POLICY — LAST REVIEWED 2026-08-25
PRIVACY
What this site collects, who it goes to, and what it does not do.
01 — WHAT IS COLLECTED
Only what an order actually needs. When you buy something, that is your email address, your delivery address, and what you bought. When you subscribe to the mailing list, it is your email address alone. When you use the contact form, it is your name, email address and message.
Card numbers are never collected by this site and never reach its servers. Payment details are entered on the payment processor's own hosted page.
02 — WHAT IS NOT COLLECTED
This site runs no analytics, no advertising pixels, and no third-party trackers. It sets no tracking cookies and there is no cookie banner because there is nothing to consent to.
Typefaces are self-hosted and served from this domain, so loading a page makes no request to a font provider. Your cart is stored in your own browser and is never transmitted anywhere until you check out.
03 — WHO ELSE RECEIVES IT
Only the processors required to complete what you asked for:
- The payment processor — your email and payment details, to take payment.
- The print and fulfilment provider — your name, delivery address and the items ordered, so the parcel can be made and posted.
- The email provider, if you subscribed — your email address only.
04 — HOW LONG IT IS KEPT
Order records are kept as long as needed to support the order and to meet accounting obligations. Mailing list entries are kept until you unsubscribe — every email carries an unsubscribe link, and unsubscribing removes the address rather than flagging it.
Contact form messages are kept until the matter is resolved and for a reasonable period afterwards, in case you follow up on the same reference.
05 — YOUR RIGHTS
You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Write by email at themercy.exe+support@gmail.com and it will be answered within 30 days.
Deletion cannot always be immediate or total: records tied to a completed sale may need to be retained for tax and accounting purposes, and the payment processor holds its own transaction records under its own policy. You will be told exactly what was removed and what had to be kept.
06 — CONTROLLER
The data controller for this site is [TO BE COMPLETED BEFORE LAUNCH].
This policy was last reviewed on 2026-08-25.
Questions about this policy? Get in touch, quoting your order reference if you have one.