Updated · November 2025H&S E-commerce LTD

Privacy & data protection

Transparency, accountability, and trust guide everything we do. This privacy statement explains how we collect, use, store, and protect your information when you work with our 3PL and logistics teams.

GDPR ready

Compliant with UK GDPR, EU GDPR, and the UK Data Protection Act 2018.

EU/UK hosting

Customer data stays within reputable UK & EU data centres with redundancy.

Security first

Encryption in transit & at rest, principle of least privilege, 24/7 monitoring.

Your data lifecycle

What happens to your information

Below is a transparent breakdown of the way we handle personal and operational data from the moment you get in touch with us through ongoing fulfilment operations.

Information we collect

We only collect information that helps us offer fulfilment, logistics, and support services to your business.

  • Account data such as contact names, job titles, phone numbers, and billing information that you share when requesting a quote or signing a service agreement.
  • Operational data generated by integrations with your e-commerce platforms or WMS (order IDs, SKU references, shipment details, and performance metrics).
  • Communication data from emails, chats, calls, or forms so we can follow up on support requests and keep an audit trail.
How we use information

Every data point has a clear business purpose. We do not sell data and we avoid unnecessary processing.

  • To provide and improve warehousing, pick & pack, kitting, and courier management services you subscribe to.
  • To deliver proactive support, onboarding, and training, including sharing critical service updates.
  • To meet contractual obligations, invoicing, fraud prevention, and to maintain accurate internal reporting.
Retention & storage

We document retention periods and continuously review what we store. When a record is no longer required, it is securely deleted or anonymised.

  • Commercial & tax records: kept for up to 7 years to meet HMRC obligations.
  • Operational system logs: retained between 12 and 24 months depending on the integration.
  • Marketing preferences: refreshed every 24 months or sooner if you opt out.
Sharing data with partners

We work with carefully vetted technology and logistics partners. Each partner signs strict data processing agreements.

  • Technology vendors that power our WMS, analytics dashboards, and customer support tools.
  • Freight, carrier, and customs agents involved in fulfilling your orders or receiving inventory.
  • Professional advisors (legal, compliance, auditors) when legally required and under confidentiality.

Your controls

Data subject rights & choices

We respond to privacy requests within 30 days (or faster for critical incidents). Identity verification protects your account before we release or delete data.

Need help? Email info@hsecommerce.co.uk

Access & portability

Request a copy of the information we hold and receive it in a portable format within 30 days.

Rectification

Update inaccurate records so our systems reflect your latest details and preferences.

Restriction & objection

Pause specific processing activities or opt out of marketing while keeping core services.

Erasure

Request deletion when data is no longer needed, subject to statutory retention duties.

Contact our privacy team

We are real people ready to help you stay compliant

Whether you need a signed DPA, a copy of our security controls, or have a data subject request, the quickest path is to reach out below.

Data Protection Contact

info@hsecommerce.co.uk

Use this email for privacy requests, DPIAs, or to report a concern.

Trust & Safety Team

+447955426807

Available Monday to Friday for urgent compliance or security queries.