Who we Are

We at Project Merchandise are committed to protecting your privacy. This Privacy Policy applies to the information and data collected by Project Merchandise as a controller, including the information collected on this Website or through other channels as described below. This Privacy Policy describes how we collect, receive, use, store, share, transfer, and process your personal information. It also describes your choices regarding use, as well as your rights of access and correction of your personal information.

We periodically update this Privacy Policy to ensure we’re up-to-date with the latest regulations and legislation. We will post any privacy policy changes on this page and, if the changes are material, we will provide a more prominent notice by sending you an email notification. This policy was last updated on 8th August 2025.

While we will notify you of any material changes to this Privacy Policy prior to the changes becoming effective, we encourage you to review this Privacy Policy periodically. We will also keep prior versions of this Privacy Policy in an archive for your review.

What Information we
Collect About you

When You Visit our Website

You are free to explore the Websites without providing any personal data about yourself. When you visit the Websites or register for any of our services such as the Subscription Service, we request that you provide personal data about yourself, and we collect Navigational Information.

“Personal Data”

This refers to any information that you voluntarily submit to us and that identifies you personally, including contact information, such as your name, e-mail address, company name, address, phone number, and other information about yourself or your business. personal data can also include information about any transactions, both free and paid, that you enter into on the Website, and information about you that is available on the internet, such as from Facebook, LinkedIn, Twitter and Google, or information that we acquire from service providers.

Navigational information refers to information about your computer and your visits to the Websites such as your IP address, geographical location, browser type, referral source, length of visit and pages viewed. Please see the “Use of Navigation Information” section below.

“Financial and Sensitive Information”

This refers to credit or debit card numbers, personal financial account information, National Insurance numbers, passport numbers, driver’s licence numbers or similar personal identifiers, racial or ethnic origin, physical or mental health condition or information, or other employment, financial or health information. We don’t normally collect sensitive information unless you are an employee.

Log Files

When you view content provided by us, we automatically collect information about your computer hardware and software. This information can include your IP address, browser type, domain names, internet service provider (ISP), the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, clickstream data, access times and referring website addresses. This information is used by Project Merchandise to provide general statistics regarding use of the Websites. For these purposes, we do link this automatically-collected data to other personal data such as name, email address, address, and phone number.

Information we Collect from Third Parties

From time to time, we may receive personal data about you from third party sources including partners with which we offer co-branded services or engage in joint marketing activities, and sources such as social media websites.

Information About Children

The Website is not intended for or targeted at children under 16, and we do not knowingly or intentionally collect personal information about children under 16. If you believe that we have collected personal information about a child under 16, please contact us at [email protected], so that we may delete the information.

How and Where Do We Store Your Data?

We only keep your personal data for as long as we need to in order to use it as described in this policy and for as long as we have your permission to keep it.

We will store some of your personal data in the UK. This means that it will be fully protected under the UK’s Data Protection Legislation.

We will store some of your personal data within the European Economic Area (the “EEA”). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. This means that your personal data will be fully protected under the EU GDPR and/or to equivalent standards by law. Transfers of personal data to the EEA from the UK are permitted without additional safeguards.

We may store some or all of your personal data in countries outside of the UK and EEA. These are known as “third countries”. When We do, We ensure that appropriate safeguards are in place to protect your data. These safeguards include ensuring that the level of protection in the destination country is not materially lower than that required under the Data Protection Legislation.

We use third-party software and some of your data may be stored on their servers.

Steps We take to secure and protect your data include:

  • All devices and computers that we store your data on are password protected;
  • All devices and computers that we store your data have anti-virus software and are constantly updated to the most recent operating system; and
  • We only store your data on computers and devices owned by us or owned by any subcontractors that we use. We also use third-parties to handle the sale of and dispatch products on our behalf who may also store our data on their computers, servers and any such cloud storage they may access. We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.

How we Share Information we Collect

We use the information we collect only in compliance with this Privacy Policy.

We never sell personal data to any third party.

We may sometimes contract with third parties to supply products and services to you on our behalf. These may include payment processing, goods facilitators, delivery of goods, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your personal data. Where any of your personal data is required for such a purpose, We will take all reasonable steps to ensure that it will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.

Use of Personal Data

In addition to the uses identified elsewhere in this Privacy Policy, we may use your personal data to:

  • improve your browsing experience by personalising the Website
  • send information or Project Merchandise content to you which we think may be of interest to you by post, email, or other means and send you marketing communications relating to our business;
  • promote use of our services to you and share promotional and information content with you in accordance with your communication preferences;
  • contact you about billing, account management, and other administrative matters;
  • send information to you regarding changes to our Customer Terms of Service, Privacy Policy (including the Cookie Policy), or other legal agreements;
  • investigate and help prevent security issues and abuse;
  • and meet legal requirements.

We may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, we do not transfer your personal data to the third party.

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

Customer Testimonials and Comments

We post customer testimonials and comments on our Website, which may contain personal data. We obtain each customer’s consent via email prior to posting the customer’s name and testimonial.

External Websites

Our Websites provide links to other websites of third parties. We do not control, and are not responsible for, the content or practices of these other websites. Our provision of such links does not constitute our endorsement of these other websites, their content, their owners, or their practices. This Privacy Policy does not apply to these other websites, which are subject to any privacy and other policies they may have.

Retention of Personal Data

How long we keep information we collect about you depends on the type of information, as described in further detail below. After such time, we will either delete or anonymise your data or, if this is not possible, then we will securely store your data and isolate it from any further use until deletion is possible.

We retain personal data that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations or to resolve disputes).

When we have no ongoing legitimate business need to process your personal data, we securely delete the information or anonymise it or, if this is not possible, securely store your personal data and isolate it from any further processing until deletion is possible. We will delete this information at an earlier date if you so request, as described in the “How to Access & Control Your Personal Data” below.

If you have elected to receive marketing communications from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our content, products, or services, such as when you last opened an email from us. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.

How we use Information
we Collect

Compelled Disclosure

We reserve the right to use or disclose your personal data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process.

Cookie Policy

Our Use Of Cookies

Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and Personal Data is protected and respected at all times.

All Cookies used by and on Our Site are used in accordance with current Cookie Law. We may use some or all of the following types of Cookie:

Analytics Cookies

It is important for us to understand how you use our website, for example, how efficiently you navigate around it and which features you interact with: Where permitted by law, we may use certain analytics cookies that help Us gather this information without requiring your consent. These cookies are used solely to improve the performance and usability of our website and do not collect information that identifies you personally. Where analytics cookies are used for any other purpose or involve tracking, we will always request your consent.

Functionality Cookies

Functionality Cookies enable us to provide additional functions to you on our website such as personalisation and remembering your saved preferences. Some functionality Cookies may also be strictly necessary Cookies, but not all necessarily fall into that category.

Targeting Cookies

It is important for us to know when and how often you visit our website, and which parts of it you have used (including which pages you have visited and which links you have visited). As with analytics Cookies, this information helps us to better understand you and, in turn, to make Our Site and advertising more relevant to your interests.

Persistent Cookies

Any of the above types of Cookies may be a persistent Cookie. Persistent Cookies are those which remain on your computer or device for a predetermined period and are activated each time you visit Our Site.

Session Cookies

Any of the above types of Cookie may be a session Cookie. Session Cookies are temporary and only remain on your computer or device from the point at which you visit Our Site until you close your browser. Session Cookies are deleted when you close your browser.

Certain features of Our website depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”. Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser’s settings, but please be aware that our website may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them.

The following first, third party and analytics Cookies may be placed on your computer or device:

Cookie NameFirst or Third PartyProvider / DomainCookie TypePurpose Summary
_clskFirst partyprojectmerchandise.comAnalyticsMicrosoft Clarity session tracking to link multiple page views into one session.
_gaFirst partyprojectmerchandise.comAnalyticsGoogle Analytics user identification and traffic statistics.
_ga_EW8SWPKC1XFirst partyprojectmerchandise.comAnalyticsGoogle Analytics for session tracking and event data.
AECThird partygoogle.comNecessaryEnsures user initiated requests and prevents malicious actions during browsing sessions.
ANONThird partyclarity.msAnalyticsAnonymous Microsoft Clarity session identifier.
APISIDThird partygoogle.comAdvertisingBuilds a profile of visitor interests for personalised Google ads.
HSIDThird partygoogle.comSecurityProtects user data with signed digital records of a logged in Google user account.
MUIDThird partyclarity.msAdvertisingMicrosoft unique user ID used for tracking and advertising.
NAPThird partyclarity.msAnalyticsIdentifies users across Microsoft Clarity services.
NIDThird partygoogle.comAdvertisingUsed for remarketing, ad personalisation, and limiting ad frequency.
SAPISIDThird partygoogle.comAdvertisingBuilds a visitor interest profile for targeted advertising.
sbjs_currentThird partyprojectmerchandise.comAnalyticsIdentifies the current traffic source using Sourcebuster.
sbjs_current_addFirst partyprojectmerchandise.comAnalyticsStores additional session level Sourcebuster data.
sbjs_firstFirst partyprojectmerchandise.comAnalyticsRecords the first traffic source for the visitor.
sbjs_first_addFirst partyprojectmerchandise.comAnalyticsAdditional data for the visitor’s initial session.
sbjs_migrationsFirst partyprojectmerchandise.comAnalyticsTracks migrations between Sourcebuster cookie versions.
sbjs_sessionFirst partyprojectmerchandise.comAnalyticsTracks pages viewed during each session.
sbjs_udataFirst partyprojectmerchandise.comAnalyticsStores browser data and visit behaviour.
SEARCH_SAMESITEThird partygoogle.comNecessaryEnforces SameSite rules and protects from cross site request forgery.
SIDThird partygoogle.comSecurityVerifies Google user identity and protects user data.
SIDCCThird partygoogle.comSecurityProvides security to protect user data from unauthorised access.
SSIDThird partygoogle.comSecurityHelps authenticate Google users and store preference information.
UULEThird partygoogle.comAdvertising/AnalyticsSends approximate user location to Google for personalised search results.
li_fat_idThird partylinkedin.comAdvertisingIdentifies LinkedIn users for ad tracking, attribution, and retargeting.
li_sugrThird partylinkedin.comAnalyticsHelps LinkedIn identify browsers and analyse website use.
lidcThird partylinkedin.comNecessary/PerformanceEnsures correct routing and load balancing for LinkedIn services.
lms_adsThird partylinkedin.comAdvertisingUsed for LinkedIn ad analytics and performance measurement.
lms_analyticsThird partylinkedin.comAnalyticsUsed by LinkedIn to analyse website traffic and behaviour.
UserMatchHistoryThird partylinkedin.comAdvertisingEnables LinkedIn retargeting and cross device ad matching.
AnalyticsSyncHistoryThird partylinkedin.comAnalyticsRecords when LinkedIn synchronises analytics cookies with external partners.

In addition to the controls that we provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third-party cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

You can choose to delete Cookies on your computer or device at any time, however you may lose any information that enables you to access out website more quickly and efficiently including, but not limited to, login and personalisation settings.

To Unsubscribe From Our Communications or Request a Copy of your Information

Reviewing, Correcting and Removing Your Personal Data

You have the following data protection rights:

  • You can request access, correction, updates or deletion of your personal information.
  • You can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
  • If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
  • You have the right to complain to the Information Commissioner’s Office “ICO” about our collection and use of your personal information. Contact details for the ICO are available here: https://ico.org.uk/
  • To exercise any of these rights, please contact us at [email protected] with the Subject: Privacy. We will respond to your request to change, correct, or delete your information within a reasonable timeframe and notify you of the action we have taken.

To Unsubscribe From Our Communications or Request a Copy of your Information

You may unsubscribe from our marketing communications by clicking on the “unsubscribe” link located on the bottom of our e-mails, updating your communication preferences. Customers cannot opt out of receiving transactional emails related to their account with us.

You have the right to request a copy of any of your personal data that we hold (where such data is held). Under the Data Protection Legislation, no fee is payable, we are required to reply to you within one month, and we will provide any and all information in response to your request free of charge, provided the request is reasonable. If we require clarification to help us locate the information you are seeking, we may pause the one-month response period until we receive that clarification. We will also carry out a search that is reasonable and proportionate based on the scope and nature of your request.

If you have any concerns about how we collect or use your personal data, we encourage you to contact us in the first instance so that we can try to resolve the issue. We aim to respond to all complaints within 30 days. Where your concern is complex or requires more time, we will let you know and keep you updated on progress. If you are not satisfied with our response, or if you would prefer not to speak to us first, you can contact the UK’s data protection authority: Information Commissioner’s Office (ICO) https://ico.org.uk/.

If you have any questions about this Privacy Policy or our treatment of the information you provide us, please write to us by email at [email protected].