Last updated: June 2026
Who We Are
Merleora is a trading name of Alpha Bijoux Ltd (Company No. 16778015), a UK-registered company. Our registered address is 167-169 Great Portland Street, London, W1W 5PF.
We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy, please contact us at admin@merleora.com.
What Information We Collect
When you use our website or place an order, we may collect the following information:
- Contact details: name, email address, phone number, and delivery/billing address
- Payment information: processed securely via Shopify Payments and PayPal — we do not store your full card details
- Order information: products purchased, order history, and transaction details
- Device and usage data: IP address, browser type, pages visited, and how you interact with our website (via cookies)
- Communications: any messages you send us via email or our contact form
How We Use Your Information
We use your personal data to:
- Process and fulfil your orders
- Send order confirmations, dispatch notifications, and delivery updates
- Respond to your enquiries and provide customer support
- Send marketing emails if you have opted in (you can unsubscribe at any time)
- Improve our website and customer experience
- Comply with our legal obligations
Who We Share Your Information With
We do not sell your personal data. We may share it with trusted third parties only where necessary:
- Shopify: our e-commerce platform provider, which hosts our store and processes orders
- Payment providers: Shopify Payments and PayPal, for secure payment processing
- Shipping carriers: Royal Mail and other carriers, to fulfil and deliver your orders
- Legal authorities: where required by law
Cookies
Our website uses cookies to improve your browsing experience, remember your preferences, and analyse site traffic. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy.
How Long We Keep Your Data
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are typically kept for 7 years for accounting and legal purposes.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Request deletion of your personal data (where applicable)
- Object to or restrict how we process your data
- Data portability — receive your data in a structured, commonly used format
- Withdraw consent for marketing communications at any time
To exercise any of these rights, please contact us at admin@merleora.com.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is hosted on Shopify, which maintains industry-standard security practices.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:
- Email: admin@merleora.com
- Phone: 07916 911615
- Address: Merleora (trading as Alpha Bijoux Ltd), 167-169 Great Portland Street, London, W1W 5PF