Privacy and Cookie Policy
Last updated: 26 October 2026
This Privacy and Cookie Policy describes how Merchington AB processes personal data and uses cookies and similar technologies in our webshop- and ordering platform.
1. Data Controller
Merchington AB
Company registration number: 559560-7622
Address: Rådjursvägen 6a, SE-352 45 Växjö, Sweden
Email: support@merchington.com
Merchington AB is the data controller for the processing of personal data within the scope of this website, unless otherwise expressly stated.
2. What does this policy cover?
This policy applies when you:
• Visit merchington.com
• Place an order
• Contact us
• Use functions that require cookies or similar technologies
• Manage your cookie settings through our consent solution
3. What personal data we process
We may process the following categories of personal data:
• Name
• Company, department or organization
• Delivery and billing address
• Email address
• Phone number
• Order history and order information
• Delivery information
• Communications with us
• Technical information, such as IP address, browser type, device information and consent status
• Information about how the website is used, where relevant and permitted
We only process personal data to the extent necessary for each specific purpose.
4. How we collect personal data
We collect personal data:
• Directly from you when you use the website or contact us
• Automatically through cookies and similar technologies
• From suppliers and partners when necessary to manage orders, deliveries or the operation of the service
5. Why we process personal data
We process personal data for the following purposes:
a) To provide the website and the service
To give you access to merchington.com and provide relevant functionality.
Legal basis: Contract or legitimate interest.
b) To manage orders and deliveries
To process purchases, deliver products, handle returns, complaints and support.
Legal basis: Contract.
c) To comply with legal obligations
To comply with requirements under accounting legislation, tax legislation, security requirements and data protection laws.
Legal basis: Legal obligation.
d) For analysis, improvement and security
To analyze usage, troubleshoot, improve website functionality, prevent misuse and strengthen security.
Legal basis: Legitimate interest or consent, depending on the technology used.
e) For marketing purposes
If the website is used for newsletters, campaigns or other marketing activities, personal data may also be processed for those purposes.
Legal basis: Consent or legitimate interest, depending on the situation and channel.
6. Cookies and similar technologies
We use cookies and similar technologies to:
• Ensure that the website functions properly
• Remember your settings
• Improve security and performance
• Analyze traffic and usage
• In some cases enable personalization or marketing
Cookies are small text files stored on your device when you visit a website. You can refuse or delete cookies through your browser settings. This may mean that certain website functions will not work as intended.
We normally use the following categories of cookies:
Necessary cookies
These are required for the website and its core functions to work properly, such as login, session management, shopping cart functionality or security.
Preference cookies
These are used to save your choices and preferences, such as language or other user settings.
Statistics and analytics cookies
These help us understand how the website is used so that we can improve functionality, content and user experience.
Marketing cookies
These may be used to display relevant communication or measure the effectiveness of campaigns, if such functions are used in the relevant store.
7. Consent to cookies
Where required by law, we ask for your consent before using non-essential cookies or similar technologies. You may change or withdraw your consent at any time through the Cookie Settings link on the website.
If you block cookies through your browser, some parts of the website may stop working properly.
8. Usercentrics
We use Usercentrics for the management and documentation of consent to cookies and similar technologies in merchington.com. When you give, refuse or withdraw consent via our cookie banner, data related to your consent may be processed, such as consent status, the time of your choice and certain technical information. The purpose of this processing is to store your preferences, ensure that relevant services are handled in accordance with those preferences, and enable us to demonstrate that valid consent has been obtained where required. Usercentrics processes this data on behalf of Merchington AB.
When you use our cookie banner, certain data may therefore be processed, for example:
• Consent status
• The time of your choice
• Information about which version of the banner or settings was displayed
• Certain device or browser information
• An identifier linked to the consent
More information about Usercentrics’ processing of personal data can be found in their own privacy policy.
9. Who we may share personal data with
We may share personal data with the following categories of recipients where necessary:
• IT and platform providers
• Hosting and operations providers
• Consent management providers, such as Usercentrics
• Freight and logistics partners
• Payment or invoicing solution providers
• The customer’s organization
• Public authorities where we are required to do so by law
We do not sell personal data to third parties.
10. Transfers outside the EU/EEA
In connection with our use of external suppliers and technical services, personal data may be transferred to recipients in countries outside the EU/EEA. This may, for example, occur when using services for web analytics and tag management, such as Google Analytics 4 and Google Tag Manager, as well as certain cloud, ERP and business system integrations, including but not limited to Microsoft Dynamics 365 Business Central.
Google states that international transfers may occur and that such transfers may, depending on the circumstances, be based on, among other things, the European Commission’s Standard Contractual Clauses and, in some cases, adequacy decisions such as the EU-U.S. Data Privacy Framework.
We also use Microsoft Dynamics 365 Business Central as an ERP and business management system. Microsoft states that transfers of personal data from the EEA, Switzerland and the United Kingdom to third countries are subject to appropriate safeguards in accordance with Article 46 of the GDPR.
For the management and documentation of consent to cookies and similar technologies, we use Usercentrics. Usercentrics provides data processing terms for its services, and the processing takes place within the framework of such contractual safeguards.
For checkout and payment processing, we use Kustom Checkout and payment services provided by third-party providers, including Klarna, Billie and Resurs Bank. Depending on the selected payment method, personal data may be shared with the relevant providers for the purposes of processing payments, managing invoices, verifying identity and assessing creditworthiness where applicable.
Kustom, Klarna, Billie and Resurs Bank process personal data in accordance with their respective privacy policies and applicable data protection legislation. In connection with these services, personal data may be transferred to recipients outside the EU/EEA. Where such transfers occur, appropriate safeguards must be applied in accordance with the GDPR, such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision. Each provider is responsible for complying with applicable data protection requirements in relation to its own processing activities.
Where possible, we aim to use suppliers and hosting arrangements that support processing within the EU/EEA. Where personal data is transferred outside the EU/EEA, we take measures to ensure that such transfers take place in accordance with applicable data protection rules and that an adequate level of protection is maintained. If you would like more information about possible transfers and the safeguards applied, you are welcome to contact us.
11. How long we retain personal data
We retain personal data for as long as necessary for the purposes for which it was collected, or for as long as we are required to do so by law. Examples:
• Account information: for as long as the account remains active and thereafter in accordance with established deletion routines
• Order information: for as long as required to fulfill the contract and thereafter in accordance with accounting and contractual legal requirements
• Support cases: for as long as necessary to manage the case and follow up on the customer relationship
• Consent information: for as long as necessary to demonstrate that consent has been given or withdrawn
12. Security
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration or other unauthorized processing.
13. Your rights
You have the right to:
• Receive information about how your personal data is processed
• Request access to your personal data
• Request correction of inaccurate personal data
• Request deletion in certain circumstances
• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interest
• Receive certain personal data in a structured format
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
14. Contact
If you have any questions about this policy or wish to exercise your rights, please contact us at:
Merchington AB
Email: support@merchington.com
Address: Rådjursvägen 6a, SE-352 45 Växjö, Sweden
If you believe that our processing of your personal data is in breach of applicable data protection laws, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
15. Changes to this policy
We may update this Privacy and Cookie Policy from time to time. The latest version is always published in merchington.com.