Data & Privacy Requests

1. Overview

This page explains how you can exercise your privacy rights, manage personal information, and manage business listings on Mercoly ("Mercoly", "we", "us", or "our"), operated at https://mercoly.com. It supplements our Privacy Policy and Terms of Service and should be read together with them. To exercise any right or submit any request described below, email support@mercoly.com. We review and act on every request consistent with applicable law and at our discretion as a neutral platform.

What Mercoly is. Mercoly is a nationwide online business directory, multi-vendor marketplace, and lead-generation platform that connects Customers and Buyers with independent, third-party Businesses and Sellers who list and sell their own products and services. Mercoly is a neutral platform, venue, and intermediary only. We are not a party to any transaction between a Buyer and a Seller, are not the seller, manufacturer, importer, or provider of any product or service, and do not take title to goods. All transactions, communications, fulfillment, support, warranties, refunds, and disputes are solely between the Buyer and the Seller.

Why this matters for data requests. Because Mercoly acts as an intermediary, personal information often passes through our platform that is controlled by, and the responsibility of, the independent Sellers and Businesses you interact with. For data that an independent Seller or Business controls (for example, order and contact details a Seller collects to fulfill your purchase or service), that Seller is the responsible party, and you may need to direct your request to them. Where Mercoly is the controller or business with respect to your personal information, we will handle your request as described below.

2. Your Privacy Rights

Depending on where you live and the law that applies to you, you may have some or all of the following rights regarding the personal information Mercoly holds about you as a controller or "business":

• Right to know / access. Request confirmation of whether we process your personal information and obtain a copy of the categories and specific pieces of personal information we hold, the sources, the purposes, and the categories of third parties to whom it may be disclosed.
• Right to correct. Request that we correct inaccurate personal information we maintain about you.
• Right to delete. Request deletion of personal information we have collected from you, subject to legal exceptions (for example, completing a transaction, security, fraud prevention, legal compliance, exercising free speech, or internal lawful uses).
• Right to opt out of "sale" or "sharing." Direct us not to "sell" or "share" your personal information as those terms are defined under applicable U.S. state privacy laws.
• Right to limit use of sensitive personal information, where applicable.
• Right to data portability. Receive certain personal information in a portable, machine-readable format.
• Right to non-discrimination / no retaliation. We will not discriminate or retaliate against you for exercising any privacy right.

2.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the rights described above under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA). You may submit a request to know, correct, delete, or opt out, and you may use an authorized agent to submit a request on your behalf (we may require proof of authorization and verification of your identity). California residents may make a request twice within a 12-month period at no charge.

Do Not Sell or Share My Personal Information. Mercoly does not sell personal information for money in the traditional sense. However, certain data practices common to advertising, analytics, and lead-generation platforms may be considered a "sale" or "sharing" of personal information under the CCPA/CPRA. To opt out, email support@mercoly.com with the subject line "Do Not Sell or Share My Personal Information", or use any opt-out preference signal (such as Global Privacy Control) that we recognize on our website. We will honor valid opt-out requests as required by law.

2.2 EU / EEA / UK Residents (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, and the GDPR or UK GDPR applies to our processing, you may have rights to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and to object to processing, including processing based on legitimate interests or for direct marketing. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local supervisory authority. To exercise any GDPR right, email support@mercoly.com.

2.3 Other U.S. States

Residents of other U.S. states with comprehensive privacy laws (for example, Virginia, Colorado, Connecticut, Utah, Texas, and others) may have comparable rights, including access, correction, deletion, portability, and the right to opt out of targeted advertising, sale, and certain profiling. We extend the request process on this page to those residents to the extent required by their state's law.

3. Children's Privacy (COPPA)

Mercoly's services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us personal information, contact support@mercoly.com and we will take reasonable steps to delete it.

4. Managing and Removing Business Listings

Mercoly's directory includes both listings created by the Businesses themselves and auto-created, unclaimed listings that Mercoly compiles from public and openly available business data sources (such as public registries, directories, and other publicly accessible information). Auto-created listings are generated by automated means and are not endorsed, verified, or warranted by Mercoly.

4.1 Claim a Listing

If you are the owner of, or are authorized to act for, a business that appears on Mercoly, you may claim the listing to manage it. To claim a listing, email support@mercoly.com from a business-associated email address with the business name, listing URL or location, and information sufficient to verify your authority to act for the business. We may require additional verification before granting control of a listing.

4.2 Edit a Listing

Once a listing is claimed and verified, you may request edits to correct or update information such as business name, address, contact details, hours, categories, and descriptions. You are solely responsible for the accuracy, legality, and content of any information you submit, and you represent that you are authorized to provide it.

4.3 Request Removal of a Listing

A business may request removal of its listing — including an auto-created, unclaimed listing — at any time by emailing support@mercoly.com with the business name, the listing URL or location, and verification that you are authorized to act for the business. Upon verifying a valid removal request, we will remove or de-list the business consistent with applicable law and our operational processes. Mercoly may, in its sole discretion and with or without notice, modify, suspend, or remove any listing, content, or account. Removal of a listing does not affect information independently held or published by third parties, and Mercoly is not responsible for data, listings, or copies maintained by third parties, search engines, or other sources outside our platform.

5. How to Submit a Request

Submit all data, privacy, and listing requests to support@mercoly.com. To help us process your request efficiently, please include:

• The type of request (for example, access, correct, delete, opt out, claim listing, edit listing, or remove listing);
• Your full name and a contact email address;
• Enough detail to identify the relevant account, profile, listing, order, or records (such as the listing URL, order reference, or the email address associated with your activity);
• For business-listing requests, the business name and information showing you are authorized to act for the business;
• If you use an authorized agent, written authorization permitting that agent to act on your behalf.

6. Verifying Your Request

To protect your information and prevent fraudulent or unauthorized requests, we must verify your identity (and, for business requests, your authority) before acting. The verification we require is proportionate to the sensitivity of the information and the nature of the request, and may include confirming control of an email address, matching information against records we maintain, or requesting additional documentation. We will use information provided for verification solely for that purpose. If we cannot reasonably verify your identity or authority, we may decline to act on the request and will notify you, where required, of the reason.

7. Response Timelines

We will acknowledge and respond to verifiable requests within the timeframes required by applicable law. In general, we aim to respond to U.S. state privacy requests within 45 days, with the ability to extend by an additional 45 days where reasonably necessary and permitted, and we will notify you of any extension. For GDPR/UK GDPR requests, we generally respond within one month, extendable by up to two additional months for complex or numerous requests, with notice. Listing claim, edit, and removal requests are handled within a commercially reasonable time after verification.

8. No Retaliation; No Discrimination

Mercoly will not retaliate, discriminate, or take adverse action against you, your account, or your business for exercising any privacy right or submitting any request described on this page. Exercising your rights will not, by itself, result in denial of services, different pricing, or a different level or quality of service, except where a difference is reasonably related to value provided or otherwise permitted by law.

9. Mercoly's Role and Discretion

Mercoly reviews and acts on requests at its discretion, consistent with applicable law and our role as a neutral intermediary. We may decline or limit a request where an exception applies, where we cannot verify the requester, where the request is unfounded, excessive, or repetitive, or where compliance would infringe the rights of others, conflict with legal obligations, or compromise security or fraud prevention. For personal information controlled by an independent Seller or Business rather than by Mercoly, we may direct you to the responsible party or, where appropriate, forward your request. Nothing on this page makes Mercoly a party to, or responsible for, any transaction, listing, product, service, or content of any third-party Seller or Business, all of which remain solely the responsibility of those independent parties.

10. Other Requests; Contact

Copyright and intellectual property complaints under the DMCA (17 U.S.C. § 512) should also be sent to our designated agent at support@mercoly.com. For all privacy, data, and listing matters covered by this page — and any questions about how to exercise your rights — contact us at support@mercoly.com. We may update this page from time to time; the "Last updated" date above reflects the most recent revision.