PRIVACY POLICY
✦ PRIVACY POLICY
Last Updated: September 5, 2026
Merrymorrow respects your privacy and is committed to handling personal information responsibly.
This Privacy Policy explains how Merrymorrow (“Merrymorrow,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you:
• Visit Merrymorrow.com (the “Site”)
• Create or use an account
• Place or manage an order
• Contact Customer Support
• Subscribe to marketing communications
• Submit a review, photograph, or other content
• Otherwise interact with our products and services
This Policy applies to information collected through the Site and related customer interactions. It does not apply to third-party websites or services that operate under their own privacy policies.
Please read this Policy before providing personal information. Your privacy choices and legal rights are explained below.
✦ PRIVACY AT A GLANCE
✓ We collect information needed to operate the Site and fulfill orders
✓ Full card details are handled by authorized payment providers
✓ We use cookies for essential functions, analytics, and advertising
✓ We share information with providers that help us operate our business
✓ We do not sell personal information in exchange for money
✓ Certain advertising disclosures may legally be considered “selling,” “sharing,” or targeted advertising
✓ Eligible consumers may request access, correction, deletion, or a copy of their information
✓ You may opt out of marketing and certain advertising uses
✓ We do not knowingly collect personal information from children under 13
This summary is provided for convenience. The complete Policy below controls.
01 ✦ PERSONAL INFORMATION WE COLLECT
“Personal information” means information that identifies, relates to, describes, or could reasonably be linked with you or your household.
It does not include information that has been aggregated or deidentified so that it cannot reasonably be associated with an individual.
Categories of information
The following table describes the categories of information we may collect:
| Category | Examples | Primary purposes |
|---|---|---|
| Contact and identification information | Name, email address, telephone number, billing address, shipping address, account identifier, IP address | Account management, checkout, delivery, support, fraud prevention |
| Order and commercial information | Products viewed or purchased, order number, purchase history, cart activity, returns, refunds, discounts, product preferences | Fulfilling orders, maintaining records, support, recommendations, analytics |
| Payment-related information | Billing address, payment method type, transaction status, payment token, card brand, limited card details such as the last four digits | Processing payments, refunds, fraud prevention, accounting |
| Account information | Login credentials, saved addresses, account settings, order history | Providing and securing your account |
| Device and internet activity | Browser type, device type, operating system, cookie identifiers, pages viewed, links clicked, referral URL, session activity, interaction timestamps | Site operation, analytics, personalization, security, advertising |
| Approximate location | Country, state, region, or city inferred from an IP address | Localization, fraud prevention, analytics, shipping availability |
| Communications | Customer-support messages, emails, chat messages, return requests, survey responses | Responding to requests, resolving problems, improving service |
| User-submitted content | Reviews, ratings, photographs, comments, questions, or other content you choose to submit | Publishing reviews, support, customer engagement |
| Marketing preferences | Email subscription status, communication preferences, campaign engagement | Sending and measuring marketing communications |
| Security and fraud information | Login activity, device signals, transaction risk indicators, suspected misuse | Protecting customers, preventing fraud, securing the Site |
| Inferences | General product or décor interests inferred from browsing or purchase activity | Personalization, product recommendations, advertising |
We do not intentionally collect precise GPS location through the Site unless a feature clearly requests it and you choose to provide it.
02 ✦ INFORMATION YOU PROVIDE
We collect information directly from you when you:
✓ Create an account
✓ Add an item to your cart
✓ Place or pay for an order
✓ Enter billing or shipping details
✓ Request a return or refund
✓ Contact Customer Support
✓ Subscribe to emails
✓ Participate in a promotion or survey
✓ Submit a review, photograph, or comment
✓ Update your account or communication preferences
You may choose not to provide certain information. However, some information is necessary to create an account, complete a transaction, deliver an order, or respond to a request.
Please provide accurate information and update it when necessary.
03 ✦ INFORMATION COLLECTED AUTOMATICALLY
When you visit or interact with the Site, we and our technology providers may automatically collect information through cookies, pixels, software development tools, server logs, and similar technologies.
This information may include:
• IP address
• Browser and device characteristics
• Operating system
• Language and time-zone settings
• Pages and products viewed
• Search terms entered on the Site
• Links or buttons selected
• Cart and checkout activity
• Referring and exit pages
• Date, time, and duration of a session
• Advertising and cookie identifiers
• General geographic location inferred from IP address
• Errors, performance data, and security events
We use this information to operate the Site, understand how it is used, prevent fraud, measure advertising, and improve the customer experience.
04 ✦ INFORMATION FROM OTHER SOURCES
We may receive information from companies that help us provide the Services, including:
• E-commerce platform providers
• Payment processors and digital wallets
• Shipping carriers and fulfillment providers
• Fraud-prevention and identity-verification providers
• Analytics and advertising partners
• Customer-support technology providers
• Social media platforms when you interact with our content
• Referral, affiliate, or promotional partners
• Publicly available sources where permitted by law
The information received depends on the service, your settings, and the permissions you provide to the third party.
05 ✦ PAYMENT INFORMATION
Payments are processed by authorized third-party payment providers.
Depending on the method selected, the payment provider may collect:
✓ Cardholder name
✓ Card or account number
✓ Expiration date
✓ Security code
✓ Billing address
✓ Email address and telephone number
✓ Payment-account login information
Merrymorrow does not directly receive or store your complete card number, security code, bank-account password, or PayPal password.
We may receive limited payment information, such as:
• Payment method
• Card brand
• Last four digits
• Payment token
• Billing address
• Payment authorization or decline status
• Transaction and refund information
Payment providers process information under their own privacy notices and legal obligations.
06 ✦ HOW WE USE PERSONAL INFORMATION
We use personal information for the following purposes:
To provide products and Services
• Process and fulfill orders
• Confirm payment
• Arrange shipping and delivery
• Provide tracking information
• Process returns, replacements, and refunds
• Maintain customer accounts
• Provide requested Site features
To communicate with you
• Send order and shipping confirmations
• Respond to questions and support requests
• Provide important account or policy notices
• Notify you about a problem affecting an order
• Request information needed to complete a transaction
To improve the Site and customer experience
• Understand how visitors use the Site
• Diagnose errors and performance problems
• Improve navigation, product presentation, and checkout
• Develop new features and services
• Conduct internal analysis and research
To personalize content and advertising
• Recommend products based on interests or activity
• Remember shopping preferences
• Measure advertising performance
• Show advertisements that may be more relevant
• Understand whether an advertisement led to a Site visit or purchase
To protect customers and our business
• Verify account and transaction activity
• Detect and prevent fraud
• Investigate suspicious or unlawful conduct
• Protect the security and integrity of the Site
• Enforce our Terms of Service and other policies
• Prevent misuse, abuse, or unauthorized access
To comply with legal obligations
• Maintain tax, accounting, and transaction records
• Respond to valid legal requests
• Establish, exercise, or defend legal claims
• Comply with court orders, regulatory requirements, and applicable law
We may also use information for another purpose that is disclosed when the information is collected or with your permission.
07 ✦ COOKIES & SIMILAR TECHNOLOGIES
Cookies are small files placed on a browser or device. Similar technologies include pixels, tags, local storage, and software identifiers.
They help the Site remember information and understand how visitors interact with it.
Types of cookies we may use
Strictly Necessary Cookies
These cookies support functions required for the Site to operate, such as:
✓ Shopping cart functionality
✓ Checkout and payment processing
✓ Account login
✓ Security and fraud prevention
✓ Saving privacy preferences
These cookies generally cannot be disabled through our privacy controls because the Site may not function properly without them.
Functional Cookies
These cookies remember choices such as language, location, recently viewed products, and other preferences.
Analytics Cookies
These cookies help us understand Site traffic, page performance, visitor interactions, and technical problems.
Advertising Cookies and Pixels
These technologies help us:
• Measure advertising performance
• Understand whether an advertisement resulted in a visit or purchase
• Limit repeated advertisements
• Build or measure advertising audiences
• Display more relevant advertising on other websites or platforms
08 ✦ YOUR COOKIE CHOICES
Where required by applicable law, you may accept, reject, or manage non-essential cookies through our cookie banner or Your Privacy Choices settings.
You can also manage cookies through your browser. Blocking cookies may affect account login, cart functions, saved preferences, or checkout.
Most browsers provide controls for:
✓ Deleting stored cookies
✓ Blocking future cookies
✓ Restricting third-party cookies
✓ Receiving a warning before a cookie is stored
Do Not Track and Global Privacy Control
Some browsers send a “Do Not Track” signal. Because there is no universally accepted standard for responding to these signals, the Site may not respond to ordinary Do Not Track settings.
Where required by applicable law, we treat a recognized Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information associated with that browser or device.
Because GPC is browser- and device-specific, you may need to enable it separately on each browser and device you use.
09 ✦ MARKETING COMMUNICATIONS
If you subscribe to marketing emails, we may send information about products, new arrivals, promotions, and store updates.
You can unsubscribe by:
• Selecting the “Unsubscribe” link in a marketing email
• Updating available account preferences
• Contacting Customerservice@vip-heze.com
Unsubscribing from marketing does not prevent us from sending transactional communications concerning an order, payment, return, account security issue, or customer-support request.
We may retain limited information on a suppression list to ensure that we respect your unsubscribe request.
10 ✦ HOW WE DISCLOSE INFORMATION
We disclose personal information only as reasonably necessary for the purposes described in this Policy.
E-commerce and technology providers
Providers that host or operate our Site, databases, communications, customer-support tools, and other business systems.
Payment providers
Banks, card processors, payment gateways, and digital wallet providers that authorize payments, process refunds, and help prevent fraud.
Fulfillment and delivery providers
Warehouses, fulfillment partners, shipping carriers, customs providers, and delivery services that prepare and deliver orders.
Analytics providers
Companies that help us measure Site traffic, customer interactions, performance, and technical issues.
Advertising and marketing partners
Companies that help us deliver, personalize, measure, and understand advertising and marketing campaigns.
Fraud prevention and security providers
Companies that help identify suspicious orders, unauthorized account activity, malicious traffic, or other security risks.
Professional advisers
Accountants, auditors, insurers, attorneys, and other advisers where reasonably necessary.
Legal and regulatory disclosures
We may disclose information when we reasonably believe it is necessary to:
• Comply with applicable law or valid legal process
• Respond to a lawful government request
• Protect the rights, safety, or property of customers or others
• Detect, investigate, or prevent fraud or security incidents
• Enforce our agreements and policies
• Establish or defend a legal claim
Business transactions
Information may be disclosed or transferred as part of a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar business transaction.
Where appropriate, we will take reasonable steps to require the recipient to handle the information consistently with this Policy and applicable law.
11 ✦ SALE, SHARING & TARGETED ADVERTISING
We do not sell personal information in exchange for money.
However, we may disclose identifiers, device information, approximate location, internet activity, and inferred interests to advertising or analytics partners.
Depending on the law where you live, these disclosures may be defined as:
• “Sale” of personal information
• “Sharing” for cross-context behavioral advertising
• Processing for targeted advertising
Where applicable, you may opt out by:
✓ Selecting the Your Privacy Choices link in the Site footer
✓ Adjusting available cookie settings
✓ Enabling a recognized Global Privacy Control signal
✓ Contacting Customerservice@vip-heze.com
We do not knowingly sell or share personal information belonging to anyone under 16.
12 ✦ SENSITIVE PERSONAL INFORMATION
Sensitive personal information may include account credentials, financial information, precise geolocation, government identification numbers, health information, biometric data, or information revealing certain protected characteristics.
We do not intend to collect sensitive personal information beyond what is reasonably necessary to:
• Complete and secure a transaction
• Maintain account security
• Prevent fraud
• Provide a requested product or service
• Comply with applicable law
Complete payment credentials are handled by payment providers.
We do not use sensitive personal information to infer characteristics about you unless we provide a separate notice and obtain any consent required by law.
13 ✦ DATA RETENTION
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention, dispute-resolution, and security requirements.
Retention depends on the type of information:
| Information | General retention criteria |
|---|---|
| Order and transaction records | Retained as necessary for fulfillment, returns, taxes, accounting, chargebacks, warranties, and legal claims |
| Account information | Retained while the account remains active and for a reasonable period afterward |
| Customer-support records | Retained while the request is handled and afterward when needed for service history, disputes, or legal compliance |
| Marketing information | Retained until you unsubscribe or the information is no longer needed; limited suppression information may be kept |
| Cookie and analytics data | Retained according to the cookie type, provider settings, and applicable law |
| Fraud and security records | Retained for a reasonable period necessary to detect, investigate, and prevent misuse |
| Privacy-request records | Retained as necessary to document and comply with the request |
When information is no longer reasonably necessary, we may delete, deidentify, or aggregate it, subject to technical and legal limitations.
14 ✦ DATA SECURITY
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
✓ Access controls
✓ Secure connections
✓ Payment-provider security controls
✓ Fraud monitoring
✓ Vendor-management procedures
✓ Restricted internal access
✓ System maintenance and monitoring
No website, transmission method, or storage system can be guaranteed to be completely secure.
If we become aware of a security incident affecting your information, we will investigate and provide any notice required by applicable law.
Never send a full payment card number, security code, bank password, or account password through ordinary email.
15 ✦ YOUR PRIVACY RIGHTS
Depending on where you live and whether the applicable law covers our processing, you may have the right to:
✓ Know whether we process your personal information
✓ Request access to personal information
✓ Request correction of inaccurate information
✓ Request deletion of eligible information
✓ Obtain a portable copy of eligible information
✓ Opt out of the sale or sharing of personal information
✓ Opt out of targeted advertising
✓ Limit certain uses of sensitive personal information
✓ Withdraw consent where processing is based on consent
✓ Appeal the denial of an eligible privacy request
✓ Receive equal service without unlawful discrimination
These rights may be subject to legal exceptions. For example, we may need to retain certain information to complete an order, process a refund, prevent fraud, maintain tax records, or establish legal claims.
16 ✦ HOW TO SUBMIT A PRIVACY REQUEST
You may submit a request through:
Email: Customerservice@vip-heze.com
Contact Form: Contact Us
Use the subject line “Privacy Request” and describe the right you wish to exercise.
Please include enough information for us to identify the relevant account or transaction, such as:
• Your name
• The email address associated with your account or order
• Your order number, when relevant
• Your state or country of residence
• The specific request you are making
Identity verification
We may take reasonable steps to verify your identity before completing an access, correction, deletion, or portability request.
Verification information will be used only to verify and process the request.
We will not request more information than reasonably necessary. If we cannot verify your identity, we may be unable to complete some requests.
Authorized agents
Where permitted by law, an authorized agent may submit a request on your behalf.
We may request evidence of the agent’s authority and may ask you to confirm the request directly, unless the agent holds legally sufficient authority that does not require additional confirmation.
Response timing
We will respond within the timeframe required by applicable law. If an extension is permitted and reasonably necessary, we will notify you.
Appeals
If applicable law gives you the right to appeal a decision, email Customerservice@vip-heze.com with the subject line “Privacy Appeal.”
Include the original request and explain why you believe the decision should be reconsidered.
17 ✦ U.S. STATE PRIVACY DISCLOSURES
Residents of certain U.S. states may have additional privacy rights under state law.
Where applicable, these rights may include:
• Access
• Correction
• Deletion
• Portability
• Opting out of personal-information sales
• Opting out of targeted advertising
• Opting out of certain profiling
• Limiting certain uses of sensitive information
• Appealing a denied request
We will not unlawfully discriminate against you because you exercised an eligible privacy right.
18 ✦ NOTICE FOR CALIFORNIA RESIDENTS
This section applies where Merrymorrow is subject to the California Consumer Privacy Act, as amended (“CCPA”).
Categories collected
During the preceding 12 months, we may have collected the categories described in Personal Information We Collect, including:
✓ Identifiers and contact information
✓ Customer and commercial records
✓ Payment-related information
✓ Internet or electronic network activity
✓ Approximate geolocation
✓ Communications and User Content
✓ Inferences about product interests
✓ Limited sensitive information needed for payments and account security
Sources and purposes
We collect this information from you, your device, service providers, payment providers, shipping partners, advertising partners, and other sources described in this Policy.
We use it for the business and commercial purposes described in How We Use Personal Information.
Categories disclosed
We may disclose the categories above to:
• Service providers and contractors
• Payment providers
• Fulfillment and delivery partners
• Analytics providers
• Advertising partners
• Fraud-prevention and security providers
• Professional advisers
• Government authorities where legally required
Sale or sharing
We do not sell personal information for money.
Disclosures of identifiers, device information, approximate location, internet activity, or inferred interests to advertising partners may be considered “selling” or “sharing” under California law.
You may opt out through Your Privacy Choices or by using a recognized Global Privacy Control signal.
California privacy rights
Subject to applicable exceptions, California residents may request:
✓ The categories or specific pieces of personal information collected
✓ The sources and purposes of collection
✓ The categories of third parties receiving information
✓ Correction of inaccurate information
✓ Deletion of eligible information
✓ A portable copy of eligible information
✓ Opt-out of sale or sharing
✓ Limitation of certain sensitive-information uses
✓ Equal treatment when exercising these rights
We do not knowingly sell or share the personal information of consumers under 16.
Financial incentives
We do not currently offer a financial incentive in exchange for personal information.
If we introduce such a program, we will provide the required terms and notice before enrollment.
19 ✦ EEA, UNITED KINGDOM & SWITZERLAND
If you are located in the European Economic Area, United Kingdom, or Switzerland, applicable privacy law may provide additional rights.
Legal bases for processing
Depending on the activity, we process personal information based on:
Contract
When processing is necessary to accept payment, fulfill an order, deliver products, provide account features, or handle a return.
Legitimate interests
When reasonably necessary to operate and improve the Site, prevent fraud, secure our Services, understand business performance, and provide customer support—provided those interests are not overridden by your rights.
Consent
When you consent to non-essential cookies, certain advertising activities, or marketing communications.
Legal obligation
When processing is required for accounting, taxation, regulatory compliance, legal claims, or valid government requests.
Additional rights
Subject to applicable law, you may have the right to:
✓ Access your personal data
✓ Correct inaccurate data
✓ Request deletion
✓ Restrict or object to processing
✓ Receive portable data
✓ Withdraw consent
✓ Object to direct marketing
✓ Complain to your local data-protection authority
Withdrawing consent does not affect processing that lawfully occurred before withdrawal.
20 ✦ INTERNATIONAL DATA TRANSFERS
Merrymorrow, our e-commerce platform, and our service providers may process information in countries other than the country where you live.
Privacy laws in those countries may differ from the laws in your jurisdiction.
Where required, we take steps intended to provide an appropriate level of protection and use legally recognized transfer mechanisms.
International processing may be necessary for:
• Website hosting and technical support
• Payment processing
• Fraud prevention
• Customer Support
• Order fulfillment and delivery
• Analytics and advertising
• Business administration
21 ✦ CHILDREN’S PRIVACY
The Site is intended for a general adult audience and is not directed to children under 13.
We do not knowingly collect personal information online from children under 13.
Purchases must be made by an adult or with the involvement of a parent or legal guardian.
If you believe a child has provided personal information without appropriate authorization, contact Customerservice@vip-heze.com. We will investigate and take appropriate steps, including deletion where required.
If local law provides a higher minimum age for particular processing, we will follow the applicable requirement.
22 ✦ PUBLIC CONTENT
Reviews, photographs, questions, and comments submitted in a public area of the Site may be visible to other users.
Please do not include:
• Payment details
• Account passwords
• Private addresses
• Sensitive personal information
• Information about another person without permission
Our use of publicly submitted content is also governed by the User Content section of our Terms of Service.
Materials sent privately for customer-support purposes are not treated as publicly posted content.
23 ✦ THIRD-PARTY WEBSITES & SERVICES
The Site may contain links to payment providers, shipping carriers, social networks, or other third-party services.
Those services control their own privacy practices. This Policy does not apply to information collected directly by a third party under its own privacy notice.
We encourage you to review a third party’s privacy policy before providing information or using its services.
24 ✦ DEIDENTIFIED & AGGREGATED INFORMATION
We may create aggregated or deidentified information that cannot reasonably be linked to you.
We may use this information for analytics, research, Site improvement, inventory planning, and other lawful purposes.
Where required by law, we will maintain deidentified information in deidentified form and will not attempt to reidentify it except to test whether our deidentification methods are effective or as otherwise permitted by law.
25 ✦ CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect changes in our practices, technology, Services, or legal requirements.
When changes are made, we will update the “Last Updated” date at the top of this page.
If a change materially affects how we handle personal information, we will provide additional notice where required, such as through the Site or by email.
A revised Privacy Policy will apply from its stated effective date. We will request consent when required rather than treating continued Site use as consent where consent is legally necessary.
26 ✦ CONTACT US
For privacy questions, requests, complaints, or concerns, contact:
Email: Customerservice@vip-heze.com
Website: Merrymorrow.com
Contact Form: Contact Us
Please use the subject line “Privacy Request” or “Privacy Question” so your message can be directed appropriately.
✦ Thank you for trusting Merrymorrow with your information.