Privacy & Cookie Policy

Last updated: June 2026

This Privacy Policy explains how The Palms Magazine (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you visit palmsmagazine.com or palmswebshop.com, make a purchase, or otherwise interact with us. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: The Palms Magazine
Publisher: Robert Mantse
Address: 43 Berkeley Square, Mayfair, London, W1J 5AP, United Kingdom
Email: press@palmsmagazine.com

As the data controller, we are responsible for deciding how and why personal data about you is processed. If you have any questions about how we use your personal data, please contact us using the details above.

2. What Personal Data We Collect

We collect the following categories of personal data:

• Identity data: first name, last name
• Contact data: email address, postal address, telephone number
• Transaction data: details of products purchased, payment amounts, order history
• Financial data: bank transfer or payment reference details (we do not store full card numbers — card payments are processed by our secure payment providers)
• Technical data: IP address, browser type and version, time zone, operating system, device type
• Usage data: information about how you use our website, products and services
• Communications data: your preferences in receiving communications from us and any correspondence you send us

We do not collect any special category data (such as health, race, religious beliefs or biometric data) and we do not knowingly collect data from children under the age of 13.

3. How We Collect Your Data

• Directly from you — when you place an order, contact us by email, or fill in a form on our website
• Automatically — when you visit our website, we may collect technical and usage data through cookies and similar technologies (see Section 9)
• From third parties — such as payment processors, analytics providers, and email marketing platforms

4. How We Use Your Personal Data

We use your personal data for the following purposes, each linked to a lawful basis under UK GDPR:

• To process and fulfil your orders — including dispatching print editions and providing access to digital issues (Lawful basis: Contract)
• To manage payments — including processing bank transfers and communicating about payment status (Lawful basis: Contract)
• To respond to enquiries and press requests (Lawful basis: Legitimate interests)
• To send transactional emails — such as order confirmations and shipping updates (Lawful basis: Contract)
• To send marketing communications — newsletters and updates about new issues, only where you have given consent (Lawful basis: Consent)
• To improve our website — using analytics data to understand how visitors use our site (Lawful basis: Legitimate interests)
• To comply with legal obligations — such as tax and accounting requirements (Lawful basis: Legal obligation)

5. Marketing Communications

We may contact you with information about new issues or editorial content only if you have opted in. You can opt out at any time by:

• Clicking the “unsubscribe” link in any marketing email
• Emailing us at press@palmsmagazine.com

We will never sell your personal data to third parties for marketing purposes.

6. Who We Share Your Data With

We may share your personal data with the following categories of third parties, only where necessary:

• Payment processors — to handle secure payments
• Shipping and fulfilment providers — to deliver print editions to your address
• Email service providers — to send transactional and marketing emails
• Website hosting and analytics providers — to maintain and improve our website
• Professional advisers — including accountants and legal advisers where required
• HMRC and regulatory authorities — where required by law

All third-party service providers are required to handle your personal data securely and in accordance with UK GDPR. We do not permit them to use your data for their own purposes.

7. International Data Transfers

Some of our third-party service providers may store or process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place — such as UK International Data Transfer Agreements (IDTAs) or equivalent protections recognised by the UK government — so your data receives the same level of protection as within the UK.

8. How Long We Keep Your Data

• Order and transaction records — retained for 7 years to comply with HMRC requirements
• Customer account information — retained while your account is active, plus 2 years after your last interaction
• Marketing consent records — retained until you withdraw consent
• Correspondence and enquiries — retained for 2 years from the date of last contact
• Website analytics data — typically retained for 26 months

We will securely delete or anonymise your personal data when it is no longer needed for the purpose for which it was collected.

9. Cookies

Our website uses cookies — small text files stored on your device — to help the site function and to understand how visitors use it. We use the following types:

• Strictly necessary cookies — essential for the website to work (e.g. shopping cart, login session). These cannot be disabled.
• Functional cookies — remember your preferences and settings
• Analytics cookies — help us understand how visitors use the site (e.g. Google Analytics). Only set with your consent.
• WooCommerce cookies — used to manage your shopping cart and checkout session

When you first visit our website, you will be shown a cookie banner asking for your consent to non-essential cookies. You can change your preferences at any time via the cookie settings link on our website or by adjusting your browser settings.

10. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right to be informed — to know how your data is used (this policy fulfils that obligation)
• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to ask us to delete your data where there is no legitimate reason to retain it
• Right to restrict processing — to ask us to pause processing in certain circumstances
• Right to data portability — to request your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not use automated decision-making or profiling with significant legal effects

11. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption on all web pages and data transmissions
• Access controls so only authorised personnel can access personal data
• Secure payment processing via certified third-party providers
• Regular security reviews of our systems and software

In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) within 72 hours, as required by UK GDPR.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated via our website. The date at the top of this page shows when it was last updated.

14. How to Make a Complaint

If you are unhappy with how we have handled your personal data, please contact us first at press@palmsmagazine.com and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the UK’s data protection supervisory authority: