Last updated: 4 November 2026

Who we are

Montemerch Limited, trading as MonteMerch, operates www.montemerch.co.uk and is the data controller responsible for the personal information described in this policy.

MonteMerch is the official merchandise partner of the Lancia Montecarlo Consortium. Montemerch Limited is a separate business from the Consortium.

For privacy enquiries or to exercise your data protection rights, email info@montemerch.co.uk.

Information we collect

Depending on how you use our services, we collect:

• Your name, email address, delivery and billing addresses, and telephone number.

• Order details, product choices, personalisation instructions, payment status and transaction references.

• Information you provide when contacting us, requesting a return or making a complaint.

• Account details and preferences if you create an account.

• Technical information generated when you visit our website, such as your IP address, browser information and security logs.

• Cookie and communication preferences, where applicable.

Payment providers process the payment information needed to complete your transaction.

​

We normally receive information directly from you, from your use of our website, and from payment and delivery providers handling your order.

How we use your information

We use personal information for the following purposes and lawful bases under UK GDPR.

Orders and customer service: To accept and fulfil orders, arrange delivery, manage returns and refunds, and answer enquiries about a purchase. Our lawful basis is performing our contract with you or taking steps at your request before entering into a contract.

Business enquiries: To answer general questions and maintain relevant correspondence. Our lawful basis is our legitimate interest in responding to people who contact us and running our business.

Accounting and legal requirements: To maintain records and meet tax, accounting and other legal obligations. Our lawful basis is compliance with a legal obligation.

Security and disputes: To prevent misuse and fraud, protect our website and customers, and establish or defend legal claims. Our lawful basis is our legitimate interest in protecting our business and customers, or compliance with a legal obligation where applicable.

Optional marketing: [Confirm whether marketing is sent. If applicable: We send promotional emails where you have opted in. Our lawful basis is consent. You can withdraw consent at any time using the unsubscribe link or by emailing us.]

Cookies and similar technologies are explained in our Cookie Policy.

We need certain contact, delivery and transaction information to fulfil an order. If you do not provide it, we may be unable to complete your purchase. Optional marketing choices do not affect your ability to buy from us.

Who receives your information

We share information where necessary with:

• Website, online shop, hosting and business email providers.

• Payment providers processing transactions.

• Manufacturers, personalisation or fulfilment suppliers preparing and dispatching orders.

• Postal services and couriers delivering orders.

• Accountants, professional advisers and authorities where necessary for legal or business obligations.

These organisations receive only the information needed for their role. Some act on our instructions; others, such as certain payment providers, use information under their own privacy notices.

The Consortium: Being MonteMerch’s merchandise partner does not automatically give the Consortium access to customer information.

​

International transfers

Some providers may process personal information outside the UK to process postage and shipping orders.

​

How long we keep information

We retain personal information only for as long as necessary for its purpose, including applicable legal requirements and the handling of disputes.

Order, invoice and accounting records: We retain the records needed for accounting and tax purposes for six years after the end of the company financial year to which they relate, or longer where legally required. This does not mean that every item of customer information is retained for that period.

General enquiries: Where an enquiry does not lead to a purchase, we normally retain the correspondence for 12 months after it is resolved.

Order-related customer service correspondence: We normally retain correspondence for two years after the matter is resolved. Where particular correspondence is needed as evidence for a complaint, warranty or legal claim, we retain it with the relevant order records for as long as necessary.

Customer accounts: We retain account information while the account remains active. After two years without a login or purchase, we review the account and delete information that is no longer needed. Transaction records required for accounting or legal purposes are retained separately.

Security logs: We normally retain routine security logs for 90 days. Relevant extracts may be retained longer where necessary to investigate an incident, prevent fraud or establish or defend a legal claim.

Marketing records: Where we send optional marketing, we retain the relevant contact information until you unsubscribe or withdraw consent. We review contacts after two years without meaningful engagement and remove inactive contacts unless continued retention is justified.

Unsubscribe records: We may retain a minimal record of your email address and marketing objection for as long as necessary to prevent you from being added to future marketing communications.

Records may be retained beyond these periods where necessary for an ongoing dispute, investigation or legal obligation. We delete or anonymise information when it is no longer required.

Keeping information secure

We use appropriate technical and organisational measures to protect personal information and limit access to people who need it for their work.

Your rights

Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of processing or transfer of information in a usable format. You may also object to processing based on legitimate interests.

Where we rely on consent, you can withdraw it at any time. This does not affect processing carried out lawfully before withdrawal.

Email info@montemerch.co.uk to make a request. We normally respond within one month, subject to permitted extensions and any necessary identity checks. These rights are subject to legal conditions and exceptions.

You can complain to the Information Commissioner’s Office at www.ico.org.uk. We would welcome the opportunity to address your concern first, but you do not have to contact us before complaining to the ICO.

Changes to this policy

We review this policy when our services or use of personal information changes. We publish updates here and bring significant changes to your attention where appropriate.