Privacy notice

Version: 11 October 2026

1. Information you provide

When you create or use an account, the platform processes information such as your name, email address, profile details, business memberships and the account settings you choose. Features you use may process business details, product information, orders, invoices, employee information, customer records and communications.

Support requests contain the information you choose to provide. Include only what is needed to explain the issue, and avoid sending passwords, recovery codes or full payment-card details.

The public contact form prepares a message in your own email app. Its fields stay in your browser until you choose to send the email. Opening a draft does not send a message to Merchanth.

2. How information is used

Information is used to create and manage accounts, provide the business features you choose, process account and billing actions, respond to requests, and support platform security and operation. For example, your email address can be used for verification, password recovery and account messages.

The platform also records operational and security information, such as session details and relevant activity, to help manage access, investigate issues and protect accounts.

3. Cookies and account sessions

Web account sessions use a refresh cookie that browser JavaScript cannot read. Access tokens are kept in browser memory by the account application. Additional security cookies can be used to protect account actions.

The public marketing site directs business sign-in and registration to the account portal. It does not store a business access token in local storage or obtain a business session just to personalise its navigation.

The website’s font is served with the website. This version of the marketing site does not include an advertising tracker. Your browser, email app and any external services you choose to open operate under their own settings and notices.

4. Business records and customer information

Businesses control the records they add and manage through their workspaces. If you are a customer of a business using Merchanth, contact that business about its products, orders, customer records and privacy practices.

Workspace access depends on business membership and assigned permissions. Account owners should review who has access and keep business information accurate.

5. Connected services

Features can use services for hosting, file storage, payments, email, messaging and other operations. Information relevant to an enabled service may be processed by that service. Review the information and conditions shown when connecting or using it.

Payment details entered in a connected payment flow may be processed by the payment provider. Do not include payment-card details in support requests or general enquiry messages.

6. Keeping and removing information

How a record is retained depends on its purpose, the feature involved and the account or business lifecycle. Account closure does not necessarily remove every business, billing or security record immediately.

Contact support if you need to understand what an account change or deletion request will affect. Keep a copy of business records you are responsible for maintaining before closing an account.

7. Questions and privacy requests

You can update the profile fields available in your account. For access, correction, deletion or another privacy request, use account support or the contact page and describe what you need. We may need information to verify the account or business concerned before a request can be handled.

If your request concerns information held by a merchant, contact the merchant first. Your applicable privacy rights depend on your location and the context in which information is processed.