treat as “sharing”. You can opt out at any time by declining marketing cookies, using a Global Privacy Control (GPC) signal in your browser, or emailing us. You may use an authorized agent to make a request; we may need to verify your identity. We do not knowingly collect personal information from children under 13.
Canada
We handle your information in line with PIPEDA. You can withdraw consent to marketing at any time and contact us with any privacy question or complaint, or contact the Office of the Privacy Commissioner of Canada.
EU / Poland
You also have the right to restrict processing, to object to processing based on legitimate interest, and to withdraw consent at any time. You can lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, or with your local authority.
Changes
We may update this policy. The current version is always on this page.