Privacy Policy

Last Updated: 25 September 2026

At HSE Store, we take the privacy and security of our customers and website visitors seriously.

HSE Store Ltd operates hsestore.co.uk, providing workplace safety equipment, industrial equipment, storage, handling equipment and related products primarily to business customers throughout the UK.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we may share it with, how we protect it and the rights you have in relation to your personal information.

We aim to collect only the information that is reasonably necessary to provide our services, process orders, communicate with customers, maintain website security and meet our legal and regulatory obligations.

1. Who We Are

The data controller responsible for your personal information is:

HSE Store Ltd
Office 8065,
321 – 323 High Road,
Romford,
Essex,
RM6 6AX,
United Kingdom

Email: sales@hsestore.co.uk
Telephone: 01772 915641

For privacy enquiries, requests relating to your personal information or questions about this policy, please contact us using the details above.

2. The Personal Information We Collect

Depending on how you interact with HSE Store, we may collect the following categories of personal information:

Information you provide to us

This may include:

• Your name
• Business or company name
• Email address
• Telephone or mobile number
• Billing address
• Delivery address
• Information provided through contact or enquiry forms
• Information provided when creating or using a customer account
• Order details and purchase history
• Information contained in correspondence with us

Payment and transaction information

When you place an order, payment information is processed through our third-party payment provider, Revolut.

Payment card information is handled by Revolut’s payment infrastructure rather than being stored as full payment-card information within HSE Store’s website database. Revolut provides payment processing services to merchants and offers integration with WooCommerce.

HSE Store may receive and retain transaction-related information necessary to confirm and reconcile a payment, such as payment status, transaction references, payment method and limited payment information.

We do not intentionally store full card numbers or CVV/security codes on our website.

Technical and security information

When you access our website, certain technical information may be processed automatically, including:

• IP address
• Browser type and version
• Operating system or device information
• Date and time of access
• Information relating to website requests and interactions
• Security and fraud-prevention information

This information is used primarily to operate, secure and protect the website rather than to build advertising profiles about visitors.

Information obtained from other sources

We may obtain business contact information from legitimate public sources, business directories, company websites or other publicly available business information where appropriate.

We may also receive information from service providers involved in processing an order, payment, delivery, fraud prevention or customer support.

3. Why We Use Your Information

We use personal information only where there is a valid lawful basis for doing so.

To process and fulfil orders

We use your information to:

• Process orders placed through our website
• Confirm and administer purchases
• Process or verify payments
• Arrange delivery or collection
• Communicate with you about your order
• Deal with returns, refunds, shortages, damage or other order-related matters
• Maintain records of transactions

The lawful basis for this processing is generally performance of a contract with you or taking steps at your request before entering into a contract.

To respond to enquiries and provide customer support

Where you contact HSE Store by email, telephone, contact form or another supported communication method, we use the information you provide to respond to your enquiry and provide customer service.

The lawful basis will generally be legitimate interests, or performance of a contract where the enquiry relates to an existing order or service.

To maintain website security

We process technical information to protect our website, customers and infrastructure against malicious traffic, automated abuse, fraud and other security threats.

This includes the use of security services provided by Cloudflare.

The lawful basis for this processing is generally legitimate interests in protecting our business, website, systems and customers.

To comply with legal and regulatory obligations

We may process and retain personal information where necessary to comply with obligations relating to taxation, accounting, fraud prevention, legal claims, regulatory requirements or requests from competent authorities.

The lawful basis is legal obligation where applicable.

To manage customer accounts

Where you create a customer account, we use your information to provide account functionality, maintain your account and allow you to access relevant order information.

The lawful basis is generally performance of a contract.

4. Who We Share Your Information With

We do not sell your personal information.

We may share information with trusted third parties where it is necessary to operate HSE Store, fulfil your order, process payments, protect our systems or comply with legal obligations.

These may include:

Payment providers

We use Revolut to process online payments.

Revolut processes personal and transaction information as part of providing its payment processing services. Revolut’s own privacy notice explains the information it may collect and how it uses and shares personal information.

Where you choose an alternative payment method made available through the checkout, such as Google Pay, additional information may be processed by the relevant payment provider under its own privacy and cookie policies.

Delivery and fulfilment providers

We may provide relevant information to manufacturers, suppliers, couriers, carriers and fulfilment partners where necessary to manufacture, prepare or deliver your order.

Information shared will generally be limited to what is reasonably necessary, such as your name, delivery address, telephone number, email address, order information and delivery instructions.

Website, hosting and security providers

We use third-party providers to host, maintain, secure and operate our website and supporting infrastructure.

Our website uses Cloudflare security services to help protect against malicious traffic and automated abuse.

Review and feedback services

We use third-party review technology to display customer reviews and ratings.

Where you provide a review or feedback, information associated with that review may be processed by the relevant review service in accordance with its own privacy policy.

Sustainability services

Where applicable, HSE Store supports tree planting through Ecologi in connection with customer orders.

Limited order-related information, such as a company name or order reference, may be provided where necessary to administer this service.

Professional advisers and authorities

We may also share information where reasonably necessary with:

• Accountants and professional advisers
• Banking and financial service providers
• HM Revenue & Customs and other regulatory bodies
• Law enforcement or public authorities where legally required
• Legal advisers or other parties where necessary to establish, exercise or defend legal rights

5. International Data Processing

Some of our third-party service providers may process information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place in accordance with applicable UK data protection law.

Third-party providers, including payment and infrastructure providers, may have their own international processing arrangements and privacy notices.

6. Cookies and Similar Technologies

HSE Store uses a limited number of cookies and similar technologies to provide essential website functionality, security and checkout services.

We do not use the website to build advertising profiles based on your browsing activity, and we do not use third-party advertising pixels or session-recording software as part of the current website configuration.

Our current cookie footprint includes the following categories.

WooCommerce confirms that its woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_* cookies are used for basket and session functionality and do not store personal information within the cookies themselves.

Cloudflare states that its __cf_bm cookie is used for bot-management functions and that cf_clearance is used for security verification and JavaScript detection.

Some payment-related technologies are loaded only when the checkout or payment functionality is used.

Google’s documentation states that the NID cookie is not required for the Google Pay API checkout flow, and that Google Pay’s essential security and fraud-prevention functionality operates independently of that cookie.

We regularly review the technologies used on the website and may update this section when our website, payment providers or other services change.

7. Our Approach to Tracking and Analytics

HSE Store does not use the website to create behavioural advertising profiles of visitors.

We do not intentionally deploy:

• Advertising pixels
• Behavioural retargeting systems
• Session-recording software
• Third-party advertising trackers

We may, however, process technical information required for website security, payment processing, fraud prevention, website functionality and service operation.

Payment providers and security providers may independently process technical, device or transaction information as part of their services. Their own privacy notices apply to their processing activities.

8. Automated Decision-Making and Profiling

HSE Store does not use personal information to create behavioural or advertising profiles of visitors or to make automated decisions about which products you should see.

Third-party payment and security providers may use automated fraud, security or risk-detection systems when processing a transaction. Those activities are carried out under the relevant provider’s own systems and privacy arrangements.

Revolut states that its merchant payment services include transaction monitoring and fraud-prevention controls.

9. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, taking into account legal, accounting, operational and security requirements.

Different types of information may therefore be retained for different periods.

Order and accounting records

Information relating to orders, invoices, payments and accounting records will generally be retained for the period required by applicable tax and accounting legislation.

For UK companies, HMRC guidance generally requires relevant company records to be retained for 6 years from the end of the relevant financial year, with certain circumstances requiring longer retention.

Customer accounts

We retain customer account information while the account remains active or while it is reasonably required to provide services, manage transactions or meet legal obligations.

Customer correspondence

We retain customer enquiries and correspondence for as long as reasonably necessary to deal with the enquiry, maintain appropriate business records and protect our legal interests.

Marketing preferences

Where you have opted out of marketing, we may retain limited information necessary to record and respect your opt-out request.

10. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

These measures may include:

• Secure HTTPS connections
• Restricted access to customer and business systems
• Cloud-based infrastructure and security controls
• Payment processing through established payment providers
• Security and anti-bot protection
• Appropriate access controls for staff and service providers

No internet transmission or storage system can be guaranteed to be completely secure, but we continually review the security of the systems used to operate HSE Store.

11. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights relating to your personal information, including:

Right of access

You can request a copy of personal information we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete information.

Right to erasure

You can ask us to delete your personal information where there is no longer a lawful reason for us to retain it.

This right does not apply where we are legally required to retain information or need it to establish, exercise or defend legal claims.

Right to restrict processing

You may ask us to restrict the processing of your information in certain circumstances.

Right to object

You may object to certain processing based on legitimate interests and, in particular, you have an absolute right to object to direct marketing.

Right to data portability

Where applicable, you may request that certain personal information is provided to you in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise any applicable right, contact:

sales@hsestore.co.uk

We may need to verify your identity before processing a request.

The ICO confirms that privacy information should explain the rights available to individuals and how those rights can be exercised.

12. Complaints

If you have a concern about how we have used your personal information, we encourage you to contact us first so that we can investigate and resolve the matter.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection.

The ICO can be contacted through its official website or by telephone on 0303 123 1113.

13. Third-Party Websites and Services

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices, content or security of third-party websites.

When you use a third-party service, including payment, review or other external services, that provider may process your information under its own privacy notice and terms.

This Privacy Policy applies to personal information processed by HSE Store and does not replace the privacy notices of those third-party providers.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, suppliers or legal obligations.

When we make changes, we will update the Last Updated date at the top of this page.

We recommend checking this page periodically to ensure you remain aware of how we process personal information.

15. Contact Us

If you have any questions about this Privacy Policy, our use of your personal information, cookies or your data protection rights, please contact us:

HSE Store Ltd
Office 8065,
321 – 323 High Road,
Romford,
Essex,
RM6 6AX,
United Kingdom

Email: sales@hsestore.co.uk
Telephone: 01772 915641