Privacy policy

Last updated 17 September 2026

This policy explains what personal information The Merch Labs Ltd (“Merch Labs”, “we”, “us”) collects, why, who we share it with, and what you can do about it. It covers the club shops we run, this website, the My Shop website for clubs, and the My Shop by Merch Labs app.

Who we are

The Merch Labs Ltd, Scunthorpe, DN17. We decide how your information is used, which makes us the “controller” under UK data protection law. You can reach us about anything in this policy at hello@themerchlabs.com.

If you buy from one of our shops

When you place an order we collect:

• your name, email address and phone number
• your delivery address, if it's being posted
• what you ordered, including any names or numbers to be printed
• whether you've opened the emails we send about your order

We use this to make and deliver your order, keep you updated about it, and deal with any problems or refunds. Payment is handled by Stripe on their secure page — we never see or store your card details.

The club whose shop you bought from can see your name, what you ordered and, for orders you're collecting, your phone number. They can't see your email address or home address.

If you sign up for news from a shop, or tick to hear about offers, we'll email you until you unsubscribe. Every marketing email has an unsubscribe link, and it works straight away.

If you run a club's shop

For each person with a My Shop login we keep their name, email address, role at the club, a securely scrambled copy of their password (never the password itself), and when they last signed in. We also keep the club's contact details and the bank details we pay into.

We use this to let you manage your shop, pay the club, and keep a record of who did what — for example who approved a product or handed over an order.

The My Shop app

The app uses the same login as the My Shop website. On top of that it stores:

• On your phone: a sign-in token, kept in your phone's secure storage, so you don't have to sign in every time.
• With us: a notification address for your phone, and whether you want notifications about new orders and products needing approval.

We use the notification address only to tell you about your own shop. Notifications are sent through Expo, the service the app is built on. Signing out of the app removes your phone's notification address straight away.

The app doesn't track you, show adverts, or share anything with advertisers.

Why we're allowed to use it

• To fulfil a contract — making and delivering your order, or running a club's shop under our agreement with them.
• Legitimate interests — keeping accounts secure, preventing fraud, and sending messages about orders or the service.
• Consent — marketing emails, which you can stop at any time.
• Legal obligation — keeping financial records for tax.

Who we share it with

Only the companies we need to run the service, each bound to keep it safe and use it only for us:

• Stripe — takes payments.
• Hostinger — hosts our websites, database and email.
• Expo — delivers app notifications.
• Royal Mail and couriers — deliver posted orders.
• The club — as described above, for orders from their shop.

Some of these companies may handle data outside the UK. Where they do, they use safeguards recognised under UK law. We never sell your personal information.

How long we keep it

• Orders and payment records: six years, because tax law requires it.
• My Shop logins: while the login is in use, and deleted when you or your club asks.
• App notification addresses: until you sign out, or the app stops accepting notifications.
• Marketing sign-ups: until you unsubscribe. We keep a note that you unsubscribed, so we don't email you again.

Your rights

You can ask us to show you the information we hold about you, correct it, delete it, or stop using it for a particular purpose. You can withdraw consent to marketing at any time. To do any of these, email hello@themerchlabs.com. For deleting a My Shop login or app account, see Delete your account or data.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.

Cookies

Our shops only use the cookies they need to work — no advertising or tracking cookies. See the cookie policy for the full list.

Children

Our shops and the My Shop app aren't intended for children under 13. Junior kit is ordered by a parent or guardian.

Changes to this policy

If we change how we use your information, we'll update this page and the date at the top.