Merli

Privacy Policy

Last updated: 07.10.2026

Information we collect

We collect information you provide when placing an order, making an enquiry or arranging a tasting. This may include your name, email address, phone number, billing and delivery addresses, order details and correspondence.

Where required for the sale or delivery of alcohol, we may also request information to confirm that you are aged 18 or over.

You can make general enquiries without identifying yourself, but we need certain details to process and deliver an order.

How we use your information

We use your information to fulfil orders, arrange delivery, answer enquiries, manage refunds and provide customer service. We may also use it to maintain business records, prevent fraud and meet our legal obligations.

If you subscribe to receive news from Merli, we may send information about our wines, releases and events. You can unsubscribe at any time using the link in our emails or by contacting us.

Payments through Square

Our online checkout and payments are provided by Square. Information entered at checkout is handled by Square, and we receive the customer and transaction information needed to manage your order.

For information about Square’s handling of personal information, please read Square’s Buyer Privacy Notice.

Sharing your information

We share relevant information with service providers who help us operate our business, including payment providers, delivery companies, website and email providers, and professional advisers. We may also disclose information where required or authorised by law.

We do not sell your personal information.

Website technology

Our website and checkout providers may process technical information, including your IP address, browser details and usage information. Cookies or similar technologies may support website functionality and remember preferences.

You can manage cookies through your browser settings, although disabling them may affect some functions.

Storage and security

We take reasonable steps to protect personal information against misuse, loss and unauthorised access. We retain it for as long as needed for the purposes described in this policy and applicable recordkeeping obligations, then securely delete or de-identify it.

Access, corrections and complaints

To request access to or correction of your personal information, or to raise a privacy concern, reach out to; contact@merli.com.au

We may need to verify your identity. We will investigate complaints and aim to respond within 30 days. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner, which can advise whether it can assist.

Changes to this policy

We may update this policy as our practices change. The current version will be available on this page.