Effective Date: January 14, 2026
Last Updated: January 14, 2026
INTRODUCTION
Welcome to Mercator ("we," "us," "our," or "Company"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases through our Shopify-powered store (collectively, the "Services"). Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.
1. INFORMATION WE COLLECT
We collect information that you provide directly to us, information we obtain automatically when you use our Services, and information from third parties.
1.1 Personal Information You Provide
When you use our Services, we may collect personal information including: full name, email address, mailing address (billing and shipping), phone number, payment information (processed securely through payment processors), order history and purchase details, account credentials, customer support communications, survey responses, product reviews, email subscription preferences, and marketing consent records.
1.2 Information Collected Automatically
When you access our Services, we automatically collect information about your device and usage including: IP address, browser type and version, operating system, device identifiers, pages viewed, time spent on pages, referring/exit pages, date and time stamps, clickstream data, session cookies, persistent cookies, web beacons and pixels, local storage objects, and analytics data.
1.3 Information from Third Parties
We may receive information about you from third parties including Shopify (transaction and payment processing data, store analytics, fraud prevention data), payment processors (payment verification, transaction authorization, fraud detection), social media platforms (profile information if you connect your accounts), marketing partners (advertising performance data, audience insights, campaign analytics), and data aggregators (demographic information, market research data, public records).
2. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
- Order Processing and Fulfillment: Processing and fulfilling orders, confirming and tracking shipments, processing payments and refunds, managing returns and exchanges, maintaining order history
- Account Management: Creating and managing your account, authenticating your identity, providing customer support, responding to inquiries
- Communication: Sending order confirmations and updates, providing customer service, sending marketing communications (with consent), conducting surveys, sending administrative notices
- Business Operations: Improving our Services, developing new products, conducting analytics and research, personalizing shopping experience, optimizing website performance
- Legal and Security: Preventing fraud and security threats, complying with legal obligations, enforcing Terms of Service, protecting rights and property, resolving disputes
- Marketing and Advertising: Delivering targeted advertisements, measuring advertising effectiveness, conducting market research, creating custom audiences, retargeting campaigns
3. LEGAL BASIS FOR PROCESSING (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal information based on: Contract Performance (necessary to fulfill our contract with you), Legitimate Interests (necessary for our legitimate business interests), Consent (based on your explicit consent), and Legal Obligation (required to comply with legal requirements).
4. HOW WE SHARE YOUR INFORMATION
We may share your information with the following categories of recipients:
4.1 Service Providers
We share information with third-party service providers who perform services on our behalf including: Shopify (e-commerce platform and hosting, payment processing infrastructure, order management), payment processors (credit card processing, payment gateway services, fraud detection), shipping and fulfillment (shipping carriers like USPS, FedEx, UPS, DHL; warehouse partners; inventory management), marketing and analytics (email service providers, marketing automation platforms, Google Analytics, advertising networks, social media platforms), customer support (help desk software, live chat services, CRM systems), and IT and security (cloud storage, data backup, security monitoring, website hosting).
4.2 Business Transfers
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (court orders, subpoenas), national security or law enforcement requirements, and legal processes and regulatory investigations.
4.4 Protection of Rights
We may disclose information when necessary to enforce our Terms of Service or other agreements, protect the security or integrity of our Services, protect the rights, property, or safety of Mercator, our users, or others, or prevent or investigate possible wrongdoing.
4.5 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so. We may also share aggregate or de-identified information that cannot reasonably be used to identify you.
5. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and tracking technologies including: Strictly Necessary Cookies (required for website function), Performance Cookies (collect information about how visitors use our website), Functional Cookies (remember preferences and choices), and Targeting/Advertising Cookies (deliver relevant advertisements and measure campaign effectiveness). You can control cookies through your browser settings. We use third-party analytics services including Google Analytics and Facebook Pixel.
6. YOUR PRIVACY RIGHTS
You have important rights regarding your personal information including: Access (request access to personal information we hold), Correction (request correction of inaccurate information), Deletion (request deletion of your personal information), Objection (object to processing for certain purposes), Restriction (request restriction of processing), Portability (request a copy in portable format), and Opt-Out (opt out of marketing communications).
6.2 California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under CCPA/CPRA including: Right to Know (request disclosure of categories and specific pieces of personal information collected), Right to Delete, Right to Correct, Right to Opt-Out (opt out of the 'sale' or 'sharing' of personal information), Right to Limit (limit use of sensitive personal information), and Right to Non-Discrimination.
We collect the following categories under CCPA: Identifiers (name, email, address, IP address), Commercial information (purchase history, shopping behavior), Internet activity (browsing history, interactions), Geolocation data, and Inferences (preferences, characteristics).
Sale of Personal Information: We do not sell personal information in the traditional sense. However, our use of certain analytics and advertising tools may constitute a "sale" or "sharing" under California law. You can opt out using the cookie settings or "Do Not Sell or Share My Personal Information" link on our website.
6.3 Virginia, Colorado, Connecticut, and Utah Privacy Rights
If you are a resident of Virginia, Colorado, Connecticut, or Utah, you have rights under your state's privacy law including: Access (confirm whether we process your personal data and access such data), Correction (correct inaccuracies), Deletion (delete personal data), Portability (obtain a copy in portable format), and Opt-Out (opt out of targeted advertising, sale of personal data, and profiling).
6.5 European Privacy Rights (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under GDPR including: Right of Access, Right to Rectification, Right to Erasure ('right to be forgotten'), Right to Restrict Processing, Right to Data Portability, Right to Object, Right to Withdraw Consent, and Right to Lodge a Complaint with your local supervisory authority.
6.6 How to Exercise Your Rights
To exercise any of these rights, please contact us at Info@mercatorfs.com or by mail at 2941 Paddock Lane, Weston, FL, 33331. We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before processing your request.
7. DATA RETENTION
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations (e.g., tax and accounting requirements typically 7 years), resolve disputes, enforce agreements, and maintain security and prevent fraud.
Retention Periods: Account information (duration of account plus 7 years after closure), Order information (7 years from date of purchase), Marketing communications (until you unsubscribe or request deletion), Analytics data (26 months), Security logs (12 months).
8. DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal information including: SSL/TLS encryption for data transmission, encrypted storage of sensitive information, regular security assessments and audits, access controls and authentication requirements, employee training on data protection, incident response procedures, regular backups and disaster recovery plans, PCI DSS compliant payment processing, and tokenization of payment information. We do not store complete credit card numbers on our servers.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. INTERNATIONAL DATA TRANSFERS
Our Services are operated in the United States. If you are located outside the United States, information we collect will be transferred to, processed, and stored in the United States and other countries where data protection laws may differ from those in your jurisdiction.
Our e-commerce platform provider, Shopify Inc., is based in Canada and may process data in Canada and the United States. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions (where applicable), and other lawful transfer mechanisms under GDPR.
By using our Services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.
10. CHILDREN'S PRIVACY
Our Services are not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at Info@mercatorfs.com. If we become aware that we have collected personal information from a child under the applicable age without parental consent, we will take steps to delete that information.
11. THIRD-PARTY WEBSITES AND SERVICES
Our Services may contain links to third-party websites, products, or services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of third parties. We encourage you to read the privacy policies of any third-party websites you visit.
Third-party services we use include: Shopify (e-commerce platform), payment processors (Stripe, PayPal, etc.), shipping carriers, email service providers, analytics providers, advertising networks, and social media platforms. Each of these services has their own privacy policies governing their use of your information.
12. MARKETING COMMUNICATIONS
With your consent, we may send you marketing emails about our products, services, promotions, and events. You can opt out of marketing emails at any time by clicking the 'unsubscribe' link in any marketing email, updating your account preferences, or contacting us at Info@mercatorfs.com.
Please note that even if you opt out of marketing emails, we will still send you transactional emails related to your orders and account.
If you opt in to receive SMS marketing messages, you can opt out at any time by replying 'STOP' to any marketing text message or contacting us. Message and data rates may apply.
13. YOUR CALIFORNIA SHINE THE LIGHT RIGHTS
California Civil Code Section 1798.83 permits California residents to request certain information about disclosure of personal information to third parties for direct marketing purposes. To make such a request, please contact us at Info@mercatorfs.com.
14. ACCESSIBILITY
We are committed to ensuring our Privacy Policy is accessible to all users. If you have difficulty accessing any part of this Privacy Policy, please contact us at Info@mercatorfs.com, and we will work to provide the information in an alternative format.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on our website, updating the 'Last Updated' date at the top of this page, sending you an email notification (if you have provided your email address), and displaying a prominent notice on our website.
Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the changes, please stop using our Services. We encourage you to review this Privacy Policy periodically.
16. CONTACT INFORMATION
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Mercator
Email: Info@mercatorfs.com
Mail: Mercator, 2941 Paddock Lane, Weston, FL, 33331
Response Time: We will respond to your inquiry within 30 days.
17. STATE-SPECIFIC DISCLOSURES
California Residents: In the past 12 months, we have collected the following categories of personal information: identifiers, commercial information, internet activity, geolocation data, and inferences. We collect from you directly, automatically through Services, and from third parties (Shopify, payment processors, analytics providers). We use personal information for order processing, customer service, marketing, analytics, fraud prevention, and legal compliance. We share with service providers, payment processors, shipping carriers, analytics providers, and advertising networks.
Nevada Residents: Nevada residents may request to opt out of the sale of covered information. We do not currently sell covered information as defined under Nevada Revised Statutes Chapter 603A.
Virginia, Colorado, Connecticut, and Utah Residents: Residents of these states have the rights described in Section 6.3. We do not process sensitive data as defined under these state laws beyond what is necessary for providing our Services. If we deny your privacy rights request, you have the right to appeal our decision by contacting us at Info@mercatorfs.com.
18. AUTOMATED DECISION-MAKING AND PROFILING
We may use automated decision-making and profiling to personalize your shopping experience, recommend products based on your browsing and purchase history, detect and prevent fraud, and deliver targeted advertising. You have the right to object to automated decision-making that produces legal or similarly significant effects. Contact us at Info@mercatorfs.com to exercise this right.
19. DATA BREACH NOTIFICATION
In the event of a data breach that affects your personal information, we will notify you and relevant authorities in accordance with applicable law. Notification will be provided without undue delay and typically within 72 hours of discovering the breach.
20. GOVERNING LAW
This Privacy Policy is governed by the laws of Florida, United States, without regard to its conflict of law provisions. Any disputes arising from this Privacy Policy shall be resolved in the courts of Broward County, Florida.
ACKNOWLEDGMENT
BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO ITS TERMS.
If you do not agree with this Privacy Policy, please do not use our Services.
Last Updated: January 14, 2026
Effective Date: January 14, 2026
Version: 1.0
