Privacy Policy

This document provides a unified website privacy policy framework for visitors in the United States, Canada and the European Union or European Economic Area. The policy is intentionally written for Mercury's current business-facing website and anticipated contact, assessment, analytics, event and marketing activities.

1. Introduction

Swyft, Inc., doing business as Mercury Automated Retail Solutions (Mercury, we, us or our), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, transfer and protect personal information when you interact with our website, communications, events, marketing or business-development activities.

Personal information means information that identifies, relates to, describes or could reasonably be linked with an individual or household. Similar terms under applicable law include personal data and personal information.

• Visit mercuryautomatedretailsolutions.com or another website that links to this Privacy Policy.
• Submit a contact, property-assessment, partnership or information-request form.
• Communicate or engage with Mercury in a business or professional capacity.
• Interact with Mercury advertising, events, QR codes or social-media activities.

2. Who Is Responsible for Your Information

The entity responsible for personal information processed through the website is Swyft, Inc., doing business as Mercury Automated Retail Solutions, 8 The Green #27013, Dover, DE 19901, United States of America, info@mercury-ars.com, +1 (844) 447-9938.

For individuals in the European Economic Area, Mercury acts as the data controller unless stated otherwise. EU representative, if required: [NAME AND CONTACT INFORMATION OR NOT APPLICABLE]. Data Protection Officer, if appointed: [NAME AND CONTACT INFORMATION OR NOT APPLICABLE].

3. Information We Collect

Information You Provide

• Contact information, including name, business email, telephone number and mailing address.
• Professional information, including employer, property, organization, title, industry and business location.
• Partnership information, including whether you are a location partner, brand partner, supplier or other stakeholder.
• Property-assessment information, including property type, location, traffic, available space, operating needs, retail objectives, timing and preferred format.
• Communications, requests, feedback, event interactions, marketing preferences and other information you voluntarily provide.

Information Collected Automatically

• IP address, browser, device and operating-system information.
• Approximate location derived from IP address.
• Pages viewed, links selected, referral source, dates, times and duration of visits.
• Form starts and submissions, cookie identifiers, analytics data and campaign-attribution information.

Information From Other Sources

We may receive professional or business information from event organizers, business partners, public business sources, professional networks, marketing or analytics providers, existing Mercury or former Swyft records, and people who introduce or refer you. Where required, we will disclose the source of information collected indirectly.

4. How We Use Personal Information

Mercury will not use personal information for a materially different purpose without appropriate notice and consent where required.

• Respond to questions and requests and provide requested materials.
• Evaluate potential locations, properties, partnerships and brand opportunities.
• Recommend relevant retail formats or services and arrange business discussions.
• Communicate about Mercury, including the transition from Swyft to Mercury.
• Operate, secure and improve the website and understand visitor journeys, campaigns and form completion.
• Send marketing communications when permitted by law and manage event follow-up.
• Maintain business records, detect misuse, comply with law and establish or defend legal claims.

5. Legal Bases for European Processing

Consent may be withdrawn at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

• Consent for optional cookies, certain marketing and other activities for which consent is requested.
• Contractual necessity to take requested steps before an agreement or to perform an agreement.
• Legitimate interests in responding to business inquiries, developing partnerships, operating and securing the website, maintaining relationships, measuring performance and improving services, where those interests are not overridden by individual rights.
• Legal obligation and the establishment, exercise or defense of legal claims.

6. Cookies and Similar Technologies

Mercury may use cookies, pixels, tags and similar technologies for essential website operation, security, preferences, analytics, campaign measurement and advertising where enabled and permitted.

In the European Union or European Economic Area and other jurisdictions requiring prior consent, Mercury will not activate nonessential analytics or advertising technologies until valid consent is provided. Visitors may accept, reject or change optional-cookie choices through the website's cookie-preference control.

Specific cookies, vendors, purposes and durations should be listed in the cookie-preference interface or a separate Cookie Notice.

7. How We Disclose Personal Information

Service providers may process information only for contracted purposes and are expected to protect it appropriately.

Mercury does not sell personal information for money. If Mercury uses advertising technologies that constitute selling, sharing or targeted advertising under applicable U.S. state law, eligible individuals may opt out through https://www.mercuryautomatedretailsolutions.com/contact or a recognized browser-based opt-out signal. Confirm this statement against the final advertising configuration before publication.

• Website hosting, security and infrastructure providers.
• Customer-relationship-management, form-routing, email and communications providers.
• Analytics, advertising and campaign-measurement providers.
• Professional advisers and event or business partners when necessary for a disclosed activity.
• Affiliates, successors or parties to a financing, merger, acquisition, restructuring or asset transfer.
• Government authorities or other parties when required by law or necessary to protect rights, safety, security or property.

8. International Transfers

Mercury and its service providers may process personal information in the United States or other countries where privacy laws differ from those in your location.

For transfers from the European Union or European Economic Area, Mercury will use a recognized safeguard where required, such as an adequacy decision or Standard Contractual Clauses.

Canadian information processed outside Canada may be subject to the laws and lawful-access requirements of the destination jurisdiction. Mercury remains responsible for information transferred to service providers for processing as required by applicable Canadian law.

Information about applicable safeguards may be requested through info@mercury-ars.com.

9. Data Retention

Mercury retains personal information only as long as reasonably necessary for the stated purposes, including legal, accounting, security and dispute-resolution requirements.

• General contact inquiries [12 TO 24 MONTHS].
• Property and partnership assessments [24 TO 36 MONTHS AFTER LAST ACTIVITY].
• Active business relationships Duration of relationship plus [7 YEARS].
• Marketing and consent evidence While active and [3 TO 6 YEARS] afterward.
• Cookie and analytics information Duration stated in the cookie-preference interface.
• Suppression records As needed to honor opt-out and unsubscribe requests.

10. Security

Mercury uses reasonable administrative, technical and organizational safeguards designed to protect personal information. These may include access controls, encryption in transit, vendor oversight, security monitoring, confidentiality obligations and incident-response procedures. No website, transmission or storage system can be guaranteed completely secure.

11. Your Privacy Rights

United States

Residents of certain U.S. states may have rights to confirm processing, access, correct, delete or obtain portable personal information; opt out of sale, sharing, targeted advertising or certain profiling; limit certain uses of sensitive information; appeal a denied request; and receive equal service when exercising their rights. California residents may also request categories and specific pieces of information, sources, purposes and categories of recipients. Mercury will recognize Global Privacy Control signals where legally required and technically applicable.

Canada

Canadian individuals may have rights to receive information about Mercury's practices, access information, request correction, withdraw consent subject to restrictions, challenge compliance and complain to the applicable regulator. Quebec residents may have additional rights involving access, correction, withdrawal of consent, cessation of dissemination, de-indexation and portability where applicable.

European Union and European Economic Area

Individuals covered by the GDPR may have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent, information about transfer safeguards and complaint to a supervisory authority. Mercury does not intend to make decisions producing legal or similarly significant effects based solely on automated processing.

12. Exercising Your Rights

Submit a request by email to info@mercury-ars.com, through www.mercuryautomatedretailsolutions.com/contact, or by telephone at +1 (844) 447-9938. Describe the right you wish to exercise and provide enough information to locate relevant records.

Mercury may take reasonable steps to verify identity and authority. Authorized agents may submit requests where permitted. If Mercury denies a request, eligible individuals may appeal through info@mercury-ars.com using the subject Privacy Appeal.

13. Marketing Communications

You may unsubscribe through the link in a marketing email or by contacting info@mercury-ars.com. Mercury will process commercial electronic messages in accordance with applicable consent and unsubscribe requirements. Necessary administrative or transactional communications may continue.

14. Children's Privacy

The website is intended for business and professional audiences and is not directed to children. Mercury does not knowingly collect personal information from children under 13 or knowingly offer services directly to children. Contact info@mercury-ars.com if you believe a child has provided personal information.

15. Third Party Websites and Services

The website may link to third-party websites or services. Mercury does not control their privacy or security practices. Review the applicable third-party privacy notices before providing information.

16. Changes to This Privacy Policy

Mercury may update this Privacy Policy to reflect changes in law, technology or business practices. We will post the revised policy with an updated date and provide additional notice or request renewed consent where required.

17. Contact and Complaints

Privacy Officer

Swyft, Inc.

doing business as Mercury Automated Retail Solutions

8 The Green #27013, Dover, DE 19901, United States of America

info@mercury-ars.com

+1 (844) 447-9938

Canadian individuals may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial regulator. European individuals may lodge a complaint with their local supervisory authority.