Last updated: 6 October 2026
HSE Store Ltd operates signage.hsestore.co.uk, trading as HSE Store Signage. We supply workplace safety signage, labels, posters and related products, primarily to business customers throughout the UK.
This Privacy Policy explains what personal information we collect, why we collect and use it, who we may share it with, how long we retain it, and the rights available to you.
We only collect and use personal information where we have a lawful basis to do so. We use your information where necessary to process and fulfil orders, respond to enquiries, operate and secure our website, provide customer services, comply with our legal obligations and, where you have given consent, understand how our website is used.
1. Who we are
HSE Store Ltd is the data controller responsible for the personal information processed through signage.hsestore.co.uk.
HSE Store Ltd
Company number: 15369896
Office 8065
321–323 High Road
Romford
Essex
RM6 6AX
United Kingdom
Email: signage@hsestore.co.uk
Telephone: 01772 915641
You can contact us using these details for any privacy or data protection enquiry, including requests to exercise your data protection rights.
2. Information we collect
Depending on how you use our website and services, we may collect and process the following personal information.
Information you provide to us may include your name, business or company name, email address, telephone number, billing address, delivery address, customer account details, order history, enquiry messages, review content and correspondence with us.
Payment information is processed by our payment provider, Revolut. We do not store full payment card numbers or security codes on our website. We retain the transaction information necessary to confirm and administer payments, such as the payment status, transaction reference, payment method and amount.
Where you use an alternative payment method, such as Google Pay, the relevant payment provider may process your information in accordance with its own privacy notice and terms.
Technical and website usage information may include your IP address, browser type, device type, pages visited, referring page, cookie preferences and information relating to the security and operation of our website.
Where you have given consent to optional analytics, Google Analytics and Google Tag Manager may process website usage and ecommerce information. For completed orders, this may include information such as the order number, currency and order total. Payment card details are not provided to these services.
Customer support communications may also be processed where you choose to contact us through a live chat or other support facility. This may include the information you provide and the contents of the conversation.
3. How and why we use your information
Processing and fulfilling orders
We use order information to process your purchase, take payment, arrange production and delivery, communicate with you about your order, deal with returns or other after-sales matters, and maintain an appropriate record of the transaction.
Lawful basis: Performance of a contract.
Responding to enquiries and customer support
We use contact and account information to respond to enquiries, provide customer support and administer customer accounts.
Lawful basis: Performance of a contract, or legitimate interests where no contract has yet been entered into.
Website operation, security and fraud prevention
We process technical information, including information handled through Cloudflare, to operate, maintain and protect our website and systems, detect malicious activity and help prevent fraud or abuse.
Lawful basis: Legitimate interests.
Legal, accounting and regulatory obligations
We retain and process records where necessary to comply with tax, accounting, financial, legal and regulatory requirements, and to establish, exercise or defend legal claims where appropriate.
Lawful basis: Legal obligation and, where applicable, legitimate interests.
Website analytics
Where you give consent through our cookie banner, we use Google Analytics and Google Tag Manager to understand how visitors use our website and to measure ecommerce activity and completed orders. This information helps us understand website performance and improve our services.
Lawful basis: Consent.
If you reject optional analytics cookies, these analytics tags will not be set. You can change your cookie preferences at any time using the cookie settings provided on our website.
Tree planting associated with orders
For each order, we fund the planting of one UK tree through Ecologi. We may provide a limited order reference, company name or similar information to enable the planting activity to be recorded and associated with the relevant order.
Lawful basis: Legitimate interests.
Product and service reviews
Where you voluntarily submit a review, your information and review content may be processed by WiserReview in order to collect, manage and display customer reviews.
Marketing
We do not automatically subscribe customers to marketing communications simply because they place an order. Where direct marketing is used, we will do so in accordance with applicable data protection and electronic communications laws.
Sale of personal information
We do not sell your personal information to third parties.
4. Who we share your information with
We only share personal information where necessary to provide our services, operate our website, meet our legal obligations or otherwise manage our business.
Payment providers
Revolut processes card payments and related payment information on our behalf.
Manufacturers, suppliers and delivery providers
Where required to fulfil an order, we may share relevant information with manufacturers, suppliers, carriers and other fulfilment partners. This may include your name, delivery address, telephone number, email address and information about the goods ordered.
Website hosting and security providers
Our website hosting provider and Cloudflare may process technical and security information required to operate, maintain and protect the website.
Analytics providers
Where you have given consent to optional analytics, Google Ireland Ltd and Google LLC may receive website usage and ecommerce information described in this policy. Google Tag Manager is used to manage and load relevant analytics tags.
Review providers
If you choose to leave a review, WiserReview may process your information and review content in order to provide its review service.
Tree planting
Ecologi may receive a limited order reference, company name or similar information necessary to record the tree planting associated with your order.
Professional advisers and authorities
Where necessary, we may share information with our accountants, banks, insurers, legal advisers, HM Revenue & Customs, regulators, law enforcement bodies and other public authorities where we are legally required or permitted to do so.
5. International transfers
Some of the service providers we use, including Google, Cloudflare and Revolut, may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we take appropriate steps to ensure that the transfer is lawful and that your information continues to receive an appropriate level of protection.
Depending on the circumstances, this may be based on UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. The ICO recognises these as mechanisms that can be used for appropriate safeguards for restricted international transfers under the UK GDPR.
6. Cookies and similar technologies
We use cookies and similar technologies to operate our website, remember items in your shopping basket, enable checkout and payment functionality, maintain security and remember your cookie preferences.
Strictly necessary cookies are used where they are essential for the website or a service you have requested to function. These do not require consent under applicable cookie rules. The ICO specifically recognises essential shopping-basket and security cookies as examples of technologies that may fall within this exemption.
Examples include:
- Cloudflare __cf_bm and cf_clearance security cookies;
- WooCommerce cookies including woocommerce_cart_hash and woocommerce_items_in_cart;
- WooCommerce session cookies such as wp_woocommerce_session_*;
- payment-security cookies used by Revolut during checkout; and
- cookies used to remember and manage your cookie preferences.
Optional analytics cookies are only set where you actively give consent through our cookie banner. These include Google Analytics and related analytics technologies, including cookies such as _ga.
Google Tag Manager is used to manage and load certain website tags. Where those tags are associated with optional analytics, they are only activated after the relevant consent has been provided.
You can reject optional cookies when you visit the website and can change or withdraw your choice later through our cookie settings.
We do not use session-recording software. We do not currently use advertising or remarketing cookies as part of this website setup.
If our use of cookies or similar technologies changes in a way that requires additional consent, we will update this policy and, where appropriate, our cookie consent mechanism before those technologies are used.
7. Automated decision-making and profiling
We do not use your personal information to make automated decisions about which products or prices are shown to you.
Our payment and security providers may use automated systems to detect suspected fraud, unusual activity or security risks when processing transactions. These checks may be performed by the relevant provider in accordance with its own privacy policy and security procedures.
8. How long we keep your information
We retain personal information only for as long as it is reasonably necessary for the purposes described in this policy, including where necessary to comply with legal, accounting, tax or regulatory requirements.
Order, invoice and payment records: normally retained for 6 years from the end of the relevant financial year.
Customer account information: retained while your account remains active and for an appropriate period afterwards where necessary for legal, accounting or other legitimate business purposes.
Enquiry and correspondence information: retained for as long as reasonably necessary to deal with the enquiry, matter or relationship and for any appropriate period afterwards where necessary to protect our legitimate interests or meet legal obligations.
Review information: retained for as long as reasonably necessary for the review service, customer relationship and any applicable legal or business requirements.
Google Analytics information: retained in accordance with the retention settings configured within our Google Analytics property, and for no longer than 14 months unless a shorter retention period is applied.
Where a specific retention period is not stated, we determine the appropriate retention period based on the nature of the information, the purpose for which it was collected, our legal and regulatory obligations, and our legitimate business requirements.
9. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures include the use of HTTPS encryption, restricted access to order and administrative systems, appropriate authentication and access controls, the use of a dedicated payment provider for card transactions, and Cloudflare security and protection services.
However, no website, electronic transmission or storage system can be guaranteed to be completely secure.
10. Your data protection rights
Depending on the circumstances and the lawful basis on which we process your information, you may have the right to:
- request access to the personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your personal information where there is no lawful reason for us to continue processing it;
- request restriction of processing in certain circumstances;
- receive certain personal information in a structured, commonly used and machine-readable format where the right to data portability applies; and
- object to certain processing of your personal information.
Right to object: where we process your personal information on the basis of legitimate interests, you have the right to object in certain circumstances.
Where we rely on your consent, you may withdraw that consent at any time. For example, you can withdraw consent to optional analytics cookies through our website’s cookie settings.
Your rights are not absolute and may be subject to legal exemptions or limitations. For example, we may be required to retain invoices, transaction records or other information to comply with legal or regulatory obligations.
To exercise any of your rights, please contact signage@hsestore.co.uk. We may need to verify your identity before dealing with a request.
11. Complaints
If you have any concern about the way we handle your personal information, we encourage you to contact us first so that we can try to resolve the matter.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection.
Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113
12. Links to other websites
Our website may contain links to manufacturers, suppliers, carriers, payment providers and other third-party websites.
We are not responsible for the privacy practices, security or content of websites operated by third parties. You should review the relevant privacy policy of any external website you visit.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or the way we process personal information.
When we make changes, we will update the Last updated date shown at the top of this policy.
14. Contact us
If you have any questions about this Privacy Policy or the way HSE Store Ltd processes personal information through HSE Store Signage, please contact us:
HSE Store Ltd
Company number: 15369896
Office 8065
321–323 High Road
Romford
Essex
RM6 6AX
United Kingdom
Email: signage@hsestore.co.uk
Telephone: 01772 915641