This privacy policy explains how Wholesale Return Pallets Ltd(“we”, “us”) collects and uses your personal data when you visit wholesalereturnpallets.co.uk or buy from us. We comply with the UK GDPR and Data Protection Act 2018.
We are the data controller for the personal data we hold about you. You can contact us at info@wholesalereturnpallets.co.uk with any privacy questions.
1. What we collect
We only collect data we need to do business with you. Specifically:
- Contact details — name, email, phone number, business name, VAT number — when you submit an enquiry, place an order, or apply for a wholesale account.
- Transaction details — pallet purchased, price paid, delivery address, payment method (we do not store full card numbers; payment processors handle these).
- Communication history — WhatsApp messages, emails, and support tickets, retained for service quality and legal compliance.
- Technical data — IP address, browser type, pages visited, referral source. Used for security, analytics, and fraud prevention.
2. Why we use it
- To process your orders and deliver pallets you've bought
- To reply to enquiries and provide after-sales support
- To issue VAT invoices and meet HMRC record-keeping obligations
- To detect and prevent fraud or abuse of our service
- To improve our website (anonymised analytics only — see Cookie Policy)
- With your consent, to send occasional new-stock alerts via email or WhatsApp. You can opt out at any time.
3. Legal bases (UK GDPR)
- Contract— processing necessary to deliver goods and services you've ordered.
- Legal obligation — VAT records (HMRC requires 6-year retention), Companies Act accounting requirements.
- Legitimate interests — fraud prevention, basic site analytics, defending our legal rights.
- Consent — for marketing emails, non-essential cookies, and any other optional processing.
4. Who we share data with
We share your data only with parties needed to fulfil our service. Specifically:
- Pallet-Track / Palletways / Palletline — pallet courier networks for delivery.
- Stripe — payment processing (we never see full card numbers).
- PayPal — payment processing (where you choose to pay this way).
- Resend / Microsoft 365 — email delivery.
- Supabase / Cloudflare — secure cloud hosting in EU/UK regions.
- HMRC and other regulators — when legally required.
We do not sell your data to advertisers or third parties. We do not transfer data outside the UK or EU without appropriate safeguards (UK–EU adequacy decisions or Standard Contractual Clauses).
5. How long we keep it
- Order records: 6 years (HMRC requirement)
- Customer enquiry data with no follow-up purchase: 24 months
- Marketing list contacts: until you unsubscribe
- Web server logs: 90 days
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion (subject to our legal retention duties)
- Object to or restrict processing
- Request data portability
- Withdraw consent for marketing
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these, email info@wholesalereturnpallets.co.uk. We respond within one calendar month.
7. Security
We protect your data with industry-standard measures including encrypted connections (HTTPS/TLS), encrypted at-rest storage, limited admin access, and regular security reviews. No system is 100% secure, but we follow good practice and notify you (and the ICO where required) of any breach affecting your data.
8. Cookies
See our separate Cookie Policy for details of how and why we use cookies.
9. Updates
We may update this policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top will change. Material changes will be flagged at the top of this page.