Your one-stop shop for custom merchandise
Last updated: December 23, 2024
This Data Processing page describes how Merchkins processes personal data, our commitments as a data processor, and the third-party service providers (subprocessors) we engage to deliver our services. This page supplements our Privacy Policy.
Merchkins is committed to processing personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and applicable international data protection standards.
We process personal data in accordance with the following principles:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Name, email, phone number | Account management, order fulfillment |
| Contact Data | Shipping address, billing address | Order delivery, invoicing |
| Transaction Data | Order history, payment records | Order processing, customer support |
| Technical Data | IP address, browser type, device info | Security, analytics, troubleshooting |
| Communication Data | Messages, support tickets | Customer support, dispute resolution |
Our primary data processing activities include:
When Merchkins processes personal data on behalf of sellers (storefront operators), we act as a data processor under the Data Privacy Act. Our data processing commitments include:
Organizations requiring a formal Data Processing Agreement (DPA) may contact us at business@merchkins.com.
To provide our services, Merchkins engages the following third-party service providers (subprocessors) who may process personal data on our behalf. All subprocessors are contractually bound to process data only as instructed and to maintain appropriate security measures.
United States (with global data centers)
Processing Activities:
Data Processed:
Application data, user sessions, static assets, request logs
United States
Processing Activities:
Data Processed:
User accounts, orders, products, organization data, transaction records
United States (with global edge network)
Processing Activities:
Data Processed:
DNS queries, cached content, uploaded files, request metadata
United States
Processing Activities:
Data Processed:
Email addresses, authentication tokens, session data, profile information
Singapore (serving Southeast Asia)
Processing Activities:
Data Processed:
Payment details, transaction amounts, billing information (tokenized)
United States
Processing Activities:
Data Processed:
Email addresses, email content, delivery status
United States
Processing Activities:
Data Processed:
Customer messages, support conversations, contact information
United States
Processing Activities:
Data Processed:
Business communications, synced emails (for connected accounts)
United States
Processing Activities:
Data Processed:
Error logs, stack traces, browser/device metadata (anonymized)
United States
Processing Activities:
Data Processed:
Application logs, system metrics, request logs (anonymized where possible)
United States
Processing Activities:
Data Processed:
Internal communications only (no customer personal data)
You have the right to know how your data is processed and by whom. For detailed information about your rights under the Data Privacy Act, including how to exercise them, please refer to our Privacy Policy.
If you have questions about our data processing practices or subprocessors, please contact us at business@merchkins.com.
We may update this page from time to time to reflect changes in our subprocessors or data processing practices. Material changes will be communicated through the platform or via email to registered users. We encourage you to review this page periodically.