Privacy policy

Last updated

September 2026

1. Purpose and Scope

This Privacy Policy explains how Almond Store collects, uses, stores, shares and otherwise processes personal data in connection with browsing our online store, placing and fulfilling orders, customer communications, payment processing, delivery arrangements, fraud prevention, marketing activities and compliance with our legal obligations.

This policy primarily applies to customers and users in the United Kingdom, as well as any other individuals whose personal data is processed in connection with the use of the Almond Store website or services.

It applies to our website, store-related communications, transaction processes and, where applicable, services technically connected to our store through Shopify or other service providers.

The principal UK data protection legislation applicable to our processing includes the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 ("PECR"), and the Data (Use and Access) Act 2025, as amended from time to time.

2. Data Controller and Contact Details

Almond Store is operated by PA Digital Business LLC. To the extent that we determine the purposes and means of processing personal data described in this policy, PA Digital Business LLC, trading as Almond Store, acts as the data controller.

For questions relating to data protection, requests to access, correct or delete personal data, requests to exercise your privacy rights, or any other enquiry regarding our handling of personal data, please contact:

PA Digital Business LLC
9380 SW 72nd St, Ste B-214
Miami, FL 33173
United States
Email: shops@almond.com

3. Definitions

Personal data means any information relating to an identified or identifiable individual.

Processing means any operation performed on personal data, including collecting, recording, organising, storing, using, analysing, transmitting, sharing, restricting or deleting it.

Data subject means the individual to whom personal data relates.

Controller means the person or organisation that determines the purposes and means of processing personal data.

Processor means a service provider that processes personal data on behalf of a controller.

4. Types of Personal Data We Process

Depending on how you interact with Almond Store, we may process the following categories of personal data.

4.1 Identity and Contact Information

This may include your name, billing address, delivery address, email address, telephone number where required, and other information you provide when placing an order or contacting us.

4.2 Order and Transaction Information

This may include products ordered, order value, date and time of purchase, order number, payment status, delivery status, returns, refunds and information relating to the performance of your purchase contract.

4.3 Payment-Related Information

Almond Store does not necessarily receive or store complete payment card or payment account details.

Payments may be processed by third-party payment service providers. We may receive transaction-related information such as payment status, authorisation information, fraud or risk indicators, transaction references and limited payment method information.

4.4 Device and Usage Information

This may include your IP address, browser type, operating system, device information, time zone, language settings, date and time of access, referring URLs, interactions with the store and technical log information.

4.5 Communications Information

If you contact our customer support team, we may process the content of your enquiry, attachments, timestamps, correspondence history and other information connected with the communication.

4.6 Security and Fraud Prevention Information

For fraud prevention, payment security and protection of our systems, we may process verification information, risk indicators, unusual purchasing patterns, inconsistencies between delivery and payment information, device signals and other relevant security information.

5. Sources of Personal Data

5.1 Information Provided Directly by You

We collect information when you place an order, complete a form, contact customer support, provide information voluntarily, create an account where available, subscribe to communications or provide consent.

5.2 Information Collected Automatically

When you visit our store, certain technical information may be processed automatically through server logs, cookies, pixels, local storage or similar technologies where technically necessary or otherwise permitted by applicable law.

5.3 Information Received from Third Parties

Where relevant integrations are used and a lawful basis exists, we may receive information from payment providers, delivery and logistics providers, Shopify, fraud prevention services, analytics providers, advertising platforms, communications providers and other services connected with the operation of our store.

6. Purposes for Which We Use Personal Data

Almond Store processes personal data only for specified, lawful and legitimate purposes.

6.1 Performing Our Contract With You

We may process personal data to:

  • process and manage orders;

  • process payments;

  • prepare and dispatch products;

  • arrange delivery;

  • provide order tracking;

  • manage returns and exchanges;

  • issue refunds;

  • handle warranty or product-related claims; and

  • provide customer support.

6.2 Operating and Securing Our Store

We may process personal data to maintain the technical operation of our website, diagnose errors, manage website traffic, detect attacks, prevent misuse and fraudulent transactions and maintain the security and integrity of our systems.

6.3 Customer Support

We may process communications and related information to respond to enquiries, resolve complaints, maintain appropriate records and demonstrate how customer requests have been handled.

6.4 Legal Obligations and Legal Claims

We may process and retain information where necessary to comply with tax, accounting, consumer protection, data protection, regulatory or other legal obligations.

We may also process personal data where necessary for the establishment, exercise or defence of legal claims.

6.5 Marketing and Communications

Where permitted by applicable law, we may use personal data to send information concerning products, offers, abandoned baskets, promotions or similar communications.

Marketing communications will be sent only where we have an appropriate legal basis and where the requirements of PECR and applicable data protection legislation are satisfied.

You may unsubscribe from marketing communications at any time.

6.6 Analytics and Store Improvement

Where permitted by law or where appropriate consent has been obtained, we may use information to understand store performance, customer journeys, website usability, campaign performance, conversions and other information that helps us improve our services.

7. Lawful Bases for Processing

Depending on the processing activity, Almond Store may rely on one or more of the following lawful bases under the UK GDPR.

7.1 Contract and Pre-Contractual Steps

We may process personal data where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract.

This includes processing necessary to accept, process and deliver an order.

7.2 Legal Obligation

We may process personal data where necessary to comply with legal obligations relating to matters such as taxation, accounting, consumer protection, data protection, fraud prevention or regulatory requirements.

7.3 Legitimate Interests

Where permitted by law, we may rely on our legitimate interests for purposes including:

  • fraud prevention;

  • payment and system security;

  • protecting and enforcing legal rights;

  • internal administration;

  • record keeping;

  • preventing misuse;

  • improving our services; and

  • certain forms of appropriate customer communication.

We rely on legitimate interests only where those interests are not overridden by your interests, rights or freedoms.

7.4 Consent

For certain cookies, tracking technologies, advertising activities, electronic marketing or similar processing, we may ask for your consent.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

8. Shopify and Store Service Providers

Almond Store may operate all or part of its online store using Shopify and services integrated with the Shopify platform.

Personal data may therefore be processed through Shopify infrastructure, hosting services, checkout functionality, customer privacy tools and other technically connected components.

Using Shopify does not remove Almond Store's own obligations under applicable data protection law.

We are responsible for configuring our store, privacy settings, integrations and consent mechanisms appropriately for the services and technologies we use.

Other third-party providers connected to our store may process information in accordance with their respective roles and applicable contractual and data protection obligations.

9. Sharing Personal Data

Almond Store does not sell personal data as a standalone commercial product.

We may, however, disclose or provide access to personal data where necessary to operate the store, fulfil orders, provide services or comply with our legal obligations.

Recipients may include the following.

9.1 Payment Service Providers

Personal data may be shared or processed for payment authorisation, payment processing, fraud prevention, refunds, chargeback management and payment-related evidence.

9.2 Delivery and Logistics Providers

Information may be provided for shipping orders, generating shipping labels, tracking deliveries, providing delivery updates, investigating delivery problems and processing returns.

9.3 IT, Hosting and Store Service Providers

Service providers may process data where necessary for website hosting, store operation, technical maintenance, security, error analysis, performance management and other technical services.

9.4 Communications and Customer Support Services

Information may be processed through tools used to manage customer enquiries, support tickets, email communications and transaction-related notifications.

9.5 Analytics and Advertising Providers

Where permitted by applicable law and, where required, with your consent, information may be processed by analytics or advertising providers for measurement, attribution, advertising and optimisation purposes.

9.6 Legal, Regulatory and Compliance Recipients

We may disclose personal data where reasonably necessary to:

  • comply with a legal obligation;

  • respond to a lawful request from a court, regulator or public authority;

  • prevent or investigate fraud;

  • protect our legal rights; or

  • establish, exercise or defend legal claims.

10. Cookies and Similar Technologies

Almond Store may use cookies, local storage, pixels, tags, SDKs or similar technologies to operate the website, remember preferences, protect transactions, record privacy choices, measure performance and, where permitted, personalise content or advertising.

10.1 Essential and Legally Exempt Technologies

Certain technologies may be used without separate marketing consent where permitted under PECR and other applicable UK legislation.

This may include technologies necessary to:

  • maintain a shopping basket;

  • maintain checkout or session security;

  • prevent fraud;

  • balance website traffic;

  • remember certain privacy choices; or

  • provide another service specifically requested by the user.

Other limited uses may also qualify for statutory exemptions where the relevant legal requirements are satisfied.

10.2 Analytics, Functionality and Marketing Technologies

Where consent is legally required, analytics, advertising, behavioural tracking and other non-exempt technologies will only be activated after the appropriate choice has been made by the user.

Some limited functionality or measurement technologies may be used without consent where a specific exemption under applicable UK law applies.

10.3 Cookie Preferences and Withdrawal of Consent

Where available, you may use our privacy or cookie settings to accept, reject, withdraw or modify your preferences.

Withdrawing consent does not affect processing that was lawful before withdrawal.

Certain essential technologies may continue to operate because they are necessary to provide the website securely or because their use is otherwise permitted without consent.

11. Marketing and Advertising

Almond Store may use personal data for marketing purposes only where permitted under applicable UK data protection law and PECR.

For marketing emails, text messages or similar electronic communications sent to individual customers, we will normally rely on:

  • your consent; or

  • where legally permitted, the existing customer or "soft opt-in" exception.

Where the soft opt-in is relied upon, it will only be used where the applicable legal conditions are satisfied, including where your contact details were obtained in connection with the sale or negotiation of similar products or services and you were given an appropriate opportunity to opt out.

Marketing communications will provide an appropriate method for unsubscribing or objecting to further marketing.

You have the right to object to the use of your personal data for direct marketing at any time.

Where you object to direct marketing, we will stop using your personal data for that purpose.

12. Data Security

Almond Store takes appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, unauthorised access, disclosure, alteration or destruction.

Depending on the nature of the processing, these measures may include:

  • access controls;

  • account and permission management;

  • secure communications;

  • logging and monitoring;

  • appropriate management of service providers;

  • fraud prevention systems; and

  • security measures proportionate to the risks involved.

Applicable UK data protection law requires security measures appropriate to the risks associated with the processing.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

13. Retention and Deletion

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or for as long as required by applicable legal, accounting, tax or regulatory obligations.

When determining appropriate retention periods, we may consider:

  • the duration of the customer relationship or contract;

  • statutory limitation periods;

  • tax and accounting requirements;

  • evidence and dispute-resolution requirements;

  • fraud prevention and security requirements;

  • the nature and sensitivity of the information; and

  • applicable legal obligations.

Once personal data is no longer required, we will delete, anonymise or appropriately restrict its processing unless continued retention is justified or required by law.

14. Your Data Protection Rights

Depending on the circumstances and applicable UK data protection law, you may have rights including:

  • the right to be informed about how your personal data is used;

  • the right of access to your personal data;

  • the right to rectification of inaccurate or incomplete personal data;

  • the right to erasure in certain circumstances;

  • the right to restrict processing in certain circumstances;

  • the right to data portability where applicable;

  • the right to object to certain processing;

  • the right to object to direct marketing at any time;

  • rights relating to certain forms of automated decision-making and profiling; and

  • the right to withdraw consent where processing is based on consent.

These rights are not absolute in every situation and may be subject to statutory conditions or exemptions.

To exercise your rights, contact:

shops@almond.com

We may request reasonable information to verify your identity before providing or modifying personal information. This is intended to prevent unauthorised disclosure or misuse of personal data.

We will respond to valid requests within the time periods required by applicable law.

Complaints

If you have concerns about how Almond Store handles your personal data, we encourage you to contact us first so that we can investigate the matter.

You also have the right to complain to the UK's data protection supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

15. International Data Transfers

Some service providers used by Almond Store may process or access personal data outside the United Kingdom.

Where personal data is transferred internationally and the transfer is subject to the UK GDPR's restricted transfer rules, we will take appropriate steps to ensure that the transfer complies with applicable law.

Depending on the circumstances, this may include relying on:

  • UK adequacy regulations;

  • the International Data Transfer Agreement ("IDTA");

  • the UK International Data Transfer Addendum to approved EU Standard Contractual Clauses;

  • binding corporate rules;

  • another legally approved safeguard; or

  • an applicable statutory exception.

Where an appropriate safeguard requires an assessment of the protection provided in the destination country, we will take reasonable and proportionate steps required under applicable UK data protection law.

Where required, additional technical, contractual or organisational safeguards may also be implemented.

You may contact us at shops@almond.com if you require further information about safeguards applicable to relevant international transfers.

16. Children

Almond Store is not specifically directed at children who are unable to enter into valid transactions or provide valid consent under applicable law.

We do not knowingly seek to collect children's personal data in circumstances where doing so would be unlawful.

Where our online services are likely to be accessed by children, we will take their interests and data protection needs into account as required by applicable UK legislation.

Where an online service is offered directly to a child and we rely upon consent as the lawful basis for processing, additional rules may apply. In particular, where required under the UK GDPR, a child under the age of 13 cannot provide their own valid consent for such processing and appropriate parental authorisation may be required.

If we become aware that personal data relating to a child has been collected improperly, we will take appropriate steps to delete, restrict or otherwise lawfully address that information.

17. Chargebacks, Fraud Prevention and Enforcement of Rights

If a chargeback, payment dispute, suspected fraud, security incident or other disputed transaction occurs, Almond Store may process, retain and disclose personal data where reasonably necessary and legally permitted to:

  • investigate the circumstances;

  • prevent or detect fraud;

  • respond to payment disputes;

  • provide evidence to payment service providers;

  • protect customers and our business; or

  • establish, exercise or defend legal claims.

Information may be shared with payment providers, financial institutions, fraud prevention providers, relevant investigators, professional advisers or other authorised recipients where necessary and lawful.

Fraud detection or risk assessment may involve automated tools.

Where Almond Store uses solely automated decision-making that produces legal or similarly significant effects on an individual, we will provide the information and safeguards required under applicable data protection law.

18. Changes to this Privacy Policy

Almond Store may update this Privacy Policy from time to time to reflect changes in:

  • applicable laws and regulatory guidance;

  • our technology or website;

  • service providers;

  • Shopify functionality;

  • payment or delivery arrangements;

  • marketing practices; or

  • internal processes.

The latest version will be made available through our store.

Where a change is material and applicable law requires additional notification or consent, we will take appropriate steps to provide it.

19. Data Protection Contact

For questions about this Privacy Policy, requests concerning your personal data or any other data protection matter, please contact:

Almond Store
Operated by PA Digital Business LLC
9380 SW 72nd St, Ste B-214
Miami, FL 33173
United States
Email: shops@almond.com