Privacy Policy

1. Data Controller

Blame On Mercury ("we", "us", "our") is the data controller responsible for your personal data. If you have questions about this policy or your data, contact us at privacy@blameonmercury.com

2. Information We Collect

We collect information you provide directly:

• Account data — name, email address, password
• Order data — shipping address, billing address, phone number
• Payment data — processed securely by Stripe; we do not store card details
• Communication data — messages via contact forms or support tickets
• Technical data — IP address, browser type, device info, collected automatically

3. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract performance — to fulfill your orders and provide our services
• Legitimate interest — to improve our website, prevent fraud, and ensure security
• Consent — for marketing communications and non-essential cookies
• Legal obligation — to comply with tax, accounting, and regulatory requirements

4. How We Use Your Information

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Respond to your inquiries and provide customer support
• Send marketing communications (only with your consent)
• Improve our website and services
• Prevent fraud and ensure security

5. Information Sharing

We share your data only with trusted third parties necessary to operate our business:

• Stripe — payment processing (EU/US)
• Shipping carriers — order delivery
• Production partners — order fulfillment
• Vercel — website hosting (US, with EU data processing)

We do not sell, rent, or trade your personal information to third parties.

6. International Transfers

Some of our service providers are based outside the EEA. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or the service provider's participation in recognised data protection frameworks.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected: order data for 7 years (legal/tax obligations), account data until you request deletion, and marketing consent records indefinitely until withdrawn.

8. Cookies

We use cookies and similar technologies. For full details, please see our Cookie Policy. You can manage your preferences via the cookie consent banner or your browser settings.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/SSL), secure authentication, and access controls. However, no method of transmission over the Internet is 100% secure.

10. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest or direct marketing
• Right to withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, email privacy@blameonmercury.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact

For questions about this privacy policy or to exercise your rights, contact us at privacy@blameonmercury.com