Privacy notice

This notice covers this website, run by Palm & Yam LLC, 101 Main Street, Viking, MN 56760. It is written in plain language on purpose. If anything here is unclear, call (469) 544-1056 and ask.

The short version

• We do not see, handle or store your card number.
• We do not sell your information to anyone.
• We keep what we need to fill your order and answer your questions.

Payments

Card details never reach this website. When you check out, your browser goes to Shopify, which runs the payment page and holds the card data under its own PCI compliance. We receive the order, the items, the pickup details and a note that payment succeeded. We never receive the card number, the security code, or the expiry date.

Shopify’s handling of that data is covered by Shopify’s privacy policy.

What this website collects

• Your basket. Stored in a cookie on your device so the cart survives a page reload. It holds product references and quantities. Nothing about you.
• Contact form. Your name, email, optional phone number and message, so we can reply. Nothing more.
• Bot check. The contact form uses Cloudflare Turnstile, which looks at browser signals to tell a person from a script. It does not track you across sites.
• Server logs. Standard request logs, kept short term, used to keep the site up and to spot abuse.

What we do not do

• No advertising trackers or third-party marketing pixels on this site.
• No selling or renting of customer information.
• No user accounts on this domain. Sign-in, when it is switched on, runs on Shopify.
• No file uploads, so nothing of yours is stored on our servers.

Who else is involved

• Shopify holds products, orders, customers and payments.
• Cloudflare serves and protects the site, and provides the bot check.
• Our hosting provider runs the website itself.

Each is a service we use to run the shop, not a buyer of your information.

Keeping things

Order records stay in Shopify for as long as tax and accounting rules require. Contact messages are kept while the question is open and are deleted when they are no longer useful. The cart cookie expires after two weeks.

Your choices

Email hello@palmandyam.com or call (469) 544-1056 to ask what we hold about you, to correct it, or to have it deleted. If your order sits in Shopify we will pass the request through to them.

Minnesota residents may have rights under the Minnesota Consumer Data Privacy Act. We answer those requests at the same address.

Children

This is a grocery shop. The site is not aimed at children and we do not knowingly collect their information.

Changes

If this notice changes we update the date at the top. Material changes get a note on the home page.

Contact

Palm & Yam LLC, 101 Main Street, Viking, MN 56760.
(469) 544-1056 · hello@palmandyam.com

See also our terms and accessibility statement.