Club privacy & welcome offers

Who is responsible for membership data

Data controller: Hamidreza Shabani (Merfinda).

Privacy contact: hello@loganselect.se

What the club will ask for

Email is required to verify access to your membership. First name, phone number, country, purchase interests and requested models are optional. We do not ask for your date of birth, identity number, home address or payment details at registration.

How the details will be used

Membership details support your account, chosen preferences, welcome-code eligibility and purchase support. Selected interests and requested models help us choose future stock. Marketing emails require your separate choice and can be stopped from your membership preferences.

Offers and introductions

Your welcome discount starts at 5% after email verification and can reach 15%: +5% for an SMS-verified phone, +2% for full name, and +1% each for marketing email consent, a saved favorite, and country. The code expires 30 days after issue; later profile updates do not restart it. It applies to an eligible first direct purchase. A referral purchase does not consume an unused welcome code. Welcome and referral codes cannot be combined; one personal code applies per purchase. Shipping, extras, and external marketplace checkouts are excluded.

An introduction earns a bonus only after the seller checks a genuine first direct purchase by a different customer. A signup alone earns no referral bonus. Each bonus is 10% with no minimum or discount limit, valid for 30 days, with at most 5 issued per calendar month (UTC). Self-referrals and repeated claims are not eligible.

Access, correction and deletion

Merfinda account deletion · Radering av Merfinda-konto

To request deletion of your Merfinda app or website account and associated data, email hello@loganselect.se from your registered email address. Use the subject “Merfinda account deletion”. No app installation is needed. We may ask you to verify control of the account. Requests are handled manually; see the retention details below.

Begär radering av ditt Merfinda-konto och tillhörande uppgifter genom att mejla hello@loganselect.se från din registrerade mejladress. Skriv “Radering av Merfinda-konto” som ämne. Du behöver inte installera appen. Vi kan be dig att bekräfta att kontot är ditt. Begäran hanteras manuellt; se informationen om lagring nedan.

Members can change optional details and stop marketing emails in their account. For a copy, correction or deletion request, contact the seller. Membership records, email permissions and redemption records must be reviewed and removed or anonymised when no longer needed; separate records required for a completed sale are handled separately.

Phone numbers are not used for SMS marketing. Email verification and temporary request limits help protect the club. Confirmed introductions and code use are recorded to prevent duplicate rewards. These checks reduce abuse but cannot guarantee one account per person.

Why we process your details

Account verification, membership preferences and offer administration are used to provide the club service you request (GDPR Article 6(1)(b)). Optional profile details and marketing emails rely on your consent (Article 6(1)(a)); remove optional details or change your email choice to withdraw it. Withdrawal does not affect earlier lawful processing.

Preventing fraudulent signups and duplicate discounts is our legitimate interest (Article 6(1)(f)). We use request limits, verification and limited discount records for this purpose. You may object to this processing. Membership and the welcome offer do not require marketing consent. We do not make decisions with legal or similarly significant effects solely by automated processing.

Services and international transfers

Netlify hosts the website and processes membership requests. Supabase stores account and membership records and verifies sign-ins. Resend receives the destination email address and verification message to deliver account emails. If you contact support, your correspondence is handled through Inleed email forwarding and Google Gmail. Your email provider also receives the messages sent to you.

When available and requested by you, Twilio receives your phone number and one-time code to deliver an SMS. The number is not used for SMS advertising.

These services can process information outside the EU/EEA, including in the United States; Supabase also describes transfers to Singapore. Resend stores email content and delivery information in the United States even when an EU sending region is selected. Provider transfer safeguards include EU Standard Contractual Clauses and, where applicable, adequacy decisions. The linked provider documents describe their safeguards; contact us for information or a copy of the relevant safeguards.

Netlify · Supabase · Resend DPA · Resend GDPR · Inleed · Google

How long we keep information

We review membership records at least annually. Profiles and email preferences are kept while membership is active, with a maximum of 24 months after registration or the latest recorded profile update unless you renew your membership. On closure, we remove or anonymise profile details within 30 days unless a specific legal obligation or unresolved claim requires limited records to be kept. Retention reviews and deletion requests are handled manually by the operator.

Limited consent history, discount/redemption records and keyed email fingerprints used to prevent repeated welcome claims are retained for up to 24 months after the relevant permission ends, code expires or discount is used. Fingerprints are pseudonymous personal data, not anonymous data. Ordinary support correspondence is kept for up to 24 months after a case closes. Records needed for an actual sale or legal claim are kept separately only as long as required for that purpose. Hosting, authentication and delivery providers also operate their own technical logs and backup cycles as described in their policies.

Your choices and rights

Contact hello@loganselect.se to request access, correction, deletion, restriction or a portable copy where applicable, or to object to legitimate-interest processing. We normally respond within one month and may need to verify that you control the account. You can change optional details and stop marketing emails in your membership account. You may also complain to the Swedish Authority for Privacy Protection (IMY).

Integritetsskyddsmyndigheten (IMY)

Requests and messages

Purchase requests and account messages share your chosen item, quote and member contact details with the seller for purchase support (Article 6(1)(b)). An initial request is not a payment or stock reservation. After approval, the item and attached code are reserved until the seller completes or cancels the request; agreed shipping and payment instructions appear privately in your account. You can contact the seller here before paying. Uncompleted requests and related messages are reviewed and removed or anonymised within 24 months after closure; completed-sale records are handled separately where needed for sales or legal obligations. Your saved bag contains only item and accessory references stored in this browser.

Android app and photo attachments / Android-appen och bildbilagor

The Merfinda Android app uses the same account and purchase-support service as this website. You may choose a photo to attach to a private conversation with the seller. The app recompresses the selected photo and removes its embedded metadata before upload. The attachment is stored with the conversation and access is checked for the member and seller. The request, message and account-deletion retention rules on this page also apply to these attachments. Conversations are not end-to-end encrypted.

Merfindas Android-app använder samma konto- och köpsupport som webbplatsen. Du kan välja en bild att bifoga i ett privat samtal med säljaren. Appen komprimerar bilden och tar bort inbäddade metadata före uppladdning. Bilagan lagras med samtalet och åtkomsten kontrolleras för medlemmen och säljaren. Sidans regler om lagring och radering av konton, förfrågningar och meddelanden gäller även dessa bilagor. Samtalen är inte totalsträckskrypterade.

The Android app keeps an encrypted sign-in session on your device for up to 45 minutes. Signing out removes that local session. Passwords, private message history and photo drafts are not saved by the app for offline use.

Android-appen sparar en krypterad inloggningssession på enheten i högst 45 minuter. Utloggning tar bort den lokala sessionen. Lösenord, privat meddelandehistorik och bildutkast sparas inte av appen för användning offline.

Sign-in storage

Signing in sets an essential, secure HttpOnly membership cookie for up to 45 minutes. It supports your signed-in session rather than advertising. Your language choice is stored locally in your browser. Security limits use keyed identifiers derived from your email address or network address. Our application does not write registration form bodies, verification codes or member session tokens to its diagnostic logs.

Favorites and site activity

Favorites require a member account. Your saved items, name and member email are visible to the seller, who may contact you through your website inbox. Email offers follow your email preferences. Anonymous visit estimates use a daily fingerprint derived from the network address and browser type; raw addresses are not stored and visitors are not identified to the seller.