This privacy policy explains how Wholesale Return Pallets(“we”, “us”) collects and uses your personal data when you visit wholesalereturnpallets.co.uk or buy from us. We comply with the UK GDPR and Data Protection Act 2018.
We are the data controller for the personal data we hold about you. You can contact us at info@wholesalereturnpallets.co.uk with any privacy questions.
1. What we collect
We only collect data we need to do business with you. Specifically:
- Contact details — name, email, phone number, business name, and any tax-reference numbers you choose to share — when you submit an enquiry, place an order, or apply for a wholesale account.
- Transaction details — pallet purchased, price paid, delivery address, payment method (we do not store full card numbers; payment processors handle these).
- Communication history — WhatsApp messages, emails, and support tickets, retained for service quality and legal compliance.
- Technical data — IP address, browser type, pages visited, referral source. Used for security, analytics, and fraud prevention.
2. Why we use it
- To process your orders and deliver pallets you've bought
- To reply to enquiries and provide after-sales support
- To issue order confirmations and meet HMRC record-keeping obligations
- To detect and prevent fraud or abuse of our service
- To improve our website (anonymised analytics only — see Cookie Policy)
- With your consent, to send occasional new-stock alerts via email or WhatsApp. You can opt out at any time.
3. Legal bases (UK GDPR)
- Contract— processing necessary to deliver goods and services you've ordered.
- Legal obligation — HMRC record-keeping (typically 6-year retention) and other UK business accounting requirements.
- Legitimate interests — fraud prevention, basic site analytics, defending our legal rights.
- Consent — for marketing emails, non-essential cookies, and any other optional processing.
4. Who we share data with
We share your data only with parties needed to fulfil our service. Specifically:
- Pallet-Track / Palletways / Palletline — UK pallet courier networks for delivery.
- Stripe, Inc. (US, with UK data-processing addendum) — card payment processing. We never see full card numbers.
- PayPal (Europe) S.à r.l. — payment processing where you choose to pay this way.
- Resend, Inc. (US) — transactional and marketing email delivery.
- Microsoft 365 (EU / UK regions) — human-to-human email (info@ inbox).
- Supabase, Inc. (EU region) — application database and authentication.
- Vercel, Inc. (US, EU edge) — website hosting and edge delivery.
- Cloudflare, Inc. (global CDN) — image and asset delivery, DDoS protection.
- Google LLC — Google Analytics 4 for anonymised traffic analytics (only if you accept analytics cookies).
- Meta Platforms Ireland Ltd. — Facebook Pixel and Conversions API for advertising measurement (only if you accept marketing cookies).
- YouTube (Google Ireland Ltd.) — embedded warehouse live stream on /warehouse-live.
- HMRC and other regulators — when legally required.
We do not sell your data. Some of our sub-processors (Stripe, Resend, Vercel, Meta, Google, Cloudflare) are US-headquartered and may transfer personal data to the United States. We rely on the UK Extension to the EU–US Data Privacy Framework and/or the ICO's International Data Transfer Addendum (based on Standard Contractual Clauses) as the safeguard for those transfers.
5. How long we keep it
- Order records: 6 years (HMRC requirement)
- Customer enquiry data with no follow-up purchase: 24 months
- Marketing list contacts: until you unsubscribe
- Web server logs: 90 days
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion (subject to our legal retention duties)
- Object to or restrict processing
- Request data portability
- Withdraw consent for marketing
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these, email info@wholesalereturnpallets.co.uk. We respond within one calendar month.
7. Security
We protect your data with industry-standard measures including encrypted connections (HTTPS/TLS), encrypted at-rest storage, limited admin access, and regular security reviews. No system is 100% secure, but we follow good practice and notify you (and the ICO where required) of any breach affecting your data.
8. Age & audience
This site is intended for UK trade and business buyers aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, contact us at info@wholesalereturnpallets.co.uk and we will delete it.
9. Cookies
See our separate Cookie Policy for details of how and why we use cookies.
10. Updates
We may update this policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top will change. Material changes will be flagged at the top of this page.