Privacy policy

The Merry Mill understands that you want to shop with us securely and with confidence. Our privacy policy explains what personal data we may collect about you when you interact with us, how we use it and how we keep it safe. It is governed by the GDPR regulations of 2018 and our commitment to your data protection.

In specific situations, we collect and process your data to send out a newsletter to you by email. We only do this when you consent to receiving a newsletter i.e. when you tick a box to receive a newsletter on our website or when you personally give us your email address so that you can receive a newsletter. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing us info@themerrymill.ie.  We do not pass on this personal data to third parties for their own marketing purposes.

Our cookies policy is reviewed and amended on a regular basis to meet current legislation.

In certain circumstances we need your personal data to comply with our contractual obligations. For example, when you set up an online account with us and order an item from our website we will collect your personal data (your address, email address and telephone number/s) to meet our contractual obligation and to deliver your purchase. We may pass this information onto our courier. This data will be retained by the courier for as long as is necessary to meet their contractual obligations.

In specific situations we require your email address or telephone number to pursue our legitimate interests in a way in which might be reasonably required to run our business, for example to inform you of products of interest in line with your previous buying history or to make you personalised offers. We also collect your email address and/or telephone number/s when you require us to contact you about a specific product or when your details are required for a specific transaction, a complaint or a query. Other occasions when we can collect this personal data include when you make an enquiry via our website, enter one of our competitions and/or engage with us on social media. Any data collected by us in these ways is locked away or stored on our computers with several layers of password protection. When we collect and process data, we will only keep this data for as long as is necessary to complete the task for which it was collected, or for as long as is legitimately required by the business. All stored data will be kept and reviewed after a five year period so that we can adhere to our legal and contractual obligations. This data collection does not impact on your rights. We will pass over your personal details when the law requires us to, for example if there has been, or if there is a suspected incident of crime or fraud where some, or all, of your personal details are legally required.

When you set up an online account with us we do not store your password. We strongly recommend that you do not use the browser’s password memory function as this may permit other people using your terminal to access your account. Please contact us if you feel your account is being used in an unauthorised manner.

We use Stripe, an online secure payment provider, to process your payments when you order from us online. This facility is password protected. Sensitive data such as payment card information is secured. We only access and pass on specific details collected by Stripe if we suspect your order is part of a fraudulent attack or when we are required to do so by law. If you have given us consent to use your personal data, you can withdraw that consent at any time. Where we rely on our legitimate interest to process your data, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue the processing of this data. In the interests of confidentiality, we will ask you to verify your identity before proceeding with any request about your data or ask you to prove you have permission to act on behalf of a third party.