Last updated: September 25, 2026
This Privacy Policy explains how themecshop.com (“the Site” or “MEC Shop”) collects, uses, stores, and shares personal information when you visit the Site, make a purchase, contact me, subscribe to communications, or otherwise use the services available through the Site.
MEC Shop is operated by Pedro Tribizon, who is the data controller responsible for the personal information described in this Privacy Policy.
You can contact me at:
Throughout this policy, I use “I,” “me,” and “my” to refer to the person operating MEC Shop.
Personal Information I Collect
When you visit or use the Site, certain information may be collected automatically or provided directly by you.
Device and Usage Information
This may include information such as:
- your web browser
- IP address
- time zone
- cookie information
- pages or products you view
- search terms
- how you interact with the Site
- referring websites or pages
This information helps the Site function correctly, maintain security, and helps me understand how visitors use MEC Shop.
Shopify and other service providers may process this information as part of operating the Site.
Order Information
When you place an order, information collected may include:
- your name
- billing address
- shipping address
- email address
- phone number, when provided
- payment and transaction information
- details about the products you purchase
I use this information to process payments, fulfil orders, arrange shipping, send order confirmations and updates, provide customer support, comply with legal obligations, and help identify potentially fraudulent transactions.
Order information may be shared with Shopify, Printful, payment providers, and shipping carriers when necessary to process and fulfil your order.
Customer Support Information
If you contact me through the Site or by email, I may receive information including your name, email address, order number, shipping details, and any information you choose to include in your message.
I use this information as necessary to respond to your request and provide customer support.
Marketing Information
If you subscribe to the newsletter or other marketing communications, I may collect information such as your name, email address, communication preferences, and interactions with marketing emails.
I use this information to send communications you have chosen to receive and to understand how those communications are used.
How I Use Personal Information
I may use personal information to:
- operate, maintain, and improve MEC Shop
- process and fulfil purchases
- arrange production and shipping
- communicate with you about your order
- respond to questions or support requests
- detect and prevent fraud
- protect the security of the Site
- maintain required business, tax, and accounting records
- provide marketing communications where you have chosen to receive them
- understand how visitors use the Site
- comply with legal obligations
Legal Bases for Processing
Where the General Data Protection Regulation (“GDPR”) or similar privacy laws apply, I process personal information only when there is a lawful basis for doing so.
Depending on the purpose, I may rely on:
Performance of a Contract
I process information where necessary to enter into or perform a contract with you, including to:
- process your order
- take payment
- produce your items
- arrange shipping
- provide order updates
- provide customer support relating to your purchase
Legal Obligations
I may process and retain certain information where necessary to comply with legal, tax, accounting, regulatory, or other obligations.
Consent
I may rely on your consent for activities such as:
- email marketing
- optional analytics cookies
- advertising or tracking technologies where consent is legally required
Where processing is based on consent, you may withdraw that consent at any time.
Legitimate Interests
I may process information where necessary for legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
These legitimate interests may include:
- preventing fraud
- protecting MEC Shop and its customers
- maintaining Site security
- understanding how the Site is used
- improving the shopping experience
- responding to customer enquiries
Information Required to Place an Order
Certain personal information is necessary for me to enter into and perform a contract with you.
For example, I need information such as your name, shipping address, contact details, and payment information in order to process and fulfil an order.
If you do not provide the information required during checkout, I may not be able to complete your purchase.
Sharing Personal Information
I may share personal information with service providers when necessary to operate MEC Shop and fulfil orders.
These may include:
- Shopify, which powers the online store
- Printful, which produces and fulfils many MEC Shop products
- payment processors
- shipping and postal services
- analytics providers
- email or marketing platforms, where applicable
- professional advisers or authorities where required by law
These providers may receive information necessary to perform their services.
Information may also be disclosed where required to comply with applicable laws, regulations, legal processes, or lawful requests from public authorities.
Shopify
MEC Shop is powered by Shopify.
Shopify processes certain personal information in order to provide ecommerce, checkout, payment, customer account, security, fraud-prevention, and other services necessary to operate the Site.
Shopify may process information in countries outside your country of residence.
You can learn more about how Shopify handles personal information through Shopify’s Privacy Policy.
Printful
I use Printful as a production and fulfilment partner for many MEC Shop products.
When you place an order containing a product fulfilled by Printful, certain information may be shared with Printful, including:
- your name
- shipping address
- contact details
- order information
This information is shared so Printful can produce, package, and ship your order.
Printful processes personal information according to its own privacy practices.
Marketing and Analytics
I may use analytics and advertising tools to understand how visitors use MEC Shop, improve the Site, and measure the effectiveness of campaigns or advertising.
These services may use cookies, pixels, or similar technologies.
Where required by law, non-essential analytics, marketing, and advertising technologies will only be used after you have provided the appropriate consent.
You can manage certain tracking preferences through the cookie controls available on the Site and through your browser settings.
Email Marketing
If you choose to join the mailing list, I may use your email address to send updates about:
- new designs
- shop releases
- offers
- news from The Middle Earth Companion
- other relevant content
You can unsubscribe at any time using the unsubscribe link included in marketing emails.
Withdrawing from marketing communications will not prevent you from receiving necessary transactional communications relating to an order.
Cookies
MEC Shop uses cookies and similar technologies to operate the Site and improve your experience.
Cookies may be used for purposes such as:
- remembering items in your cart
- supporting checkout
- remembering preferences
- maintaining customer account sessions
- protecting Site security
- measuring Site performance
- understanding how visitors use the Site
- supporting advertising or marketing where consent has been provided
Some cookies are necessary for the Site to function and cannot be disabled without affecting essential features.
Non-essential cookies may be controlled through the cookie settings available on the Site where required by law.
You may also manage cookies using your browser settings.
Please note that blocking or disabling cookies may affect how some parts of MEC Shop function.
International Data Transfers
Because Shopify, Printful, and other service providers operate internationally, personal information may be processed or stored outside the European Economic Area (“EEA”), the United Kingdom, or your country of residence.
Where applicable law requires safeguards for these transfers, personal information may be transferred using mechanisms such as:
- an adequacy decision issued by the relevant authority
- Standard Contractual Clauses
- another legally recognised transfer mechanism
You may contact me if you would like more information about the safeguards used for international data transfers.
Data Retention
I retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The retention period may depend on:
- the type of information
- whether you have an active order or customer relationship
- legal and regulatory obligations
- tax and accounting requirements
- fraud-prevention needs
- whether information is required to resolve a dispute or support request
Order and transaction records may be retained after an order is completed where necessary to comply with legal, tax, accounting, or other obligations.
Marketing information is retained until you unsubscribe, withdraw consent, or it is no longer reasonably necessary for the purpose for which it was collected, subject to any legal obligations.
Automated Decision-Making
I do not use personal information to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.
Some service providers, including Shopify and payment providers, may use automated systems for purposes such as fraud prevention, transaction security, or identifying suspicious activity.
These systems may temporarily restrict or review transactions, but I do not independently operate automated decision-making systems that produce legal or similarly significant effects on customers.
Your Privacy Rights
Depending on where you live, you may have rights regarding your personal information.
These may include the right to:
- request access to your personal information
- request correction of inaccurate information
- request deletion of certain information
- object to certain processing
- request restriction of certain processing
- receive certain personal information in a portable format
- withdraw consent where processing is based on consent
- object to direct marketing
- lodge a complaint with a data protection authority
Some rights may be subject to legal limitations or exceptions.
To exercise a privacy right, contact me at:
I may need to verify your identity before completing certain requests.
EEA and UK Privacy Rights
If you are located in the European Economic Area or the United Kingdom, you may have rights under applicable data protection law, including rights of:
- access
- rectification
- erasure
- restriction
- objection
- data portability
- withdrawal of consent
You also have the right to lodge a complaint with the data protection supervisory authority responsible for your country or region.
You may contact me first if you have a concern, but you are not required to do so before contacting a supervisory authority.
Minors
MEC Shop is not intended for individuals under the age of 18, and I do not knowingly collect personal information from children.
If you are a parent or guardian and believe a child has provided personal information through the Site, please contact me so I can review the request and take appropriate action.
Security
I take reasonable measures to protect personal information and use established service providers such as Shopify, Printful, and payment providers to handle ecommerce transactions and order fulfilment.
However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
Third-Party Links
MEC Shop may contain links to other websites or services, including:
- social media platforms
- Patreon
- The Middle Earth Companion
- other third-party services
I am not responsible for the privacy practices of third-party websites or services.
I recommend reviewing their privacy policies when visiting or using them.
Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to:
- MEC Shop
- the services I use
- legal requirements
- privacy practices
- production or fulfilment partners
The latest version will appear on this page together with the date it was last updated.
Contact
If you have questions about this Privacy Policy, would like to exercise a privacy right, or have a privacy-related concern, contact me at: