Last Updated: 14.08.2026
Data Controller:
Mercury Shipping Ltd
office@mershipman.com
1. What Data Do We Collect?
We collect a limited set of personal data that you voluntarily provide to us.
This includes:
-
Email Address – when you subscribe to our newsletter,
submit an inquiry, or create an account.
-
Phone Number – when you enter it in a contact form,
booking, or order.
-
First and Last Name – so we can address you personally
and identify your order/inquiry.
-
IP Address and Browser Data – collected automatically
via cookies for statistical purposes and security.
-
Order Details – if you make a purchase, we collect
necessary billing information (address, city, country).
We do NOT store credit card details.
2. How Do We Use Your Data?
We use your data exclusively for the following lawful purposes:
-
To Communicate with You:
Responding to your questions, confirming reservations or orders,
and sending important notifications.
-
To Improve Our Service:
Analyzing traffic and user behavior to make the website faster and
more user-friendly (e.g., Google Analytics).
-
To Comply with Legal Obligations:
Storing data for accounting and tax purposes when required by law.
We DO NOT sell your data to third parties and DO NOT use it for
purposes other than those listed above.
3. Who Do We Share Your Data With?
Your data is accessible only to authorized employees of Mercury Shipping Ltd.
In some cases, data may be transferred to external service providers who
process data on our behalf, such as:
- Hosting and email service providers.
- Analytics tools providers (e.g., Google).
All these providers are contractually obligated to keep your data
confidential and secure.
4. How Long Do We Keep Your Data?
-
For Orders and Invoices:
A minimum of 5 years from the end of the accounting
period, in accordance with the Bulgarian Accountancy Act.
-
For General Inquiries:
Up to 1 year after the last contact.
After these periods expire, your data will be deleted or anonymized.
5. How Can You Delete Your Data? (Your Rights)
You have full control over your personal data. Under the General Data
Protection Regulation (GDPR), you have the right to:
-
Right of Access:
You can request a copy of all data we hold about you.
-
Right to Rectification:
If your data is inaccurate, you can request that we correct it.
-
Right to Erasure ("Right to be Forgotten"):
You can request the complete deletion of your email, phone number,
and all associated records.
To exercise your rights, please send an email to:
office@mershipman.com
with the subject line "Personal Data Deletion Request".
Important:
If you have an active order or an outstanding obligation to us, we are
legally required to retain your data until the transaction is completed
and the statutory accounting period (5 years) has expired. After this
period, your data will be permanently deleted.
6. Data Security
We implement strict technical and organizational measures to protect your
data from loss, misuse, or unauthorized access. Our website uses an
SSL/HTTPS protocol, which encrypts the connection between
your browser and our server.
7. Cookies
This site uses minimal cookies for proper functionality and traffic
analysis. You can control their use through your browser settings.
For more information, please see our
Cookie Policy.
8. Changes to This Policy
We reserve the right to update this policy in case of changes in
legislation or our services. All changes will be posted on this page.
For any questions or concerns regarding privacy, please contact us at:
office@mershipman.com
