Privacy policy

Privacy Policy

Last updated: 28 February 2026

The Merry Zebra (“we”, “us”, “our”) operates www.themerryzebra.co.uk (the “Website”).

Our Website and services are intended for customers located in the United Kingdom. We currently only deliver within the UK and do not actively market to customers outside the UK.

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data when you visit our Website, make a purchase, or otherwise contact us.

We are the data controller for the purposes of UK data protection law.

1. Who We Are

The Merry Zebra
3 Hunston Close
Brighton and Hove
Brighton
BN2 6TN
United Kingdom

Email: hello@themerryzebra.co.uk

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. The Law That Applies

We process your personal data in accordance with:

  • The UK General Data Protection Regulation (UK GDPR)
  • The Data Protection Act 2018
  • The Privacy and Electronic Communications Regulations (PECR)

3. The Personal Data We Collect

We may collect and process the following types of personal data:

Information You Provide Directly

  • Name
  • Billing and delivery address
  • Email address
  • Telephone number
  • Account login details (if you create an account)
  • Order details
  • Messages you send to us

Payment Information

Payments are processed securely through Shopify and its payment providers. We do not store full payment card details on our systems.

Information Collected Automatically

When you visit our Website, we may collect:

  • IP address
  • Device type and browser
  • Pages visited
  • Time spent on pages
  • Referral source
  • Cookie identifiers

(See Section 5 for more information about cookies.)

4. How We Use Your Personal Data

We only use your personal data where we have a lawful basis to do so.

A. To Process Your Orders

Lawful basis: Contract

We use your data to:

  • Process and deliver your order
  • Take payment
  • Send order confirmations
  • Manage returns or refunds

Without this information, we cannot fulfil your purchase.

B. Customer Service & Account Management

Lawful basis: Contract and Legitimate Interests

We use your data to:

  • Respond to enquiries
  • Manage your account
  • Provide support
  • Resolve complaints

C. Fraud Prevention & Website Security

Lawful basis: Legitimate Interests

  • We may use your information to:
  • Prevent fraudulent transactions
  • Protect our website and customers
  • Maintain IT security

D. Marketing Communications

Lawful basis: Consent

If you sign up to receive marketing emails, we will use your email address to send:

  • News
  • Offers
  • Promotions

You can unsubscribe at any time by clicking the unsubscribe link in our emails.

We do not send marketing emails unless you have opted in.

E. Legal & Accounting Requirements

Lawful basis: Legal Obligation

We may retain and use your data to:

  • Comply with tax and accounting laws
  • Respond to lawful requests from authorities
  • Maintain business records

5. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies.

Cookies help us:

  • Make the website function properly
  • Remember your preferences
  • Analyse website traffic
  • Improve your shopping experience
  • Deliver relevant advertising (where you have consented)

Where required by law, we obtain your consent before placing non-essential cookies (such as analytics or marketing cookies).

You can manage your cookie preferences through our cookie banner or your browser settings.

6. Sharing Your Personal Data

We only share your personal data where necessary.

Shopify

Our store is hosted on Shopify. Shopify processes personal data to provide hosting, payment processing and store functionality.

Service Providers

We may share data with trusted third parties such as:

  • Payment processors
  • Delivery companies
  • IT and hosting providers
  • Email marketing platforms

All third parties are required to process your data securely and lawfully.

We do not sell your personal data.

7. International Transfers

Some of our service providers (including Shopify) may process personal data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

  • UK-approved Standard Contractual Clauses
  • Transfers to countries recognised as providing adequate protection under UK law

8. How Long We Keep Your Data

We only retain personal data for as long as necessary.

Typical retention periods:

  • Order and transaction records: 6 years (for tax and accounting purposes)
  • Marketing data: until you withdraw consent or unsubscribe
  • Customer enquiries: up to 2 years after resolution
  • Account information: until you close your account, plus up to 6 years where required

We may retain data for longer where required by law.

9. Your Rights

Under UK data protection law, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of your data
  • Restrict processing
  • Object to processing based on legitimate interests
  • Withdraw consent (where processing is based on consent)
  • Request data portability

To exercise your rights, please contact us at hello@themerryzebra.co.uk.

We may need to verify your identity before responding.

10. Children’s Data

Our Website is not intended for children under the age of 13, and we do not knowingly collect personal data from children under 13.

If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We implement appropriate technical and organisational measures to protect your personal data.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve your concerns.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
https://www.ico.org.uk

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or how we operate.

Any updates will be posted on this page with a revised “Last updated” date.