PRIVACY POLICY
Last updated: July 13, 2026
Merch Dungeon respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, why we use it and how you can exercise your privacy rights.
1. Who controls your information?
Merch Dungeon is operated by:
Business address: 1095 Budapest, Gát utca 21. Fszt./1a
Email: info@merchdungeon.com
Website: https://merchdungeon.com/
This business is the data controller responsible for personal information collected through Merch Dungeon.
2. Information we collect
We may collect:
-
your name, email address, telephone number and billing or shipping address;
-
order details, purchased products and transaction information;
-
account information if you create an account;
-
messages, reviews or customer-support requests you send us;
-
IP address, browser, device and website-usage information; and
-
cookie and analytics information where permitted.
Payment details are normally processed directly by our payment providers. Merch Dungeon does not normally receive or store your complete payment-card information.
3. How we use your information
We use personal information to:
-
process, produce, deliver and manage your orders;
-
communicate with you about orders, returns and customer support;
-
prevent fraud and protect the security of the website;
-
comply with tax, accounting and other legal obligations;
-
improve our website, products and services; and
-
send marketing communications where you have given consent.
Our legal bases may include performing our contract with you, complying with legal obligations, protecting our legitimate business interests and your consent.
You may unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us.
4. Who we share information with
We may share information only where necessary with service providers such as:
-
Gelato, our print-on-demand production and fulfilment partner;
-
payment-processing providers;
-
shipping and delivery companies;
-
website hosting, security and technical providers;
-
analytics or marketing providers where you have given the required consent;
-
accountants, legal advisers and other professional service providers; and
-
authorities where disclosure is required by law.
Gelato may receive your name, delivery address and order details so that it can manufacture and ship your products.
We do not sell or rent your personal information.
5. International data transfers
Some service providers may process information outside your country or outside the European Economic Area.
Where required, we use recognised safeguards, such as adequacy decisions or approved contractual protections, to protect personal information transferred internationally.
6. Cookies
Merch Dungeon uses cookies and similar technologies.
Essential cookies may be used without consent where they are necessary for functions such as shopping carts, checkout, account login, security and payment processing.
Analytics, advertising and other non-essential cookies will only be used where you have provided the required consent. You can accept, reject or change your cookie preferences through our cookie banner or cookie settings.
Disabling essential cookies may prevent parts of the webshop from functioning correctly.
7. How long we keep information
We keep personal information only for as long as reasonably necessary to:
-
complete and administer your order;
-
provide customer support;
-
meet tax, accounting and legal requirements;
-
resolve disputes; and
-
prevent fraud or abuse.
Information that is no longer required will be deleted, anonymised or securely restricted.
8. Your privacy rights
Depending on applicable law, you may have the right to:
-
access the personal information we hold about you;
-
correct inaccurate or incomplete information;
-
request deletion of your information;
-
restrict or object to certain processing;
-
receive certain information in a portable format;
-
withdraw consent at any time; and
-
lodge a complaint with your local data-protection authority.
Withdrawing consent does not affect processing that took place before consent was withdrawn.
To exercise your rights, contact info@merchdungeon.com. We may need to verify your identity before completing a request.
9. Data security
We use reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no website or internet transmission can be guaranteed to be completely secure.
10. Children
Merch Dungeon products and services are intended for adults. We do not knowingly collect personal information from children without appropriate parental or legal-authority consent.
11. Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those independent websites.
12. Changes to this policy
We may update this Privacy Policy when our services, providers or legal obligations change.
The latest version will always be published on this page with an updated revision date.








