Privacy Policy

Last updated: 16 September 2026

This policy explains what personal data Palestinu ("we", "us", "our") collects when you use this website, why we collect it, who we share it with, and what rights you have over it. We've written it to describe exactly what this site actually does — not a generic template — so it should read as a plain, accurate account of our data practices.

Who we are

Palestinu is operated by [legal business name — add before publishing], registered in [country/company registration details — add before publishing]. For any question about this policy or your data, contact us at [contact email — add before publishing].

The data we collect, and why

We only collect personal data where there's a clear reason tied to a specific feature of the site:

  • Placing an order. Your name, delivery address, and, if you provide them, phone number and email address. We use this to fulfil your order, create a shipping label, and let you know about your order's status.
  • Contributing to "Fund the Dream." Just the amount you choose to give — no delivery address is collected for a contribution, since nothing is shipped.
  • Leaving a product review. The name you enter, your star rating, and your message. We don't collect or store an email address or your IP address as part of a review.
  • Sending us feedback. Your name, message, and an email address if you choose to give one (so we can reply). Feedback is private — it's never published anywhere on the site.
  • Your cart. What's in your cart is stored only in your own browser (localStorage), never on our servers, until the moment you actually check out.

We do not currently operate an email newsletter or mailing list — any newsletter or "join our community" signup box you see on the site is not yet connected to anything, and submitting it does not send your email address anywhere.

Payments

Card and payment details never reach our own servers. When you check out, you're redirected to a secure payment page hosted by Mollie, our payment processor, who handles your payment details directly. We only receive confirmation that a payment succeeded (or didn't), plus the order amount — never your card number or banking details.

Shipping

To deliver a shop order, we pass your name, delivery address, and (if provided) phone number and email address to Royal Mail, who use it to create a shipping label and deliver your parcel. We currently ship to the United Kingdom, United States, Canada, Ireland, France, Germany, and Australia.

Cookies and tracking

This site does not set cookies, and does not run any analytics, advertising, or tracking scripts of any kind — no Google Analytics, no advertising pixels, nothing that profiles you across visits or other sites. The only thing stored in your browser is your shopping cart (see above), which stays on your device.

If you view the map on our "Find Us" section, your browser loads map imagery directly from OpenStreetMap, a separate service — your IP address is visible to them at that point, the same as with any embedded map, under their own privacy practices.

How long we keep your data

We keep order, review, and feedback records for as long as reasonably needed for the purposes described above — including legal and accounting obligations for order records. You can ask us to delete personal data we hold about you at any time (see "Your rights" below), and we'll do so unless we're required to keep it for a legal reason.

Where your data is processed

Our website is hosted by Hostinger, with our database and file storage provided by Prisma and Vercel respectively. Some of our service providers, including Mollie and Royal Mail, may process data outside the United Kingdom or European Economic Area as part of providing their service to us. Where that happens, we rely on the safeguards those providers themselves put in place.

Your rights

Under UK data protection law, you have the right to:

  • Ask us what personal data we hold about you, and get a copy of it.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data, subject to any legal reason we may need to keep it.
  • Object to, or ask us to restrict, how we use your data.
  • Ask for your data in a portable format.
  • Complain to the UK Information Commissioner's Office (ICO) if you think we've mishandled your data.

To exercise any of these, contact us at [contact email — add before publishing].

Children

This site is not directed at children, and we don't knowingly collect personal data from children.

Changes to this policy

If our data practices change, we'll update this page and change the "Last updated" date above. We won't reduce your rights under this policy without your consent.

Contact us

For anything in this policy, or any question about your data, reach us at [contact email — add before publishing].