Privacy

Privacy Policy

Minimal data. Clear purpose. No selling.
A calm explanation of how PALMA handles information.

January 31, 2026
Last Updated
Updated only when this page changes
No selling
Your Data
Never sold to third parties
Only needed
Collection
For orders, support, and site function

How we think about privacy

Collect less

We only collect what we need to run the store properly.

Use it carefully

Order fulfillment, support, and security — nothing extra.

Keep it private

We don’t sell data. We don’t do cross-site tracking.

1

What we collect

Only what’s needed to run the store and support you.

Order details

Name, email, shipping address, items purchased, totals, and your Order ID. If you provide a phone number, we store it for delivery and support.

Payment status

We receive confirmation (paid / pending / failed) and transaction references from payment providers. We do not store full card numbers or CVV.

Support messages

If you contact us, we store what you send (and anything you include, like photos or an Order ID), so we can help properly.

Basic site data

We may collect limited, aggregated usage data to improve performance and fix issues. We do not run cross-site tracking.

Clear purpose only. If we don’t need it, we don’t collect it.
2

Why we collect it

Every category has a reason.

To fulfill orders

Processing payment, preparing your order, shipping it, and sending essential updates.

To support you

Resolving issues, answering questions, and handling returns or damaged shipments when needed.

To protect the store

Fraud prevention, abuse prevention, and basic security monitoring.

To improve performance

Finding broken pages, slow load times, and points of friction — without tracking you across the web.

What we don’t do

We don’t sell your data. We don’t run behavioral advertising. We don’t follow you across other websites.

3

Payments

Handled by secure providers.

Payment processors

Card payments are processed by third-party providers (for example, Stripe). Sensitive payment data is handled by them — not stored on PALMA servers.

What we receive

We receive payment status and transaction references needed to fulfill your order. We do not receive your full card number or CVV.

Disputes & refunds

If a payment is disputed or refunded, we use the reference and order record to resolve it properly.

4

Shipping partners

We share only what delivery requires.

What’s shared

Name, delivery address, and contact details needed for delivery and tracking. For international shipping, customs may require item description and value.

How partners may use it

Delivery only. Our partners are not permitted to use your details for their own marketing.

5

Email

Essential messages first. Optional messages only if you opt in.

Essential emails

Order confirmations, receipts, shipping updates, and support replies. These are necessary to complete your purchase.

Optional emails

If you sign up for a specific notification (e.g., “Coming Soon”), we’ll email you about that. We don’t add you to marketing lists without consent.

Every non-essential email includes an unsubscribe option.
6

Cookies

For function. Sometimes for basic analytics.

Essential cookies

Used for things like keeping your cart working and maintaining session state. Disabling them may break checkout.

Analytics

We may use privacy-friendly analytics to understand site performance. This is aggregated and not intended to identify you.

Your control

You can manage cookies in your browser settings. Blocking all cookies may prevent cart and checkout from functioning.

7

Retention

We keep data only as long as it’s needed.

Order records

Kept for accounting, support, and operational reasons. Where possible, older records may be anonymized.

Support messages

Kept long enough to resolve issues and maintain continuity. We avoid storing unnecessary details.

When data is no longer needed, we delete it or anonymize it.
8

Your rights

You can ask. We’ll respond.

Access

You can request a copy of the personal information we hold about you.

Correction / deletion

You can request corrections or deletion where applicable.

How to request

Contact us with your request. We may verify identity for safety. If your request is about an order, include your Order ID.

We aim to respond within 30 days (often sooner).
9

Security

Reasonable protection, continuously maintained.

Technical measures

Encryption in transit (HTTPS/TLS), access controls, regular updates, and secure handling of credentials.

Operational measures

Limited access to customer data and internal handling practices designed to reduce exposure.

No system is perfect — but we take protection seriously and keep improving.
10

Contact

For privacy questions or requests.

Privacy requests

If you have a privacy request, contact us. If it relates to an order, include your Order ID for faster handling.

Important note

This page explains our current privacy practices in plain language. It is not legal advice. Privacy laws can vary by location. If you need legal guidance, speak with a qualified professional.

We update this policy when our practices change.