Privacy Policy

MERCHNTS LLC (“we”, “us”, “our”) operates Merch Mixer at merchmixer.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit the Site, place an order, or otherwise interact with us. We are committed to handling your information in accordance with applicable privacy laws in the United States — including the California Consumer Privacy Act as amended by the California Privacy Rights Act (the “CCPA/CPRA”) — and in Australia under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).

1. Information we collect

We collect information you provide directly and information collected automatically when you use the Site:

• Identity & contact data: name, email address, phone number, billing and shipping address.
• Order & transaction data: products purchased, order value, and order history. Card payments are processed by our third-party payment processors; we do not store full card numbers on our servers.
• Account data: if you create an account, your login credentials and saved preferences.
• Technical & usage data: IP address, browser type, device identifiers, pages viewed, referring URLs, and interactions, collected via cookies and similar technologies.
• Communications: messages you send us through our contact form, email, or customer support.

2. How we use your information

We use personal information to: process and fulfil your orders; communicate about orders, returns, and support; operate, maintain, and improve the Site; personalise your experience and show relevant products; prevent fraud and secure our systems; send marketing communications where permitted (you may opt out at any time); and comply with legal obligations. Where required by law, we rely on your consent, the performance of a contract with you, our legitimate business interests, or compliance with a legal obligation as our basis for processing.

3. Cookies and tracking

We use strictly necessary cookies to run the cart and checkout, and functional and analytics cookies to understand how the Site is used. You can control cookies through your browser settings; disabling some cookies may affect Site functionality. We honour recognised opt-out preference signals (such as Global Privacy Control) where legally required.

4. How we share information

We do not sell your personal information for money. We share information only as needed with: order-fulfilment and dropshipping suppliers who ship products to you; payment processors; shipping carriers; IT, hosting, and analytics providers; and professional advisers. We may also disclose information to comply with the law, enforce our terms, or protect our rights, and in connection with a business transfer. Under the CCPA/CPRA, certain analytics or advertising cookie activity may be considered “sharing” for cross-context behavioural advertising; you may opt out as described in Section 6.

5. International transfers

We serve customers in the United States and Australia, and our service providers may process data in other countries. Where we transfer personal information across borders (including from Australia under APP 8), we take reasonable steps to ensure it is protected by appropriate safeguards and handled consistently with this Policy.

6. Your privacy rights

United States (CCPA/CPRA): California residents (and residents of other states with similar laws) may request to know, access, correct, or delete personal information, and to opt out of the “sale” or “sharing” of personal information and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.

Australia (Privacy Act / APPs): you may request access to and correction of the personal information we hold about you, and you may make a privacy complaint. We will respond within a reasonable period and, if we decline a request, explain why.

To exercise any right, contact us using the details at the bottom of this page. We will verify your identity before actioning a request and may ask for additional information for that purpose. You may use an authorised agent where the law permits.

7. Data retention

We keep personal information only for as long as necessary to fulfil the purposes described above, including to meet accounting, tax, warranty, and legal requirements, after which we securely delete or de-identify it.

8. Security

We use administrative, technical, and physical safeguards — including encryption in transit (SSL/TLS) and access controls — to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children’s privacy

The Site is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, please contact us and we will delete it.

10. Changes to this policy

We may update this Policy from time to time. The “Last updated” date above reflects the latest revision. Material changes will be posted on this page.