Privacy policy

Last updated: November 7, 2026

Who is responsible

Datavex Labs Ltd (company number 17036825), trading as Merylou. Registered office: Unit A3, Castle Road, Sittingbourne, Kent, ME10 3EW, United Kingdom. Merylou is responsible for the personal information we use to run this website and fulfill your orders. Email contact@merylou.com with the subject “Privacy request”. This policy explains our practices for US customers and other visitors; the rights that apply depend on your location and applicable law.

Information we collect and why

We use the name, email, shipping address, phone number if supplied, order and payment references, selected offers, quantities, amounts and support messages you provide to process purchases, deliver orders, provide the included guide, handle returns and answer questions. Payment-card details are handled by Whop and its payment partners, not collected in full on our server.

Website technologies may collect browser and device information, IP addresses, page interactions and advertising click identifiers for security, site operation, analytics and permitted advertising measurement. We also use records to prevent fraud, meet accounting obligations and handle legal claims. Where UK data-protection law applies, our bases include contract performance, legal obligations, legitimate interests for security and fraud prevention, and consent for optional analytics and marketing where required.

Recipients and payment services

Shopify hosts our storefront and manages orders, fulfilment records and transactional emails. Whop provides checkout, payment and related security services. TeemDrop fulfils pillow orders, while DSers connects accessory orders to the selected AliExpress suppliers. Fulfillment partners and carriers receive the order and contact details necessary to deliver your purchase. Email and hosting providers process support and website data. Information may also be disclosed where required by law or necessary to address fraud or protect legal rights.

Whop also processes information for its own services under its privacy policy, which explains its cookies, analytics, advertising and privacy choices. Choices about Merylou's optional Meta, Google Analytics and Clarity integrations remain separate from choices offered by Whop.

Meta measurement and advertising choices

If you accept marketing measurement, Meta Pixel and server-side events help measure visits and purchases. Meta may receive browser and click identifiers, the purchase amount and currency, event time and payment reference for deduplication, and a hashed email for matching. Hashing does not make the email anonymous. We do not include card details, postal addresses or answers about your health in those events.

We do not sell personal information for money. Disclosing identifiers and activity to advertising services may count as “sharing” for cross-context behavioral advertising or a “sale” under certain state privacy laws. You can withdraw any previously saved permission here: Turn off optional measurement. Our optional Meta, Google Analytics and Clarity scripts do not start when your browser sends a Global Privacy Control signal. Checkout remains available if you decline.

Analytics and storage

Without previously saved analytics permission, Google Analytics and Microsoft Clarity may send limited cookieless measurements of page views and basic page interactions. Analytics and advertising storage remain denied in that mode; we do not assign a persistent identifier or send your contact, order or payment details. This cannot reliably identify unique or returning visitors or connect a journey across pages. Previously saved analytics permission enables more complete analytics. A Global Privacy Control signal disables these integrations. Advertising storage and advertising personalization remain disabled in Google Analytics and Clarity.

With analytics permission, Google Analytics 4 measures page visits, traffic sources, product views, additions to the basket and the start of checkout. We send the page address with only approved campaign parameters, basic device information and, for basket events, the offer, quantity, value and currency. We do not send Google names, emails, phone numbers, shipping addresses, payment references or information you provide about your health. Advertising personalization and Google signals are disabled in our Google tag. Its first-party analytics cookies last up to 90 days and permission can be withdrawn using the opt-out control on this page. Google processes this information under its Privacy Policy.

With analytics permission, Microsoft Clarity helps us understand clicks, scrolling and navigation through heatmaps and session recordings. Clarity masks form inputs and sensitive text. We do not load it on checkout, order-confirmation or order-tracking pages, or send it names, emails, order references or health information as custom identifiers. See Microsoft's Privacy Statement.

Session storage carries selected offers to checkout. Whop uses storage and security technologies for its services. Our first-party session record links your tracking choice to checkout and is kept for up to eight days after its last update; the optional Meta browser cookie lasts up to 90 days. You can also manage storage in your browser; blocking essential storage may affect checkout. We do not infer permission for optional analytics or marketing from browsing or buying. Marketing emails require consent or other permission required by applicable law.

Your US privacy rights and requests

Depending on your state and the law that applies to our business, you may have rights to know or access the personal information we hold, correct it, delete it, receive a portable copy, or opt out of sale, sharing, targeted advertising or certain profiling. You may also have a right to appeal a denied request or use an authorized agent. We will not discriminate against you for exercising applicable privacy rights.

Email contact@merylou.com to make a request, including an opt-out request. We may ask for information reasonably necessary to verify an access or deletion request or an agent's authority. We respond within applicable legal deadlines. If we deny a request, you can reply to appeal where that right applies. A choice to decline optional tracking does not require an account or identity verification. Withdrawing consent affects future processing; it does not undo earlier lawful processing.

Retention and international processing

We keep information only as long as needed for the stated purposes, legal obligations and resolution of claims. Necessary accounting records may be kept for six years. We are established in the United Kingdom; our service providers may process information in the United States, United Kingdom and other countries. Where legally required, we use applicable transfer safeguards. You may also exercise any applicable UK data-protection rights and complain to the UK Information Commissioner's Office at ico.org.uk.

Children and policy updates

This store is intended for adults and is not directed to children under 13. Contact us if you believe a child has provided personal information so we can investigate. We may update this policy; the date above identifies the current version and we provide additional notice where required.