Privacy Policy

1. Introduction

This Privacy Policy explains how Mercoly ("Mercoly", "we", "us", or "our") collects, uses, discloses, and protects information in connection with our website at https://mercoly.com and our related services (collectively, the "Platform"). Mercoly operates a nationwide online business directory, multi-vendor marketplace, and lead-generation platform that connects customers and buyers ("Buyers", "you") with independent third-party businesses and sellers ("Sellers").

Mercoly is a neutral platform, venue, and intermediary only. We are not a party to any transaction between a Buyer and a Seller, and we are not the seller, manufacturer, importer, or provider of any product or service listed on the Platform. Sellers are independent third parties who are solely responsible for their listings, products, services, transactions, customer service, and their own privacy practices. This Privacy Policy describes only Mercoly's practices and does not govern how any Seller, business, or third party handles your information. Please review each Seller's own privacy policy before transacting with them.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, password, phone number, and account preferences when you register as a Buyer or Seller.
• Business and listing information: for Sellers and businesses that claim or create a listing, this includes business name, address, contact details, hours, categories, descriptions, photos, products, services, and pricing.
• Communications: messages, inquiries, leads, reviews, ratings, support requests, and other content you submit to us or to Sellers through the Platform.
• Transaction-related details: records of leads, inquiries, and orders you initiate, and information you choose to share with a Seller.

2.2 Information We Collect Automatically

• Usage data: pages viewed, searches run, listings clicked, links followed, referring URLs, and dates/times of access.
• Device and technical data: IP address, browser type, operating system, device identifiers, and general location inferred from IP.
• Cookies and similar technologies: as described in Section 6 below.

2.3 Publicly-Sourced Business Data

Mercoly auto-creates unclaimed business listings from public and openly available business data sources (such as public records, business registries, and other publicly accessible datasets). This information may include a business's name, address, phone number, website, category, and similar publicly available details. These listings are created without the business's involvement and may be incomplete or inaccurate. A business may claim, edit, correct, or request removal of its listing at any time by contacting support@mercoly.com (see Section 4).

2.4 Payment Information

Payments on the Platform are processed by third-party payment processors such as Stripe. Mercoly does not collect or store full payment card numbers. Card and payment data is provided directly to, and handled by, the payment processor under its own terms and privacy policy. We may receive limited information from the processor, such as confirmation of payment, the last four digits of a card, and a transaction identifier.

3. How We Use Information

We use the information we collect to:

• operate, maintain, and improve the Platform, including the directory, marketplace, and lead-generation features;
• create, display, and manage business listings (including publicly-sourced listings) and enable businesses to claim and manage them;
• connect Buyers with Sellers, route leads and inquiries, and facilitate communications between them;
• process and route payments through our third-party processors;
• provide customer support and respond to requests sent to support@mercoly.com;
• personalize content, search results, and recommendations;
• send transactional messages and, where permitted, marketing communications (you may opt out at any time);
• detect, prevent, and address fraud, abuse, security incidents, and violations of our terms;
• comply with legal obligations and enforce our agreements; and
• perform analytics and aggregate or de-identify data for business purposes.

4. Legal Bases for Processing

For individuals in jurisdictions where this applies (such as the EU/EEA and UK), we process personal data on the following legal bases: (a) performance of a contract, to provide the Platform and the features you request; (b) legitimate interests, such as operating, securing, and improving the Platform, maintaining a public business directory, and preventing fraud; (c) consent, for certain marketing and non-essential cookies, which you may withdraw at any time; and (d) legal obligation, where processing is necessary to comply with applicable law. For publicly-sourced business listings, our basis is our legitimate interest in maintaining an accurate, comprehensive business directory, balanced against the rights of the businesses listed.

5. How We Share Information

Mercoly does not sell your personal information for money. We share information only as described here:

• With Sellers: when you contact a Seller, submit a lead or inquiry, leave a review, or initiate a transaction, we share the information reasonably necessary to facilitate that interaction (such as your name, contact details, and message). Once shared, the Seller is an independent controller of that information and handles it under its own privacy practices, for which Mercoly is not responsible.
• With service providers: vendors who perform services on our behalf, such as hosting, payment processing (e.g., Stripe), analytics, email delivery, and customer support, under contractual confidentiality obligations.
• For legal and safety reasons: when we believe disclosure is reasonably necessary to comply with law, legal process, or a governmental request; to enforce our terms; to protect the rights, property, or safety of Mercoly, our users, or the public; or to detect or prevent fraud or security issues.
• In a business transfer: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Privacy Policy.
• With your direction or consent: when you otherwise authorize a disclosure.
• Aggregated or de-identified data: which cannot reasonably be used to identify you.

Publicly-sourced and publicly-displayed business listing information is, by its nature, available to anyone who visits the Platform.

6. Cookies and Tracking

We and our service providers use cookies, pixels, local storage, and similar technologies to operate the Platform, remember your preferences, keep you signed in, measure usage, and improve performance. Some cookies are essential for the Platform to function; others support analytics and, where applicable, advertising. You can manage cookies through your browser settings and, where required, through our cookie controls. Disabling certain cookies may affect functionality. Where required by law, we honor recognized opt-out preference signals (such as Global Privacy Control) for purposes treated as "sale" or "sharing" under applicable U.S. state law.

7. Data Retention

We retain personal information for as long as needed to provide the Platform, maintain the business directory, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it was collected. We may retain de-identified or aggregated information indefinitely. Publicly-sourced business listings may be retained as part of the directory until removed in accordance with Section 4 or this Section, subject to applicable law.

8. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for activity under your account.

9. Your Privacy Rights

9.1 U.S. State Privacy Rights (CCPA/CPRA and Similar Laws)

Depending on your state of residence (for example, California, and other states with comprehensive privacy laws), you may have the right to: (a) know and access the personal information we have collected about you; (b) request deletion of your personal information; (c) request correction of inaccurate information; (d) opt out of the "sale" or "sharing" of personal information and of certain targeted advertising; and (e) not receive discriminatory treatment for exercising your rights. While Mercoly does not sell personal information for money, certain uses of cookies and advertising technologies may be considered a "sale" or "sharing" under some state laws. To exercise the right to Do Not Sell or Share My Personal Information, or any other right, contact us at support@mercoly.com. We will verify your request as required by law and may use an authorized agent on your behalf.

9.2 EU/EEA and UK Rights (GDPR)

If you are located in the EU/EEA or UK, you may have the right to access, rectify, erase, restrict, or object to the processing of your personal data; to data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact support@mercoly.com.

9.3 Business Listing Requests

Businesses may claim, correct, update, or request removal of an auto-created or existing listing at any time by emailing support@mercoly.com.

We respond to verified rights requests within the timeframes required by applicable law.

10. Children's Privacy

The Platform is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies under local law), consistent with the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws. If you believe a child has provided us personal information, please contact support@mercoly.com and we will take appropriate steps to delete it.

11. International Data Transfers

Mercoly is based in the United States, and the Platform is operated from and hosted in the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries that may not provide the same level of data protection as your jurisdiction. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers. By using the Platform, you understand that your information may be processed in the United States.

12. Third-Party Links and Services

The Platform contains listings, links, and content that lead to third-party websites and services, including Sellers and businesses. Mercoly does not control and is not responsible for the privacy practices or content of any third party. Information you provide to a Seller or other third party is governed by that party's own privacy policy. We encourage you to review the privacy policies of any third party before providing your information.

13. Marketing Communications

We comply with the U.S. CAN-SPAM Act and, where applicable, the Telephone Consumer Protection Act (TCPA). You may opt out of marketing emails by using the unsubscribe link or contacting support@mercoly.com. Where required, we obtain consent before sending marketing text messages. Opting out of marketing does not stop transactional or service-related messages.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Privacy Policy.

15. Contact Us

For any questions, requests, or concerns about this Privacy Policy or your information — including access, deletion, correction, Do Not Sell or Share requests, or business listing claims and removals — please contact us at support@mercoly.com. This Privacy Policy is governed by the laws of the State of Florida, USA, without regard to its conflict-of-laws principles, except where applicable data protection law requires otherwise.