Privacy Policy
Last updated: 3 October 2026
The controller of your personal data is SCALYTIX LTD, trading as Mereloft, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom (company no. 17493259). We process your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For any question: support@mereloft.com.
The data we collect
- For your order: first name, surname, delivery and billing address, e-mail address, phone number and the products you buy.
- For payment: handled directly by Shopify Payments. We never see or store your card number.
- For customer service: the content of your messages.
- When you visit our website: browsing data (pages viewed, device, IP address) through cookies. Analytics and advertising cookies are only set with your consent.
Why we use it, and on what legal basis
| Purpose | Legal basis | How long we keep it |
|---|---|---|
| Processing and delivering your order, handling cancellations, the 60-night trial and guarantees | Performance of our contract with you | For as long as our relationship lasts, then 6 years (legal claims time limit) |
| Invoices and accounting records | Legal obligation | 6 years after the end of the financial year |
| Answering your questions | Legitimate interests | 3 years after your last contact |
| Sending you our offers by e-mail | Your consent or, if you are already a customer, our legitimate interests for similar products (you can opt out in every e-mail) | 3 years after your last contact, or until you unsubscribe |
| Measuring our audience and showing you our ads (Meta pixel) | Your consent | Up to 13 months |
Who receives your data
Only the service providers we need, who are bound by contract to protect it:
- Vercel (website hosting) and, when sales open, Shopify (online shop and payment);
- the carrier delivering your order;
- our e-mail sending provider, for our e-mails;
- Meta Platforms (advertising), only if you have agreed to it.
We never sell your data.
International transfers
Some of our providers are based outside the UK, in particular in the European Economic Area and in the United States. Transfers to the EEA rely on the UK's adequacy regulations. Transfers to the United States rely on the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") where the provider is certified, or otherwise on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU standard contractual clauses.
Your rights
You have the right to access your data, have it corrected or erased, receive it in a portable format, restrict how we use it, and object to its use (including at any time to direct marketing). Where we rely on your consent, you can withdraw it at any time. E-mail support@mereloft.com: we reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk. We would appreciate the chance to deal with your concern first.
Cookies
In line with the Privacy and Electronic Communications Regulations (PECR), only strictly necessary cookies are set without your consent. When you first visit, a banner lets you accept or refuse non-essential cookies. You can change your choice at any time using the "Manage cookies" link at the bottom of every page.