Privacy Policy
PRIME SUPPLY DEPOT LTD | Company No. 17537628
Draft for a UK Shopify retail website • Prepared 26 October 2026
1. Who we are
PRIME SUPPLY DEPOT LTD (company number 17537628) operates the online store trading as [STORE/TRADING NAM at primesupply-london.com]. In this notice, “we”, “us” and “our” refer to PRIME SUPPLY DEPOT LTD. For the personal information we control, we are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.
Registered office: Suite10 Capital House, 61 Amhurst Road, London, E8 1LL, United Kingdom. Privacy contact: [PRIVACY EMAIL]. General contact: [info@primesupply-london.com].
2. Scope of this notice
This notice explains how we handle personal information when you browse our website, buy products, open an account, communicate with us, sign up for marketing, or otherwise interact with our store. Separate privacy notices of third-party providers may apply when they independently determine how they use your information, including some payment providers.
3. Information we collect
Information you provide: your name, email address, telephone number, billing and delivery addresses, business name (if supplied), account login details, products ordered, customer-service enquiries, reviews or other information you choose to submit.
Order and payment information: order identifiers, order history, amounts, currency, payment status, masked payment-method details, refunds, returns and transaction references. Full card numbers are generally handled by payment service providers rather than supplied to our ordinary customer-service team.
Device and website information: IP address, approximate location inferred from IP, device and browser information, pages viewed, referring pages, interactions, cookies and similar identifiers where enabled.
Communications and preferences: correspondence, support records, consent and unsubscribe preferences, and marketing engagement where enabled.
Fraud and security information: information relevant to detecting suspicious transactions, chargebacks or misuse, including signals provided by payment and fraud-prevention services where used.
We do not intentionally request special-category data (such as health information). Please do not send sensitive personal information unless strictly necessary.
4. Where information comes from
We obtain information directly from you at checkout, in your account, via forms or communications; automatically through our website and devices; and from providers involved in payment, fulfilment, website hosting, customer support and fraud prevention. We may also receive updates from carriers about delivery status.
5. Purposes and lawful bases
We use personal information only where there is a valid legal basis. Depending on the activity, these include: performance of a contract; compliance with a legal obligation; our legitimate interests (balanced against your rights); and consent where required.
• Process purchases, take payment, send order confirmations, deliver goods and manage returns — contract; and legal obligation for relevant records.
• Answer questions and resolve complaints — contract where connected to an order, otherwise legitimate interests in providing support.
• Maintain accounts, troubleshoot the site and protect systems — contract or legitimate interests in running a secure service.
• Detect fraud, investigate chargebacks and prevent abuse — legitimate interests in protecting customers and the business, and legal obligations where applicable.
• Maintain accounting, tax and statutory records — legal obligation.
• Send promotional emails or SMS — consent where required, or the limited UK “soft opt-in” where legally available and all conditions are met; every message will offer an opt-out.
• Run non-essential analytics, advertising or tracking technologies — consent where required under UK cookie/privacy rules; see section 7.
Where we rely on legitimate interests, you can request more information about our balancing assessment by contacting us.
6. Ecommerce platform and service providers
Our store is hosted using Shopify. Shopify and other service providers may process information to provide ecommerce infrastructure, checkout, hosting, security, order administration and related services. Their roles as processors or independent controllers depend on the specific service and circumstances.
Depending on which services we actually enable, recipients may include: payment processors [INSERT ACTUAL PROVIDERS], shipping and fulfilment partners [INSERT ACTUAL PROVIDERS], customer-support providers [INSERT], email/SMS providers [INSERT], analytics and advertising providers [INSERT], IT/security providers, professional advisers, and authorities where required by law.
We disclose only information reasonably necessary for the relevant purpose and apply appropriate contractual and security safeguards where required. We do not describe personal data as “sold” merely because a service provider processes it; however, advertising disclosures must accurately describe any tracking, sharing or targeted advertising actually used.
7. Cookies, analytics and advertising
Our website may use cookies and similar technologies for essential functions such as basket operation, checkout, authentication and security. We may also use optional analytics, personalisation and advertising technologies if enabled.
Where required by UK law, we request your consent before placing or accessing non-essential cookies or similar identifiers. You can reject or change non-essential preferences using [LINK TO COOKIE SETTINGS / CONSENT MANAGER]. Rejecting optional cookies should not prevent essential shopping functions.
A separate Cookie Policy should identify the actual cookies and third parties used, their purposes and lifetimes. Browser settings may also let you restrict cookies, but this may affect functionality. Do not rely on browser controls as a substitute for a compliant consent mechanism where consent is required.
8. Marketing communications
If you subscribe or otherwise lawfully qualify to receive marketing, we may contact you about relevant products, promotions and store news through the channels you selected. We keep a record of marketing choices and opt-outs. You can unsubscribe using the link in an email or contact [PRIVACY EMAIL]. Service messages about your orders are not the same as marketing. We do not send unsolicited electronic marketing unless a lawful basis and applicable direct-marketing rules permit it.
9. International transfers
Our ecommerce platform and other suppliers may process personal data outside the United Kingdom. Where UK data protection law restricts an international transfer, we will use an applicable adequacy regulation or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, together with any required risk assessment. Contact us for further information about safeguards relevant to your information. [VERIFY ACTUAL PROVIDERS AND TRANSFER LOCATIONS.]
10. Retention
We retain personal data only as long as reasonably necessary for the purpose collected, including to satisfy legal, accounting, tax, fraud-prevention and dispute-resolution obligations. Indicative retention periods must be confirmed against actual records and legal advice: order and accounting records [INSERT VERIFIED PERIOD]; customer-service correspondence [INSERT PERIOD]; inactive accounts [INSERT PERIOD]; marketing consent and suppression records [INSERT PERIOD]; analytics/cookie data [INSERT PROVIDER-SPECIFIC PERIOD].
When information is no longer needed, we delete, anonymise or securely archive it as appropriate. A request to erase data may not override a legal duty to retain certain records.
11. Security
We take appropriate technical and organisational measures intended to protect personal information, which may include access controls, encrypted connections, restricted staff permissions, service-provider assessments and security monitoring. No internet-based service is completely secure. Please protect your account credentials and contact us if you suspect unauthorised access.
12. Your data protection rights
Subject to the conditions and exemptions in applicable law, you may have rights to: access your personal data; correct inaccurate information; request erasure; restrict processing; object to certain processing, including direct marketing; receive portable data in certain circumstances; and withdraw consent at any time where consent is our lawful basis. Withdrawal does not affect earlier lawful processing.
To exercise your rights, email [PRIVACY EMAIL] with enough information to identify your request. We may request proportionate identity verification. We normally respond within one month, subject to lawful extensions where applicable. We do not ordinarily charge a fee unless a request is manifestly unfounded or excessive, or another lawful exception applies.
13. Automated decision-making and fraud checks
Payment and fraud-prevention providers may use automated systems to assess transaction risk. [CONFIRM WHETHER THE BUSINESS UNDERTAKES ANY SOLELY AUTOMATED DECISIONS WITH LEGAL OR SIMILARLY SIGNIFICANT EFFECTS; IF SO, ADD THE REQUIRED DETAILS, RIGHTS AND HUMAN REVIEW PROCESS.] We will not claim that no automated decision-making occurs without checking our enabled payment and fraud tools.
14. Children
Our products and website are not directed to children under 18. We do not knowingly solicit personal information from children. If you believe a child has supplied information inappropriately, please contact [PRIVACY EMAIL]. This statement does not replace any additional protections required if services are in fact likely to be accessed by children.
15. Links to third-party websites
Our site may link to external websites. We do not control their privacy practices. Please review the privacy notices of those sites before sharing information.
16. Complaints
Please contact us first at [PRIVACY EMAIL] so we can investigate any concern. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Visit https://ico.org.uk/make-a-complaint/ for current guidance on submitting a complaint.
17. Changes to this policy
We may update this notice to reflect changes to our practices, service providers or applicable law. We will publish the revised version here with a new “Last updated” date. Where required, we will provide additional notice or seek fresh consent.
18. Contact details
PRIME SUPPLY DEPOT LTD
Company number: 17537628
Trading as: primesupply-london
Registered office: Suite10 Capital House, 61 Amhurst Road, London, E8 1LL, United Kingdom
Website: primesupply-london.com
Customer support: info@primesupply-london.com
Last updated: 26 October 2026