Privacy Policy

Last updated: 8 September 2026

PalettePro Ltd respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit palettepro.com, purchase products from us, create an account, subscribe to marketing, contact us or otherwise interact with PalettePro.

1. Who we are

The data controller responsible for your personal information is:

PalettePro Ltd
Company number: 11940845

Registered office:
22e West Station Yard
Spital Road
Maldon
Essex
England
CM9 6TS

Trading and office address:
The Old Bakehouse
Fullbridge
Maldon
Essex
United Kingdom
CM9 4LE

Email: admin@shopmichaeljamessmith.com

Our online store is operated using Shopify.

2. Personal information we collect

Depending on how you interact with us, we may collect:

• your name;

• billing and delivery addresses;

• email address;

• telephone number;

• account details;

• order and purchase history;

• products viewed or added to your basket;

• payment confirmation and transaction information;

• delivery and tracking information;

• communications with our customer service team;

• marketing preferences;

• product reviews or other content you submit;

• IP address;

• browser and device information;

• website usage and interaction information;

• cookie and similar tracking information; and

• information used to detect or prevent fraud.

We do not normally receive or store your complete payment card details. Payments are processed through Shopify and/or the payment provider selected at checkout.

3. How we collect information

We collect personal information:

Directly from you

For example, when you:

• place an order;

• create an account;

• subscribe to our mailing list;

• complete a form;

• contact us;

• enter a promotion;

• leave a review; or

• otherwise provide information to us.

Automatically

Certain technical information may be collected when you use our website through cookies, pixels and similar technologies.

From third parties

We may receive information from service providers involved in operating our business, including:

• Shopify;

• payment providers;

• delivery companies;

• email and marketing service providers;

• analytics providers;

• advertising platforms; and

• fraud-prevention and security providers.

4. How we use your information

We use personal information where we have a lawful reason to do so.

Processing and fulfilling orders

We use your information to:

• process orders and payments;

• arrange delivery;

• provide order confirmations and updates;

• handle returns and refunds;

• respond to questions about your order; and

• maintain records of transactions.

The principal legal basis for this processing is that it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Customer service

We use your information to respond to enquiries, resolve problems, provide support and manage our relationship with you.

This may be necessary to perform our contract with you or for our legitimate interests in operating our business and providing effective customer service.

Legal and regulatory requirements

We may use and retain information where necessary to comply with legal obligations, including accounting, tax, consumer-protection, customs, product-safety and regulatory requirements.

Fraud prevention and security

We may process information to:

• protect our website and systems;

• verify transactions;

• detect suspicious activity;

• prevent fraud;

• protect customers; and

• enforce our legal rights.

We do this where necessary for our legitimate interests in protecting PalettePro, our customers and our services, or where required by law.

Improving our website and business

We may use information about how customers use our website to understand performance, troubleshoot problems and improve our products, services and customer experience.

Where required by law, optional cookies or similar technologies will only be used after appropriate consent has been obtained.

5. Marketing

If you subscribe to our marketing communications, we may send you information about:

• PalettePro products;

• new releases;

• special offers;

• promotions;

• news; and

• other relevant updates.

Where consent is required, we will rely on your consent.

In some circumstances, the law may permit us to send marketing about similar products to existing customers without obtaining fresh consent, provided the applicable requirements are met and you are given a clear opportunity to opt out.

You can unsubscribe from marketing emails at any time by:

• using the unsubscribe link in the email; or

• contacting admin@shopmichaeljamessmith.com.

Unsubscribing from marketing does not prevent us from sending necessary service communications about an order or account.

We may use email marketing providers, including Mailchimp or other providers used by PalettePro from time to time, to manage marketing communications.

6. Cookies and similar technologies

Our website uses cookies and similar storage and access technologies.

These technologies may be used to:

• operate the website;

• remember your basket and preferences;

• maintain security;

• enable checkout;

• understand website performance;

• measure website usage; and

• where you have given the required consent, support advertising, measurement or personalisation.

Some cookies and technologies are necessary for the operation of the website and may be used without consent where permitted by law.

Other technologies may also fall within specific legal exemptions where their impact on privacy is limited and the applicable legal conditions are met.

Cookies or similar technologies used for targeted or behavioural advertising will only be used where the required consent has been obtained.

You can manage your cookie preferences through the controls provided on our website where available.

Changing or blocking certain cookies may affect how parts of the website function.

7. Advertising and social media

Where you have given any consent required by law, we may use advertising and social-media services to:

• measure the effectiveness of advertising;

• understand how people interact with our advertising;

• create or measure audiences; and

• show advertising that may be more relevant to users.

These services may use cookies, pixels or similar technologies.

You can withdraw or change your cookie choices using the privacy or cookie controls provided on our website where available.

8. Who we share personal information with

We do not sell customer information in the ordinary meaning of selling customer databases or contact details.

We may share personal information where reasonably necessary with organisations that help us operate our business, including:

• Shopify, which provides our e-commerce platform;

• payment processors and payment providers;

• banks and financial service providers;

• Royal Mail, couriers and other delivery providers;

• customs and import authorities where required;

• email and marketing providers;

• website hosting and technology providers;

• analytics providers;

• advertising and social-media platforms where appropriate;

• professional advisers such as accountants, insurers or lawyers;

• fraud-prevention and security providers; and

• government, regulatory or law-enforcement authorities where disclosure is legally required.

Service providers are given only the information reasonably required for the relevant purpose.

Some third parties may also act as independent data controllers for information they receive. Their own privacy policies will apply to their processing.

9. Shopify

Our online store is powered by Shopify.

Shopify processes certain personal information when you browse our website, create an account, use checkout or purchase from us.

Shopify may also process information to provide services such as payments, fraud prevention, analytics and other Shopify functionality.

Shopify processes information in accordance with its own applicable privacy information and contractual arrangements with merchants such as PalettePro.

10. Delivery companies

We provide the information necessary to deliver your order to postal operators, couriers and other delivery partners.

This will normally include:

• your name;

• delivery address;

• email address;

• telephone number where necessary;

• parcel information; and

• information required for customs documentation.

For international orders, information may also be supplied to customs authorities, carriers and customs intermediaries as required by law.

11. International transfers

Some of the organisations that process personal information on our behalf may operate outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps where required to ensure that the transfer is lawful.

Depending on the destination and circumstances, these measures may include:

• UK adequacy regulations;

• recognised contractual safeguards;

• the UK International Data Transfer Agreement;

• an applicable UK Addendum to recognised contractual clauses; or

• another lawful transfer mechanism.

12. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet our legal, accounting and regulatory obligations.

The retention period depends on the type of information.

For example:

• order and transaction records may be retained for the period required for tax, accounting and legal purposes;

• customer-service correspondence may be kept for as long as necessary to resolve an enquiry and deal with related issues;

• account information may normally be retained while an account remains active and for an appropriate period afterwards;

• marketing information may be retained until you unsubscribe or we no longer need it, subject to retaining sufficient information to respect your opt-out; and

• fraud and security information may be retained where reasonably necessary to protect our business and customers.

We may retain information for longer where necessary in connection with a legal claim, dispute, investigation or regulatory requirement.

13. Security

We take reasonable technical and organisational measures to protect personal information from:

• loss;

• misuse;

• unauthorised access;

• alteration;

• disclosure; and

• destruction.

However, no internet service or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping any account passwords or access credentials confidential.

If you believe your PalettePro account or personal information has been compromised, please contact us.

14. Your data protection rights

Depending on the circumstances, data-protection law may give you rights including the right to:

• ask whether we process your personal information;

• request access to your personal information;

• request correction of inaccurate or incomplete information;

• request deletion of personal information in certain circumstances;

• request restriction of processing in certain circumstances;

• object to certain processing;

• withdraw consent where processing is based on consent;

• receive certain information in a portable format where the right to data portability applies; and

• raise a complaint about the way we process your information.

These rights are not absolute and may be subject to legal conditions or exemptions.

We may need to verify your identity before fulfilling a request.

To exercise a data-protection right, contact:

admin@shopmichaeljamessmith.com

We will respond within the period required by applicable law.

15. Automated processing

We may use automated systems to help identify potentially fraudulent, suspicious or high-risk transactions.

These tools may assist us in deciding whether an order requires additional checks.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals unless this is permitted by law and appropriate safeguards are provided.

16. Data protection complaints

If you are concerned about how PalettePro has collected, used or protected your personal information, you can make a data-protection complaint to us.

Please contact:

admin@shopmichaeljamessmith.com

Please explain your concern and provide enough information for us to investigate it.

We will acknowledge receipt of a data-protection complaint within 30 days and will take appropriate steps to investigate it without undue delay.

We will keep you appropriately informed and provide you with the outcome of our investigation.

You also have the right to raise concerns with the UK's data-protection regulator, the Information Commissioner's Office (ICO).

We would appreciate the opportunity to investigate and resolve your concern directly in the first instance.

17. Customers outside the United Kingdom

If you live outside the United Kingdom, local privacy or data-protection laws may provide additional rights.

Where the EU GDPR or another mandatory privacy regime applies to our processing of your information, nothing in this Privacy Policy is intended to limit rights that cannot legally be restricted.

18. Children's information

Our online store is not specifically directed at children.

We do not knowingly seek to collect personal information from children in circumstances where parental or guardian involvement is legally required.

If you believe that a child has provided personal information to us inappropriately, please contact us.

19. Third-party websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices of websites that we do not operate.

We recommend reviewing the privacy information of any third-party website before providing personal information to it.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes in our business;

• changes in the services we use;

• changes to our website;

• changes in how we process personal information; or

• legal and regulatory developments.

The latest version will be published on our website with the date it was last updated.

Where a change materially affects how we use personal information, we will take any additional steps required by law.

21. Contact us

For privacy enquiries, data-protection rights or complaints, contact:

PalettePro Ltd
The Old Bakehouse
Fullbridge
Maldon
Essex
United Kingdom
CM9 4LE

Email: admin@shopmichaeljamessmith.com