Privacy Policy

Meritoshop website is owned by Meritoshop, which is a data controller of your personal data.

We have adopted this Privacy Policy, which determines how we are processing the information collected by Meritoshop, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using Meritoshop website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

Last updated: 10.07.2026

High Mobile Accessories ("we", "us", "our") operates maritoshop.co.uk (the "Website"), an online retailer of mobile phone cases and accessories. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our Website, place an Order, or otherwise interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Website, you agree to the practices described in this Policy.

1. Who We Are

High Mobile Accessories is the data controller responsible for your personal data.

• Company name: High Mobile Accessories

• Company number: GB410786309000

• Registered address: 124 City Road, London, EC1V 2NX

• Email: contact@meritoshop.co.uk

If you have any questions about this Policy or how we handle your data, please contact us using the details above.

2. What Personal Data We Collect

We collect the following categories of personal data:

2.1 Information you give us directly

• Contact details: name, email address, phone number, delivery and billing address.

• Order information: items purchased, order value, payment confirmation (we do not store full card details — see Section 4).

• Account information: if you create an account, your login email and password (stored securely, hashed).

• Communications: any information you provide when contacting customer support, leaving a review, or entering a competition/promotion.

2.2 Information collected automatically

• Device and usage data: IP address, browser type, device type, operating system, pages visited, time spent on the Website, and referral source.

• Cookies and similar technologies: see our Cookie Policy and Section 8 below.

2.3 Information from third parties

• Payment confirmation from our payment processor (PaySera/Stripe/PayPal]).

• Delivery status from our courier/shipping partners.

• Marketing platform data, if you interact with our ads or social media (Meta, Google, TikTok), subject to those platforms' own privacy policies.

3. How We Use Your Data and Our Legal Basis

We only use your personal data where we have a valid legal basis to do so:

Purpose

Legal Basis

Processing and fulfilling your Order (payment, delivery, customer service)

Performance of a contract

Responding to enquiries, complaints, or support requests

Performance of a contract / legitimate interests

Sending order confirmations, shipping updates, and service messages

Performance of a contract

Sending marketing emails about offers, new products, or promotions

Consent (you can opt out at any time)

Improving the Website, analysing usage trends, and fraud prevention

Legitimate interests

Complying with tax, accounting, and legal obligations

Legal obligation

Detecting and preventing fraudulent orders or chargebacks

Legitimate interests

We will never use your data in a way that is incompatible with the purposes described above without notifying you.

4. Payment Information

We use PaySera/ Stripe / PayPal / Klarna to process payments securely. When you make a purchase, your card or payment details are sent directly to our payment processor and are not stored on our servers. Our payment processor is independently certified as PCI-DSS compliant. Please refer to their privacy policy for details of how they handle your payment data:

• [PAYMENT PROVIDER PRIVACY POLICY LINK]

5. Sharing Your Data

We do not sell your personal data. We share your data only with:

• Payment processors (e.g., Stripe/PaySera) to process transactions.

• Courier and delivery partners (e.g., Royal Mail, Evri, InPost DPD]) to deliver your Order.

• IT and website hosting providers (e.g., Hostinger, Shopify, WooCommerce hosting provider) who store data on our behalf.

• Email/marketing platforms (e.g., Mailchimp, Klaviyo]) if you've opted in to marketing.

• Analytics providers (e.g., Google Analytics) to understand Website usage.

• Professional advisers (accountants, solicitors,accounting software) where necessary.

• Regulators, law enforcement, or other authorities, where required by law or to protect our legal rights.

• A buyer, if we sell or transfer part or all of our business, subject to confidentiality arrangements.

All third parties who process data on our behalf are required to keep it secure and use it only for the purposes we specify, under a written data processing agreement.

6. International Data Transfers

Some of our service providers (e.g., payment processors, hosting, analytics, or marketing platforms) may store or process data outside the UK, including in the United States or EU. Where this happens, we ensure appropriate safeguards are in place, such as:

• The UK's International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses; or

• Transfers to countries with UK "adequacy" status; or

• Other safeguards recognised under UK GDPR.

7. Cookies

7.1. Our Website uses cookies and similar technologies to make the Website function properly, remember your preferences, and understand how visitors use the site.

7.2. Types of cookies we use:

• Essential cookies — required for the Website to function (e.g., shopping basket, checkout).

• Analytics cookies — help us understand Website usage (e.g., Google Analytics).

• Marketing/advertising cookies — used to show relevant ads and measure campaign performance (e.g., Meta Pixel, Google Ads, TikTok Pixel), only with your consent.

7.3. When you first visit our Website, you will be shown a cookie banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time via [COOKIE SETTINGS LINK] or your browser settings.

7.4. For full details, see our Cookie Policy.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes it was collected:

Data Type

Typical Retention Period

Order and transaction records

6 years (for tax/accounting purposes under UK law)

Account information

Until you close your account, plus a reasonable period for legal/fraud purposes

Marketing preferences and email data

Until you unsubscribe, plus a suppression record to honour your opt-out

Customer service correspondence

Up to [5 years] for quality and dispute-resolution purposes

Website analytics/cookie data

As set out in our Cookie Policy

9. Your Rights Under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.

• Rectification — ask us to correct inaccurate or incomplete data.

• Erasure — ask us to delete your data, subject to legal/contractual retention requirements.

• Restriction — ask us to limit how we use your data in certain circumstances.

• Portability — request your data in a structured, commonly used format to transfer elsewhere.

• Object — object to processing based on legitimate interests or for direct marketing purposes (you can unsubscribe from marketing emails at any time via the link in each email).

• Withdraw consent — where processing is based on consent (e.g., marketing), you can withdraw it at any time.

• Not be subject to automated decision-making that produces legal or similarly significant effects, without human involvement (we do not currently use automated decision-making of this kind).

To exercise any of these rights, contact us at contact@meritoshop.co.uk. We will respond within one month, as required by law. We may need to verify your identity before processing certain requests.

If you are unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113

10. How We Protect Your Data

We use appropriate technical and organisational measures to protect your personal data, including:

• Encrypted (HTTPS/SSL) connections across the Website;

• Secure, access-controlled storage of customer and order data;

• PCI-DSS compliant third-party payment processing (we do not store full card details);

• Restricted internal access to personal data on a need-to-know basis;

• Regular review of our data handling practices and third-party providers.

No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data against unauthorised access, loss, or misuse.

11. Children's Privacy

Our Website and Products are not directed at children, and we do not knowingly collect personal data from anyone under 18 without appropriate consent. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Marketing Communications

12.1. If you opt in, we may send you marketing emails about new products, offers, and promotions.

12.2. You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at contact@meritoshop.co.uk.

12.3. Even if you opt out of marketing, we will still send you essential service communications (e.g., order confirmations, delivery updates).

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: contact@meritoshop.co.uk