Last updated: July 13, 2026

MERCI attaches great importance to the protection of your personal data and to respecting your privacy.

The purpose of this Privacy Policy is to inform you about how MERCI collects and processes your personal data when you browse the website www.mercamerci.com (hereinafter the “Site”).

MERCI reserves the right to update and amend this Privacy Policy at any time. In the event of any changes, the “Last updated” date above will be amended to indicate when such changes took effect.

In the event of a material change to the Privacy Policy, MERCI will inform you by email.

By using the Site, you acknowledge that you have read this Privacy Policy.

1. Data Controller

The data controller responsible for processing your personal data is:

MERCI
Société par Actions Simplifiée (French simplified joint-stock company)
Share capital: €103,555
Registered office: 84 rue Amelot, 75011 Paris, France
Registered with the Paris Trade and Companies Register under number 504 330 754
Intra-Community VAT number: FR48504330754
Email: eshop@merci.paris
Telephone: +33 (0)1 42 77 73 58

2. Data Collected and Purposes of Processing

The term “Personal Data” refers to any information that allows you to be identified directly (for example, your first name, last name or email address) or indirectly (for example, your customer number or IP address).

The Personal Data collected varies depending on your interactions with MERCI through the Site and the purposes associated with those interactions.

Personal Data may be collected, in particular, when you create a customer account, subscribe to the newsletter, browse the Site, place an order or contact MERCI. Such processing is carried out in particular to manage our commercial relationship, fulfil orders, provide the services offered or comply with applicable legal obligations.

The information collected is strictly limited to what is necessary for the purposes for which it is processed. It may include:

• identification and contact information (such as your first name, last name, email address, postal address, telephone number, country and language);
• information relating to transactions and payments (purchases, orders and returns). Banking information is securely processed by authorised service providers and is not retained by MERCI;
• technical and browsing data (such as IP address, browser characteristics, information about the device used and browsing activity on the Site), collected in particular through cookies, trackers or similar technologies. Some cookies are essential to the operation of the Site, while others help improve your experience and personalise the services offered. Trackers may also be included in some of our emails in order to measure whether they have been opened, analyse their performance and personalise the content and offers presented to you. The use of such trackers is subject to your consent where required by applicable regulations. For further information, please refer to the Cookie Policy;
• information relating to your customer account and preferences (purchase history, marketing choices and cookie settings).

Certain information is required to access specific features of the Site or to enable us to provide our services (for example, to deliver an order). If you do not provide such information, access to these features may be restricted.

You undertake to provide accurate information and to keep it up to date in the event of any changes.

MERCI does not collect or process sensitive Personal Data within the meaning of applicable regulations, including data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, health or sex life.

The processing of your Personal Data is based on different legal grounds depending on the purposes of the processing.

MERCI may therefore process your data:

• on the basis of your consent, particularly when you choose to receive marketing communications; you may withdraw your consent at any time;
• where processing is necessary for the performance of a contract entered into with you, in particular for managing your orders and providing related services;
• on the basis of MERCI’s legitimate interests, provided that these interests do not override your fundamental rights and freedoms;
• in order to comply with MERCI’s legal and regulatory obligations.

3. Data Retention

Your Personal Data is retained only for as long as strictly necessary for the purposes for which it was collected, to comply with legal and regulatory obligations and for any period necessary for the establishment, exercise or defence of legal claims.

Accordingly:

• data relating to the management of our commercial relationship is retained for the duration of that relationship and for ten (10) years following its termination;
• data used for marketing purposes is retained for three (3) years from the date of your last contact with us;
• data collected through cookies is retained in accordance with the retention periods set out in the Cookie Policy.

Certain data may also be retained for research or statistical analysis purposes, provided that it has first been anonymised.

4. Disclosure of Personal Data

Access to your Personal Data is strictly limited:

• to authorised MERCI personnel, as required for the performance of their duties and subject to confidentiality obligations. This may include teams responsible for customer relations, e-commerce, marketing, legal, finance and IT functions;
• to third-party service providers acting on behalf of MERCI, solely to the extent necessary to provide the services offered. These providers may include financial institutions, fraud prevention providers, logistics providers (transport and delivery), and technical or marketing partners. Such processing is carried out for the purposes of fulfilling orders, managing payments, securing transactions or improving the user experience on the Site. In this context, these third parties act on MERCI’s instructions, use the data solely for the purposes entrusted to them and are contractually required to ensure its confidentiality and security;
• to competent administrative or judicial authorities where required by law or in connection with legal proceedings.

5. Your Rights

Where the processing of your Personal Data is based on your consent, such consent is obtained in a clear and explicit manner, particularly in relation to marketing communications or the use of cookies. Before giving your consent, you will be informed of how your data will be used and of the nature of the communications you may receive.

Consent is given through an affirmative action on your part (for example, by ticking a dedicated box) and may be withdrawn at any time without justification. Children under the age of fifteen (15) may not consent on their own to the processing of their Personal Data.

You may object to receiving marketing communications at any time, in particular by using the unsubscribe link included in each communication or, where applicable, by changing your preferences in your customer account.

Cookie settings may also be changed at any time. For further information, please refer to the Cookie Policy.

Furthermore, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and French Law No. 78-17 of January 6, 1978 relating to information technology, files and civil liberties, as amended, you have the following rights in relation to your Personal Data:

• the right of access, allowing you to obtain a copy of the Personal Data concerning you;
• the right to rectification, allowing you to have your information corrected or completed;
• the right to erasure, subject to applicable legal obligations;
• the right to restriction of processing;
• the right to data portability in a structured format;
• the right to object, particularly to processing for direct marketing purposes or where processing is based on the Company’s legitimate interests;
• the right to issue instructions concerning the handling of your Personal Data after your death.

You are also informed that you may lodge a complaint with the CNIL (French Data Protection Authority) and that you may register free of charge on the French telephone marketing opt-out list in order not to receive commercial solicitation by telephone.

To exercise these rights, you may contact MERCI:

by email at eshop@merci.paris; or

by post at:

MERCI
84 rue Amelot
75011 Paris
France

Proof of identity may be requested in order to process your request.

6. Security

MERCI implements all appropriate technical and organisational measures to ensure the security and confidentiality of your Personal Data, in particular to prevent unauthorised access, loss, alteration or disclosure. The information you provide to us is hosted on secure servers. Internal procedures are also in place to detect and address any security incident affecting such data.

When you create a customer account, you choose a password for which you are solely responsible. You are responsible for keeping it confidential and must not disclose it to third parties.

We recommend using secure networks when browsing the Site and remaining vigilant regarding the risks associated with public networks. If you receive a suspicious message claiming to be from MERCI and requesting Personal Data, you should not respond and should report it to MERCI.

Your Personal Data is, in principle, processed within the European Economic Area. Where certain processing activities involve a transfer outside the European Economic Area, MERCI ensures that such transfers are subject to appropriate safeguards in accordance with applicable regulations, such as Standard Contractual Clauses.

COOKIE POLICY

Last updated: July 13, 2026

Subject to your consent where required, MERCI uses cookies, trackers (tracking pixels) and similar technologies to ensure the proper operation of the Site, improve its performance, tailor your browsing experience and, in relation to its electronic communications, measure their opening and performance and personalise the content and offers presented to you.

1. Definitions

Cookies

A cookie is a text file stored on your device when you visit a website. It can be used, in particular, to remember information about you, such as your preferences and browsing activity.

Cookies may allow you to be identified indirectly.

Tracking pixels

MERCI also uses trackers, such as tracking pixels, on the Site or in its electronic communications. These technologies may be used, in particular, to measure email opens, analyse campaign performance and personalise the content and offers presented to you.

2. Categories of Cookies Used

MERCI uses different types of cookies, whether placed directly by MERCI (first-party cookies) or by partners (third-party cookies), in particular for technical, analytical or advertising purposes.

The main categories of cookies used are:

Necessary cookies: Certain cookies are necessary to provide basic functionality. The Site will not function properly without these cookies. They are enabled by default and cannot be disabled.

Analytics cookies: Analytics cookies help us improve our website by collecting and reporting information about how it is used.

Marketing cookies: Marketing cookies are used to track visitors across websites in order to enable publishers to display relevant and engaging advertisements.

Further information about these cookies is provided in the table below.

Necessary cookies

For this section, keep the cookie table as it is and translate only its headings:

• Cookie subgroup
• Cookies
• Cookies used
• First-party cookies
• Third-party cookies

The cookie names themselves — for example _shopify_y, localization, cookiehub_*, df-session, etc. — must not be translated. Texte collé

Analytics cookies

Keep all cookie names and domains unchanged.

Translate the table headings as:

• Cookie subgroup
• Cookies
• Cookies used
• First-party cookies
• Third-party cookies

Marketing cookies

Likewise, keep all technical cookie names and domains unchanged and translate only the headings.

Preference cookies

Keep all technical cookie names and domains unchanged and translate only the headings.

Updated cookie list – see cookie banner

3. Retention Period

Cookies are retained for a limited period proportionate to the purposes for which they are used, in accordance with applicable regulations and the recommendations of the CNIL.

In practice, cookies are generally retained for a maximum period of thirteen (13) months, while data collected through cookies may be retained for up to twenty-five (25) months.

Your choices regarding the placement of cookies are retained for an appropriate period, determined on a case-by-case basis taking into account, in particular, the context and scope of your consent, in accordance with applicable regulations and the recommendations of the CNIL (generally six months).

4. Managing Your Preferences

Cookies

When you first visit the Site, an information banner allows you to accept, reject or configure the use of cookies. The placement of cookies that are not strictly necessary is subject to your prior consent.

Proof of your consent is retained in accordance with the recommendations of the CNIL.

You may change your preferences or withdraw your consent at any time by accessing the cookie management tool available through the banner at the bottom of the Site.