Privacy Policy

Last updated: 5 October 2026

1. Who We Are

This Privacy Policy explains how Premium Abrahamic Foods collects, uses, shares and protects your personal information when you visit our website, create an account, apply for a wholesale account, or place an order with us.

The website is operated by PREMIUM ABRAHAMIC FOODS LTD, registered in England and Wales under Company Number 16831250, with registered address at 251 Ilford Lane, Ilford, England, IG1 2SB.

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the “data controller” of the personal information described in this policy. In this policy, “we”, “us” and “our” mean Premium Abrahamic Foods.

If you have any questions about this policy or about how we handle your information, you can reach us using the details in section 15.

2. What This Policy Covers

This policy covers the personal information we collect through our website at premiumabrahamicfoods.co.uk, through our customer service channels (phone, email and WhatsApp), and in the course of fulfilling and delivering your orders.

Our website contains links to other websites, including our social media pages and our delivery partners’ tracking pages. This policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to read their own privacy policies.

3. Information We Collect

Information you give us when you create an account

• Your first name and last name
• Your email address
• Your password, which we store only in an encrypted (hashed) form and which we cannot read
• Your telephone number, if you choose to provide one

Information you give us when you place an order

• Your name, email address and telephone number
• Your billing address and your delivery address, including company name where relevant
• Details of the products you have ordered, the quantities, the prices paid and any promotional code you used
• Any notes or delivery instructions you choose to add to your order

You can place an order as a guest without creating an account. If you do, we still need the information above in order to take payment and arrange delivery.

Information you give us when you apply for a wholesale account

• Your company name, company registration number and VAT number
• The name, email address and telephone number of your contact person
• Your business address, a description of your business and your website address, if you have one

Information about your basket

When you add products to your basket, we save the contents of that basket so that it is still there when you come back. If you are signed in, the basket is linked to your account. If you are not signed in, your browser generates a random basket reference that is sent to us with each request; this reference is not linked to your identity unless and until you go on to place an order.

Payment information

Card payments on our website are processed by Stripe. Your full card number, expiry date and security code are entered directly into Stripe’s secure payment fields and are sent to Stripe, not to us. We never see or store your full card details. What we keep is a record of the payment: the amount, the currency, the payment status, Stripe’s payment reference and the confirmation message Stripe sends us, which may include the card type and the last four digits of the card.

Information we collect automatically

Like most websites, our servers automatically record technical information when you visit, including your IP address, the date and time of your request, the pages you requested, and basic information about your browser and device. We use this to keep the website running, to diagnose faults and to protect the site against abuse and fraud.

We do not use Google Analytics, advertising pixels, or any third-party tracking or profiling tools on our website, and we do not build marketing profiles about you or make automated decisions about you.

Information you give us when you contact us

If you contact us by phone, email or WhatsApp — for example with a question about an order, an allergen query or a complaint — we keep a record of that correspondence and of any information you give us in it, so that we can deal with your query and any follow-up.

4. How We Use Your Information and Our Legal Basis

Under UK data protection law we must have a valid legal basis for using your personal information. The table below explains what we do and why we are allowed to do it.

To perform our contract with you

• Taking, confirming and processing your order
• Taking payment and issuing refunds
• Arranging and tracking delivery of your order
• Creating and managing your account, including letting you sign in and reset your password
• Saving and restoring your basket
• Providing customer support and handling returns, replacements and complaints

To comply with our legal obligations

• Keeping records of sales, payments and VAT for the periods required by HMRC and company law
• Meeting food safety, traceability and product recall obligations
• Responding to lawful requests from the police, regulators or the courts
• Verifying age where age-restricted products are involved

For our legitimate interests

• Keeping our website secure and preventing, detecting and investigating fraud and misuse
• Reviewing and approving wholesale account applications, and setting the pricing tier that applies to an approved wholesale account
• Keeping proper business records, including the history of changes to an order’s status
• Understanding which products sell well so that we can manage stock and improve our range
• Seeking professional advice and enforcing or defending our legal rights

Where we rely on legitimate interests, we have considered whether our interests are fair to you and whether they override your rights. You have the right to object to this use — see section 12.

With your consent

• Sending you marketing messages, where we ask for and you give your consent (see section 8)
• Publishing a review or testimonial that you have given us

You can withdraw your consent at any time, and withdrawing it will not affect anything we did before you withdrew it.

5. Order and Delivery Emails

When you place an order, you will receive messages about that order. Stripe sends you a payment receipt for the card payment, and our delivery partner sends you notifications about your parcel — for example when it is on its way and when it is due to arrive. These messages are part of fulfilling your order rather than marketing, so they are not something you can opt out of while your order is in progress.

6. Who We Share Your Information With

We do not sell your personal information, and we do not share it with anyone for their own marketing purposes. We share it only with the following, and only as far as is needed:

• Stripe Payments Europe, Ltd. and Stripe, Inc. — our payment processor. We pass Stripe the order amount, the order number and your email address so it can take payment and send you a receipt. Stripe also uses the information it collects to detect and prevent fraud. Stripe is certified to the PCI-DSS standard that applies to card payments. See stripe.com/gb/privacy.
• DPD Group UK Ltd and DHL Express — our delivery partners. We pass them the recipient’s name, delivery address, telephone number and email address, and the weight and contents description of the parcel, so that they can deliver it and keep you updated. See dpd.co.uk/content/about_dpd/privacy.jsp and dhl.com/gb-en/home/footer/privacy-notice.html.
• Our hosting and IT providers — the companies that host our website, our database and our email. They store the information on our behalf, under contract, and may only act on our instructions.
• Our professional advisers — our accountants, auditors, insurers and legal advisers, where they need the information to advise us.
• Public authorities — HMRC, the police, trading standards, food safety authorities, regulators and the courts, where we are required or legally permitted to provide information.
• A buyer or successor — if our business, or part of it, is sold or reorganised, customer records may transfer as part of that transaction. Your information would remain protected by this policy.

Where a company processes personal information on our behalf, we have a written contract with them that requires them to keep it secure and to use it only for the purposes we have specified.

7. Sending Information Outside the UK

We store your information on servers in the UK or the European Economic Area. Some of our providers, including Stripe, may process limited information in the United States or in other countries outside the UK.

Where information is transferred outside the UK, we rely on safeguards approved under UK data protection law — normally the UK’s International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses, or the fact that the country in question has been formally recognised by the UK Government as providing adequate protection. You can ask us for more information about the safeguards that apply using the contact details in section 15.

8. Marketing

We do not currently send marketing emails or newsletters, and our website does not have a newsletter sign-up form. If we introduce one, we will only send you marketing messages where you have asked us to, or where you have bought from us and we are permitted to contact you about similar products — and every message will contain a clear way to unsubscribe.

You can tell us at any time that you do not want to receive marketing from us by emailing info@premiumabrahamicfoods.co.uk. We will act on that request and keep a note of it so that we do not contact you again by mistake.

9. Cookies and Similar Technologies

We keep our use of cookies and browser storage to the minimum needed to make the website work. We use:

• A sign-in token, stored in your browser, which keeps you signed in to your account between visits. It is removed when you sign out.
• A basket reference, stored in your browser, which lets us keep your basket if you are shopping without an account.
• A session cookie, used by our server to handle your requests safely and to protect forms against cross-site request forgery.
• Stripe’s cookies, which are set on our checkout page when Stripe’s secure payment fields load. Stripe uses these to process your payment and to detect fraud.

All of these are strictly necessary for the website and the checkout to work, which is why we do not ask for your consent to use them — the law does not require consent for strictly necessary storage. We do not use analytics, advertising or social media tracking cookies.

You can block or delete cookies and clear your browser’s storage through your browser settings. If you do, you may be signed out, your basket may be emptied, and the checkout may not work.

10. How Long We Keep Your Information

• Orders, invoices and payment records — six years from the end of the financial year they relate to, because HMRC and company law require it.
• Your account — for as long as your account is open. If you ask us to close it, we delete or anonymise your account details, except where we have to keep the record of a past order as described above.
• Wholesale applications — for the duration of the trading relationship, and for six years after it ends. Applications that are declined are kept for one year.
• Saved baskets — these expire automatically and are cleared after a short period of inactivity.
• Customer service correspondence — normally two years from the date the matter is closed, or longer if it relates to a complaint, an allergen issue or a legal claim.
• Technical server logs — a short period, normally no more than 90 days, unless we need to keep a record for a security investigation.

When we no longer need your information, we delete it securely or remove the details that identify you.

11. Keeping Your Information Secure

We take appropriate technical and organisational measures to protect your personal information. These include serving the whole website over an encrypted HTTPS connection, storing passwords only as irreversible hashes, restricting access to our administration system to named staff accounts, keeping a log of administrative changes to orders and records, and leaving card payments entirely to Stripe so that card details never reach our systems.

No system can be guaranteed completely secure. Please help us by choosing a strong, unique password for your account and by never sharing it. If you believe your account has been accessed without your permission, contact us straight away.

12. Your Rights

Under UK data protection law you have the following rights, free of charge:

• Access — to be told what personal information we hold about you and to receive a copy of it.
• Rectification — to have inaccurate information corrected and incomplete information completed. You can correct most of your own details by signing in to your account.
• Erasure — to have your information deleted where we no longer have a good reason to keep it. This does not extend to records we are legally required to retain, such as the record of a completed sale.
• Restriction — to ask us to pause our use of your information while a concern is resolved.
• Portability — to receive the information you gave us in a commonly used machine-readable format, or to have it sent to another provider.
• Objection — to object to our use of your information where we rely on our legitimate interests, and to object at any time to its use for direct marketing.
• Withdrawing consent — to withdraw consent at any time where our use of your information is based on consent.

To exercise any of these rights, email info@premiumabrahamicfoods.co.uk or write to us at the address in section 15. We may ask you for proof of identity before we act, so that we do not disclose your information to someone else. We will respond within one month; if your request is complex we may extend this by a further two months and will tell you if we do.

If you are unhappy with how we have handled your information or your request, please tell us first so that we can put it right. You also have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

13. Children

Our website is intended for adults and for businesses buying in the course of their trade. We do not knowingly collect personal information from children under 16. Some of our products are age-restricted, and where that is the case we may ask for proof of age before completing an order. If you believe a child has provided us with their information, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time, for example if we change our systems, our delivery partners or our payment provider, or if the law changes. Any changes will be posted on this page with an updated “Last updated” date. If a change significantly affects how we use your information, we will take reasonable steps to tell you about it.

15. Contact Us

If you have any questions about this Privacy Policy, or would like to exercise any of your rights, please contact us:

PREMIUM ABRAHAMIC FOODS LTD
Company Number: 16831250
Address: 251 Ilford Lane, Ilford, England, IG1 2SB
Email: info@premiumabrahamicfoods.co.uk
Phone: 020 8478 0552 / 07930 594 995 / 07538 514 355

We are not required to appoint a Data Protection Officer. Enquiries about data protection are handled by our management using the contact details above.