Your data in trusted hands

1. Who are we?

Merch-Master is a Dutch print and embroidery service. We are responsible for the processing of personal data as described in this privacy policy.

• Name: Merch-Master
• Chamber of Commerce (KvK): 69450439
• VAT no.: NL002343806B21
• Email: info@merch-master.com
• Website: merch-master.com

2. What data do we collect?

Depending on what you do with us, we collect:

• Contact details — first name, last name, email address, phone number and address (when you order, request a quote or get in touch).
• Company details — company name, Chamber of Commerce and VAT number (optional, if you order as a business).
• Order details — product, colour, sizes, chosen print technique, amounts and payment status.
• Uploaded files — logos and designs you upload in the online design tool.
• Account details — email and name if you create an account (via Clerk).
• Technical data — IP address, browser and a session ID in your browser (localStorage) to remember your cart.

3. Why do we process this data?

• To process, confirm and deliver your order or quote.
• To communicate with you about your project (confirmation email, digital proof, delivery).
• To handle payments securely via PayPal.
• To comply with tax and legal retention obligations (invoicing).
• To improve our website and design tool.

4. Who do we share data with?

We never sell your data. We only share it with parties that help us deliver the service — and only as far as needed:

• Supabase — storage of orders, quotes and uploaded logos (EU servers).
• Clerk — account and login management.
• PayPal — payment processing.
• Hostinger — sending confirmation emails through our business email.
• Vercel — hosting of the website.
• Suppliers — e.g. for product data and delivery services for shipping.

5. How long do we keep your data?

We keep order data and invoices for 7 years (statutory tax retention obligation). We keep quotes and contact requests for up to 2 years after the last contact. We keep uploaded logos for as long as your order is active and can delete them on request.

6. Cookies and localStorage

We do not use tracking or marketing cookies. We do store technical data in localStorage in your browser: a session ID and your cart. You can clear this at any time via your browser settings.

7. Your rights

Under the GDPR you have the following rights:

• Access to the data we hold about you.
• Correction or deletion of data.
• Restriction of or objection to the processing.
• Transfer of data (data portability).
• Withdrawal of consent.
• Filing a complaint with the Dutch Data Protection Authority.

Want to exercise one of these rights? Email info@merch-master.com — we respond within 30 days.

8. Security

We use HTTPS across the entire website, encrypted databases and a strong password policy for our systems. Access to your data is limited to staff who need it to carry out their work.

9. Changes

We may update this privacy policy. You will always find the latest version on this page, with the date on which it was updated.