Privacy Policy

Merchrix brings creators and fans together through communities, squads, rankings, drops and merch. This policy explains how personal information is handled when you visit our website, create an account or use these services.

It covers fans, creators, customers and people who contact us. Third-party websites and services have their own privacy notices.

The information involved depends on how you use Merchrix.

If you provide another person’s information, such as a gift recipient’s details, make sure you have permission to share it for that purpose.

We use information to provide the features you choose and support the Merchrix experience. Depending on your activity, this includes:

• Creating and managing your account and profile.
• Enabling communities, squads, participation and rankings.
• Processing orders, delivery updates, returns and creator payouts.
• Responding to questions and resolving account or transaction issues.
• Detecting fraud, investigating abuse and protecting the platform.
• Understanding service performance and improving features.
• Sending service updates and, where permitted, marketing you can opt out of.

Our basis for processing

Where required by applicable law, processing must have a lawful basis. Depending on the purpose, this may be performing our agreement with you, meeting a legal obligation, consent, or a legitimate interest such as service security, balanced against your rights.

Where we rely on consent, you can withdraw it. Withdrawal does not affect processing that was lawful before you withdrew consent.

Merchrix includes social and community features. Profile information, posts, squad activity and leaderboard positions may be visible to other users according to the feature and the privacy controls available.

Creators may see information about community participation and orders where needed to provide the services you use. Consider the audience before sharing personal information in public content.

Information may need to be shared with the following categories of recipients for the purposes described in this policy:

• Service providers: hosting, technical support, communications, security and other providers that help operate Merchrix.
• Commerce partners: payment processors, relevant creators or sellers, production partners and delivery providers that support an order or payout.
• Other users: information made visible through profiles, posts, communities and rankings.
• Authorities or advisers: where disclosure is required by law or necessary to address legal claims, fraud or safety issues.
• Business successors: where a merger, acquisition or restructuring involves personal information, subject to applicable safeguards and notice requirements.

Providers should receive information appropriate to their role. A payment or delivery provider may also handle information under its own privacy notice.

Cookies and similar technologies can keep you signed in, remember preferences and help a website work reliably. Optional analytics or marketing technologies, if used, require a clear explanation of their purpose and the choices available to you.

You can manage cookies in your browser. Blocking essential cookies may prevent some features from working. Where consent is required for optional technologies, they should only be enabled after you agree.

Personal information should be protected using technical and organisational measures appropriate to its sensitivity and risk. No internet service or storage system can guarantee absolute security.

Information is retained for as long as needed for its purpose, including operating an account, fulfilling orders, resolving disputes and meeting applicable record-keeping requirements. Some transaction or security records may need to remain after an account is closed.

When information is no longer needed, it should be deleted or anonymised. The final policy must specify retention periods, or clear criteria for them, for account, order, verification, support and backup records.

Depending on applicable law and your circumstances, you may have the right to:

You can also unsubscribe from marketing using the instructions in a message. Essential account and order communications may still be necessary.

To make a request, use the verified privacy contact published with the final policy. We may need to verify your identity before responding. Applicable exceptions and response periods depend on the law governing your request.

You may complain to the relevant data protection authority. In Nigeria, this is the Nigeria Data Protection Commission.

Some providers may process information in countries other than the one where you live. Where a transfer is subject to legal restrictions, appropriate safeguards must be put in place.

The final policy should identify the relevant destinations or recipient categories, explain the safeguards used and describe how to request more information about them.

Age eligibility and any parental or guardian consent requirements must be set out clearly before account registration. Services involving children require appropriate protections under applicable law.

If you believe a child has provided information in a way that is not permitted, use the verified privacy contact in the final policy so the matter can be investigated and appropriate action taken.

We may update this policy when services, data practices or legal requirements change. The published policy will display its effective date. Material changes should be communicated through an appropriate notice where required.

Review this page periodically to stay informed about how your information is handled.