Legal

Privacy Policy

Last updated: July 2026

Merge & Land ("we", "us") is the data controller for personal data collected through this site. We keep things minimal: no accounts, no tracking-heavy analytics, no selling of data.

1. What we collect

• Purchase data - your name, email address, billing country and payment details are collected and processed by Stripe when you buy. We never see or store your full card details.
• Delivery data - for Enterprise and Advisory purchases, the email address you provide is used to share a Google Drive folder.
• Mailing list data - if you request a free template or sign up for updates, the email address you enter and, where you tick the consent box, your agreement to receive marketing. We also record the date and source of your signup.
• Correspondence - emails you send us, including support and refund requests.

2. How we use it

We use your data to deliver your purchase, provide support and the updates you're entitled to, issue VAT receipts and refunds, and meet legal and accounting obligations. The lawful bases for this are performance of a contract and legal obligation.

If you request a free template, we use your email address to send you that file, because you asked us to. We only send marketing emails - occasional M&A integration tips and product updates - where you have consented by ticking the box at signup. The lawful basis for marketing is consent, and you can withdraw it at any time via the unsubscribe link in any email or by contacting us; withdrawing it does not affect the file you already requested. We never make the free template conditional on accepting marketing.

3. Who we share it with

Stripe (payments), Google (Drive delivery for Enterprise and Advisory buyers), and MailerLite (operated by MailerLite Limited, based in Ireland), which stores our mailing list and sends our emails as a data processor on our behalf. Each acts under its own terms and appropriate safeguards. We don't sell or rent personal data to anyone.

4. How long we keep it

Purchase records are kept for 6 years to meet UK tax and accounting requirements. Support correspondence is kept for up to 2 years. Drive access for lifetime-update buyers persists for as long as the product is maintained.

Mailing list data is kept until you unsubscribe or ask us to delete it, after which we remove your details or keep only the minimum needed to honour your unsubscribe request.

5. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, object to or restrict processing, request portability, and withdraw your consent to marketing at any time. Contact us via the contact page to exercise any of these. You can also complain to the ICO at ico.org.uk.

6. Cookies

This site itself sets no cookies. Stripe's checkout pages set cookies necessary for fraud prevention and payment processing - see Stripe's own privacy policy. Our email signup form submits your address to MailerLite; MailerLite may set its own cookies, in which case their privacy policy applies.