Data Protection
GDPR & Data Protection Policy
How HSSL Technologies (UK) processes personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU GDPR.
Who We Are
HSSL Technologies (UK) ("HSSL", "we") operates hssl.uk and acts as the data controller for personal data collected through this website and in the course of supplying our products and services. Contact us about data protection at sales@hssl.uk or +44 330 043 2524.
What We Collect and Why
- Account & order data (name, business, email, phone, addresses, order history) — to perform our contract with you: quoting, order fulfilment, delivery, invoicing, returns and support.
- Quote and enquiry data (details you submit through Request-a-Quote, chat or contact forms) — legitimate interest in responding to your enquiry.
- Payment data — processed by PCI-DSS compliant payment providers; we never store full card numbers.
- Website usage data (device, pages viewed, cookies) — consent and/or legitimate interest in operating and improving the site. See cookie settings in your browser and our Privacy Policy.
- Marketing preferences — consent, or soft opt-in for existing customers; you can unsubscribe at any time.
Lawful Bases
We rely on: contract performance (orders, quotes, support), legitimate interests (fraud prevention, service improvement, B2B communications), legal obligation (tax and accounting records, VAT invoicing) and consent (non-essential cookies, marketing to non-customers).
Sharing & International Transfers
We share personal data only as needed with: delivery carriers, payment processors, our e-commerce platform (BigCommerce), our service-desk provider, and — where an order requires it — the manufacturer or distributor fulfilling your product. Some providers process data outside the UK/EEA; where they do, transfers are protected by UK adequacy regulations, the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
Retention
Order and invoicing records are retained for 6 years plus the current year (UK tax law). Enquiry and quote data is kept for up to 2 years from last contact. Marketing data is kept until you unsubscribe or after prolonged inactivity.
Your Rights
- Access your personal data (subject access request);
- Rectify inaccurate data; erase data we no longer need;
- Restrict or object to processing, including direct marketing (absolute right to object);
- Data portability for data you provided to us;
- Withdraw consent at any time where processing is based on consent.
To exercise any right, email sales@hssl.uk with "Data Protection" in the subject. We respond within one calendar month, free of charge.
Complaints
If you're unhappy with how we handle your data, please contact us first — see our Complaints Policy. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113. EU residents may complain to their local supervisory authority.
Security
Personal data is protected with encryption in transit (TLS), access controls, and vendor due diligence. In the unlikely event of a personal data breach likely to result in a risk to your rights, we will notify the ICO within 72 hours and affected individuals without undue delay, as UK GDPR requires.
