Privacy Policy - Merry Hollow

1. Introduction

Merry Hollow ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect information gathered through our website merry-hollow.com and related services.

By using our website and services, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Information You Provide

When you interact with our services, we may collect:

Contact information (name, email address, postal address)
Order details and service preferences
Photographs and images you submit for album creation
Communications and correspondence with our team
Payment information (processed securely through third-party providers)

Information Collected Automatically

When you visit our website, we may automatically collect:

Browser type and version
Operating system
Pages visited and time spent on pages
Referring website addresses
IP address (anonymised where possible)

3. How We Use Your Information

We use the information we collect to:

Process and fulfil your album orders
Communicate with you about your projects
Provide customer support and respond to enquiries
Improve our website and services
Send relevant updates about your order status
Comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on:

Contract: Processing necessary to fulfil our service agreement with you
Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your rights
Consent: Where you have given explicit consent for specific processing activities
Legal Obligation: Processing necessary to comply with applicable laws

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Delivery partners to fulfil your orders
Payment processors to handle transactions securely
Professional advisors when legally required
Law enforcement when required by law

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption of data in transit and at rest
Access controls limiting data access to authorised personnel
Regular security assessments and updates
Secure deletion of data when no longer required

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

Order records: 7 years (legal requirement)
Customer photographs: Deleted within 90 days of project completion unless you request otherwise
Marketing preferences: Until you withdraw consent
Website analytics: 26 months (anonymised)

8. Your Rights

Under data protection law, you have rights including:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data in certain circumstances
Portability: Request transfer of your data to another service
Objection: Object to processing based on legitimate interests
Restriction: Request limitation of processing in certain circumstances

To exercise these rights, please contact us at [email protected].

9. International Transfers

Your data is primarily stored and processed within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection law.

10. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated through our website or direct notification where appropriate.

11. Contact Information

For questions about this Privacy Policy or our data practices:

Email: [email protected]
Address: 47 Artisan Lane, Cotswolds, GL54 2BN, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.