Privacy policy
PALMER.DIRECT Privacy Policy
Last updated: 1 August 2026
PALMER.DIRECT is committed to protecting your privacy and handling your personal information fairly, transparently and securely.
PALMER.DIRECT is a trading name operated by Palmer Distribution, a business operated by:
Legal name: Jonathon Palmer
Trading name: Palmer Distribution / PALMER.DIRECT
Business address: Unit WS10, Preston Technology Centre, PR1 8UQ
Email: hello@palmerdistribution.co.uk
For data-protection purposes, Jonathon Palmer trading as Palmer Distribution is the controller of your personal information.
1. Information we collect
We may collect the following information:
Your name, billing address, delivery address, email address and telephone number.
Account login details and account preferences.
Products purchased, order history, subscriptions, returns and refunds.
Payment status and limited payment information. Full payment-card details are normally processed by our payment providers rather than stored by us.
Messages, reviews, customer-service enquiries and other communications.
IP address, browser, device, approximate location, referring website and activity on our website.
Marketing preferences and information about how you interact with our emails.
Information used to prevent fraud, misuse, unauthorised transactions and security incidents.
Any information you voluntarily provide when contacting us.
Please do not send us medical records or other sensitive health information. Purchasing a health or supplement product does not mean that we diagnose or make assumptions about any medical condition.
2. How we collect information
We collect information:
Directly from you when you place an order, create an account, subscribe, contact us or join our mailing list.
Automatically through cookies, pixels, server logs and similar technologies.
From service providers involved in payments, fraud prevention, website hosting, analytics and delivery.
From publicly available sources where necessary for fraud prevention, legal compliance or business administration.
3. How and why we use your information
We use personal information to:
Process orders, payments, subscriptions, deliveries, returns and refunds.
Provide customer service and respond to enquiries.
Create and manage customer accounts.
Send order confirmations, delivery updates and service messages.
Detect fraud, misuse and security threats.
Maintain accounting, tax and legal records.
Improve our website, product range and customer experience.
Measure website performance and understand how customers use our store.
Send marketing where you have consented or where otherwise permitted by law.
Defend or exercise legal claims.
Comply with legal and regulatory obligations.
Our lawful bases may include:
Contract: where processing is necessary to take payment, fulfil an order, manage a subscription or provide customer service.
Legal obligation: where we must retain records or provide information to authorities.
Legitimate interests: including operating and improving the business, preventing fraud, securing the website and understanding store performance, provided those interests do not override your rights.
Consent: including certain marketing communications and non-essential cookies. You may withdraw consent at any time.
UK GDPR privacy information should explain the purposes, lawful bases, recipients, retention and individual rights associated with processing.
4. Payments
Payments may be handled by Shopify Payments, PayPal, card networks, banks and other payment providers shown at checkout.
These providers process information under their own privacy terms and security procedures. We generally receive confirmation of payment, transaction references and limited payment information rather than your complete card number.
5. Who we share information with
We may share relevant information with:
Shopify, which supports our ecommerce operations, checkout, customer accounts and order management.
Lovable and other website-hosting or technical service providers.
Payment processors, card networks and fraud-prevention providers.
Royal Mail, Evri, InPost, DPD and other delivery or fulfilment providers used for your order.
Email, customer-service and marketing providers.
Google and other analytics, search, advertising or product-listing services, subject to your cookie choices where required.
Accountants, insurers, legal advisers and other professional advisers.
Government bodies, regulators, law-enforcement agencies or courts where legally required.
A purchaser or successor if all or part of the business is sold or reorganised.
We only share information reasonably necessary for the relevant purpose. We do not sell your personal information to advertisers.
6. International transfers
Some providers may process information outside the United Kingdom. Where a restricted international transfer takes place, we will use an appropriate legal mechanism, such as UK adequacy regulations, an approved contractual safeguard or another lawful exception.
UK GDPR contains specific requirements for transfers to separate organisations outside the UK.
7. How long we retain information
We retain information only for as long as reasonably necessary.
Typical retention periods include:
Order, invoice, payment and tax records: generally up to six years or longer where required by law or an active dispute.
Customer-service correspondence: for as long as necessary to resolve the enquiry and maintain appropriate business records.
Customer-account information: while the account remains active and for a reasonable period afterwards.
Marketing information: until you unsubscribe or we determine that the information is no longer required.
Cookie and analytics data: according to the lifespan shown in our cookie settings or the relevant provider's documentation.
Fraud-prevention records: for as long as reasonably necessary to protect customers and the business.
VAT-registered businesses generally need to retain VAT business records for at least six years.
8. Marketing
You may receive marketing from us where:
You have actively opted in; or
You previously purchased from us and the law permits us to contact you about similar products.
You can unsubscribe at any time using the link in an email or by contacting us at hello@palmerdistribution.co.uk.
Unsubscribing from marketing will not stop essential communications concerning orders, subscriptions, refunds, safety notices or account security.
9. Cookies
We use essential cookies to operate functions such as the basket, checkout, security and customer accounts.
With your permission, we may also use analytics, personalisation and advertising technologies. You can accept, reject or customise non-essential cookies through our cookie banner or settings.
Where consent is required, non-essential analytics or advertising technologies should not be activated before the user gives valid consent.
Further details should be provided in our separate Cookie Policy or cookie-preference centre.
10. Your rights
Depending on the circumstances, you may have the right to:
Request access to your personal information.
Ask us to correct inaccurate or incomplete information.
Ask us to delete information.
Restrict how information is used.
Object to certain uses, including direct marketing.
Request transfer of information in a portable format.
Withdraw consent where processing relies on consent.
Complain about how your information has been handled.
These rights are not absolute and may be subject to legal exceptions.
To exercise a right, email hello@palmerdistribution.co.uk. We may need to verify your identity before completing the request.
11. Complaints
Please contact us first so that we can investigate your concern.
You also have the right to complain to the UK Information Commissioner's Office. Information about making a complaint is available from the ICO.
12. Security
We use reasonable technical and organisational measures designed to protect information against loss, misuse, unauthorised access, alteration and disclosure.
No internet service is completely secure, but we regularly review our security arrangements and limit access to personal information where appropriate.
13. Children
Our store is intended for general adult retail customers. We do not knowingly collect personal information directly from children who are not legally able to place an order.
14. Changes to this policy
We may update this policy to reflect changes in our services, providers or legal responsibilities. The latest version will always be published on this page with its revision date.