Privacy Policy

Last updated: June 2026

Portal Customs is a trading name of Poképortal Ltd (Company No. 15910981, VAT No. GB498168138, EORI No. GB498168138000), registered in England & Wales, with a registered office at The Apex, Derriford Business Park, Plymouth, PL6 5FL. We are the data controller for the personal information you provide to us. This policy explains what data we collect, why we collect it, and how we use it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

When you place an order or create an account, we may collect:

  • Name and contact details (email address, phone number)
  • Delivery and billing address
  • Order history and transaction data
  • Payment information (processed securely by Shopify Payments — we never store full card details)
  • Communications you send us (emails, contact form messages)
  • Technical data such as IP address, browser type, and browsing behaviour on our site (via cookies)

2. How We Use Your Information

We use your personal data to:

  • Process and fulfil your orders, including shipping and handling returns
  • Send order confirmations, dispatch notifications, and customer service communications
  • Send marketing emails if you have opted in (you can unsubscribe at any time)
  • Improve our website and product offering
  • Comply with our legal obligations

Our lawful bases for processing are: performance of a contract, legitimate interests, and consent (for marketing).

3. Sharing Your Data

We do not sell your personal data. We may share it with trusted third parties who help us operate our business, including:

  • Shopify Inc. — our e-commerce platform and payment processor
  • Royal Mail / courier services — to deliver your orders
  • Email marketing platforms — if you have opted in to marketing
  • HMRC — where required by law

All third parties are required to handle your data securely and in accordance with applicable law.

4. Data Retention

We retain your order data for 7 years to comply with HMRC requirements. Marketing preferences and account data are held until you request deletion or withdraw consent.

5. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (where no legal obligation requires us to retain it)
  • Withdraw consent for marketing at any time
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

6. Cookies

Our website uses cookies to improve your browsing experience, remember your cart, and (with your consent) analyse site traffic. You can manage cookie preferences via the banner shown on your first visit.

7. Contact Us

For any data protection queries or to exercise your rights, please contact us at:

Poképortal Ltd (Portal Customs)
The Apex, Derriford Business Park, Plymouth, PL6 5FL
Email: customs@portaltcg.co.uk
Phone: 01752 936359