Skip to Content
mercer
⌕US·USDTheme Store →
Privacy

What we collect. And why.

Last updated · 2026-05-12

Mercer is a Shopify theme distributed by ZBANG LTD. This page covers mercertheme.com — the marketing and documentation site you're on now. It does not cover what your own Shopify storefront collects when you install Mercer (that's governed by Shopify's policies and your own).

What we collect

  • Support form submissions — when you contact us via /support, we receive: name, email, store URL, issue type, subject, message, plus diagnostic metadata (user-agent, referrer, IP hint, submission timestamp).
  • Anti-spam verification — we use Cloudflare Turnstile to verify form submissions aren't from bots. Cloudflare processes some technical signals (IP, browser fingerprint) to issue verification tokens.
  • Server access logs — Vercel (our hosting provider) logs basic HTTP request data for ~7 days, used for debugging and abuse prevention.

What we don't collect

  • Analytics — no Google Analytics, no Plausible, no third-party trackers. The browser console is your only tracker on this site.
  • Cookies for tracking — we set no cookies on mercertheme.com. (Cloudflare Turnstile may set a short-lived security cookie on its own iframe; we don't read it.)
  • Cross-site identifiers — we don't fingerprint, don't share data with ad networks, don't build merchant profiles.

How we use what we collect

Support form data is used only to respond to your inquiry. It's routed via Make.com (a workflow automation service) to our support inbox and a personal auto-responder. We don't use it for marketing, don't sell it, don't share it.

Retention

  • Resolved support threads — retained for 18 months after the last reply, then deleted from our inbox.
  • Open support threads — retained until resolved.
  • Server logs — Vercel's default ~7 days; we don't extend.

Your rights

You can request a copy of your data, correct it, or delete it. Email privacy@mercertheme.com and we'll respond within 30 days.

If you're in the EU, UK, or California, you have specific rights under GDPR, UK-GDPR, and CCPA respectively, including the rights of access, rectification, erasure, restriction, portability, and objection. The contact above is the way to exercise them.

Third parties

The services that touch your data on this site:

Updates

If we change this policy materially, we update the date at the top. The last-updated stamp is the definitive version. Significant changes get a banner notice for 30 days.

Contact

ZBANG LTD · privacy@mercertheme.com