Last updated: 06.01.2025

This Privacy Policy explains how Hash Store (“we”, “us”) collects and uses your information when you visit hashstore.co.uk or buy from us.

1) Who we are (Controller)

Hash Store, United Kingdom.
Contact: info@hashstore.co.uk

2) Scope

This policy covers our website, checkout, support channels, and marketing communications.

3) What we collect

  • Identity: name, email, phone, billing and delivery addresses.

  • Order data: items purchased, notes, order numbers, receipts.

  • Payment data: processed by our payment provider; we do not store full card numbers.

  • Technical data: IP address, device/browser info, cookies, logs.

  • Usage data: pages viewed, links clicked, referring URLs.

  • Marketing preferences: newsletter opt-ins/opt-outs, consent timestamps.

  • Support: messages, attachments, call notes.

4) Why we use your data (lawful bases – UK GDPR)

  • To operate the site and deliver your order (contract).

  • Fraud prevention and site security (legitimate interests; legal obligation).

  • Customer support (contract; legitimate interests).

  • Analytics and improvement (legitimate interests).

  • Marketing with your consent (consent; you can withdraw anytime).

  • Legal and tax compliance (legal obligation).

5) Cookies and similar tech

We use:

  • Strictly necessary (cart, checkout, security).

  • Functional (remember choices).

  • Analytics (traffic and performance, aggregated).

  • Marketing (only if you consent).
    Manage preferences via our Cookie Settings link and your browser settings. See our Cookie Policy for details.

6) Sharing your data

We share only what’s needed with:

  • Payment processors for secure payments.

  • Couriers for delivery (name, address, phone/email).

  • Hosting and analytics providers for site operation.

  • Fraud and security tools.

  • Professional advisers and authorities when required by law.
    We do not sell your personal data.

7) International transfers

Where suppliers process data outside the UK, we use UK-approved safeguards (e.g., UK IDTA/Standard Contractual Clauses). Details available on request.

8) Retention

  • Orders and invoices: 6 years (tax/legal).

  • Customer accounts: active period, then 24 months inactivity purge.

  • Support tickets: 24 months.

  • Marketing records: until you withdraw consent or we delete.
    We keep data longer only if required by law or to resolve disputes.

9) Your rights (UK residents)

You can access, correct, delete, restrict, object, and port your data, and withdraw marketing consent at any time.
To exercise rights, email info@hashstore.co.uk. You can also complain to the ICO (ico.org.uk). We prefer to resolve issues directly first.

10) Accounts, orders, and marketing

  • Manage account details and addresses in My Account.

  • Unsubscribe using the link in emails or update Marketing Preferences.

  • If you checkout as guest, we keep only order records required for service and compliance.

11) Children

Our site is for adults. We do not knowingly collect data from persons under 18.

12) Security

We use TLS encryption, access controls, and least-privilege practices. No system is 100% secure; report concerns to info@hashstore.co.uk.

13) Third-party links

Our site may link to external sites with their own privacy policies.

14) Changes to this policy

We update this page when practices or laws change. Material changes will be notified on-site or by email.

15) Contact

  • Data protection contact: Privacy Team, Hash Store

  • Email: info@hashstore.co.uk

  • Postal: 148 Upper Richmond RdLondon SW15 2SW, UK

Optional copies for your site

  • Cookie Policy (detailed list of cookies, purposes, durations).

  • Data Requests form (access/erase/export).