Effective date: 14 October 2026
This policy explains what personal data YVL Merch collects when you visit yvlmerch.com, place an order, or contact us; how that data is used; who it is shared with; and the choices you have. It applies to this website only. Links to other sites, including payment providers and social platforms, are governed by their own policies.
Who we are
Store: YVL Merch, operating at yvlmerch.com
Operated by: [LEGAL BUSINESS NAME], [REGISTERED ADDRESS]
Privacy contact: support@yvlmerch.com
YVL Merch is the data controller for the personal data described in this policy. YVL Merch is an independent retailer and is not operated by, affiliated with, or endorsed by any artist, record label or other brand whose products are sold here.
Information we collect
| Category | What · How we get it |
|---|---|
| Order & account data | Name, email address, phone number, billing and shipping address, order history, size selections, account login details if you register · Checkout, account registration, order forms |
| Payment data | Card type, last four digits, transaction ID. Full card numbers are never stored on our servers — they go directly to our payment processor · Checkout |
| Communications | Emails, contact-form messages, support requests, product reviews and comments you choose to leave · When you contact us or post on the site |
| Device & usage data | IP address, browser type, device type, pages viewed, time on page, referring site, approximate location derived from IP · Automatically, via server logs, cookies and analytics tools |
| Marketing preferences | Newsletter sign-up status, email opens and clicks · Only if you subscribe |
We do not knowingly collect data from anyone under 16. If you believe a minor has provided data to us, email support@yvlmerch.com and we will delete it.
How we use it
| Purpose | Data used · Legal basis |
|---|---|
| Fulfilling your order | Order, payment and shipping data · Performance of a contract |
| Customer support | Communications, order data · Contract / legitimate interest |
| Fraud prevention & security | Payment, device and usage data · Legitimate interest / legal obligation |
| Site analytics & improvement | Device and usage data · Consent (where required) / legitimate interest |
| Marketing emails | Email, preferences · Consent — you can unsubscribe at any time |
| Legal, tax & accounting | Order and payment records · Legal obligation |
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Who we share it with
Service providers may only use your data to deliver their service to us. Some are located outside your country; where data leaves the EEA or UK we rely on standard contractual clauses or an adequacy decision.
Cookies
| Essential | Cart, checkout session, login, security. Cannot be switched off — the store does not work without them. |
|---|---|
| Analytics | Measure traffic and page performance so we can improve the site. Anonymised where possible. |
| Marketing | Only set if you accept them. Used to show relevant ads on other platforms. |
You can clear or block cookies in your browser settings. Blocking essential cookies will prevent checkout from working.
How long we keep it
| Order & payment records | 7 years from the order date, for tax and accounting law. |
|---|---|
| Account data | Until you delete your account or ask us to. |
| Support emails | 2 years after the last message. |
| Marketing list | Until you unsubscribe. |
| Analytics data | 14 months, then aggregated or deleted. |
Your rights
Depending on where you live (including the EU, UK, California and other jurisdictions) you may have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate data
- Delete your data, where we have no legal reason to keep it
- Restrict or object to certain processing, including direct marketing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting earlier processing
- Complain to your local data protection authority
To use any of these rights, email support@yvlmerch.com from the address linked to your order or account. We respond within 30 days and may ask you to confirm your identity first. We will not treat you differently for exercising your rights.
Security
The site runs over HTTPS, payments are handled by PCI-compliant processors, and access to order data is limited to staff who need it to fulfil orders. No system is completely secure; if a breach affects your data we will notify you and the relevant authority as the law requires.
Changes to this policy
We update this page when our practices change. The effective date at the top shows the latest version. Material changes will be flagged on the site or by email to account holders.
Contact
Email: support@yvlmerch.com
Post: [LEGAL BUSINESS NAME], [REGISTERED ADDRESS]
Privacy requests are handled by email. For order, sizing or shipping questions use the same address or the contact page.