Privacy Policy

1. Who we are

MerryYours is operated by CHENGNING INTERNATIONAL TRADING PTE. LTD., a company registered in Singapore, which is responsible for personal information processed through merryyours.com as the data controller. In this policy, “we”, “us” and “our” refer to this company operating under the MerryYours brand. For privacy questions or requests, email [email protected].

2. Information we collect

• Account information: your email address, email-verification records and sign-in session information when you use email verification to access your account and orders.
• Your creations: photos, images, text and other content you upload, together with design settings, previews and the artwork associated with your orders. Only upload personal information you are comfortable providing and have permission to use.
• Orders and delivery: products, variants, quantities, prices, order history, recipient name, shipping address and contact details provided at checkout.
• Payment information: Stripe processes payment details. We receive checkout identifiers, payment status and relevant order and customer details; our application does not store your full payment-card number or security code.
• Communications and technical information: information you send to support, session identifiers, and connection or request information processed by our hosting and security providers, such as IP address and browser information.

3. How we use information

If you choose Google sign-in, we request your Google account identifier and email address, including its verification status, to authenticate you and connect you with your MerryYours account and orders. We do not request access to Gmail messages, contacts, Drive or Calendar. Google tokens are used during sign-in and are not retained for ongoing access. You can choose email-code sign-in instead and manage app access in your Google Account settings.

If you choose Facebook sign-in, we request your app-specific Facebook identifier and, if you allow it, your email address. We use these only to authenticate you and connect your MerryYours account and orders. Facebook authorization signs you in directly, even if no email is provided. Your Facebook identifier determines account and order ownership; a matching email alone does not merge accounts. The email, when provided, is used as contact information. We retain the account link, not Facebook access tokens, and do not request your posts, friends, messages or advertising data. You can remove MerryYours in Facebook’s Apps and Websites settings or use email-code sign-in.

We use information to operate the store, save and display your designs, maintain your shopping bag, verify your email, process payments, provide order history, prepare and fulfill orders, send service messages, respond to support requests, prevent abuse and comply with applicable obligations.

Where applicable data-protection law requires a legal basis, we process information to perform our contract with you, meet legal obligations, pursue legitimate interests such as service security and support, or obtain your consent where required.

4. Cookies and sessions

We use an essential session cookie named my_session to connect your browser with your shopping and sign-in session. It has a rolling 30-day lifetime that may renew when you use the service. Email verification codes expire after 10 minutes.

You can remove or block cookies in your browser settings, but sign-in, shopping-bag and checkout features may stop working. Payment and security providers may also use cookies or similar technologies as part of their services.

5. When information is shared

Information needed to operate the service may be shared with payment providers such as Stripe, hosting and security providers, email-delivery providers, and production and shipping partners when fulfilling an order. For example, fulfillment may require your chosen artwork and delivery details. Authorized staff may access information to manage orders and provide support.

Xiamen Lantu Century Network Technology Co.,Ltd. provides technical development and maintenance services for the storefront. It is a technical service provider, rather than the operator of MerryYours.

We may also disclose information when required by law, to protect people or the service, or as part of a business transfer subject to appropriate protections. We do not sell your personal information or provide your uploaded artwork to advertisers.

6. Retention and security

We retain account, design, order and support information for as long as needed to provide the service, handle order issues, maintain required records and meet legal obligations. Different records may have different retention periods; expiration of a sign-in session does not automatically delete your account, designs or orders.

We use access controls and technical safeguards to help protect information. No storage or transmission method is completely secure. Service providers may process information outside your state or country; applicable protections and transfer requirements apply.

7. Your choices and requests

You may ask to access, correct or delete your personal information by contacting [email protected]. Depending on your location, you may also have rights to receive a copy of your data, restrict or object to processing, withdraw consent, or complain to your local data-protection authority.

To request deletion of Facebook-related data, email [email protected]with the subject “Facebook data deletion” from the email linked to your MerryYours account. Ask us to remove your Facebook account link and specify whether you also want your MerryYours account deleted. We will verify the request and confirm when it has been handled. Removing app access on Facebook does not by itself delete records already held by MerryYours.

We may need to verify your identity before acting on a request. Some records may need to be kept for legal, payment-dispute or other permitted purposes. Please do not email payment-card details or unnecessary sensitive documents.

8. Children and third-party services

The store is intended for adults and is not directed to children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and address it.

Third-party websites and payment services have their own privacy notices. This policy covers MerryYours and does not replace those notices.

9. Updates and contact

We may update this policy as the service changes. The date above identifies the latest revision. Where required, we will provide additional notice of material changes. Contact MerryYours at [email protected] with questions about this policy or your information.