Privacy Policy

Effective Date: 16 January 2025
Last Updated: 01 January 2026

HACCO LTD (“Hacco”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or use our website and services.

This policy is written in accordance with:

UK General Data Protection Regulation (UK GDPR)

Data Protection Act 2018

Privacy and Electronic Communications Regulations (PECR)


1. Who We Are

Legal Entity: HACCO LTD
Company Number: 15909667
ICO Registration Number: ZB818623

Website: https://www.hacco.co.uk
Email: help@hacco.co.uk

Registered Office:
128 City Road
London
EC1V 2NX
United Kingdom

HACCO LTD is the data controller responsible for your personal data.


2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Identity & Contact Data

Name

Billing address

Delivery address

Email address

Telephone number

b) Order & Transaction Data

Products purchased

Order history

Payment confirmation details

Refund and return records

Payment card details are processed securely by third-party payment providers. We do not store full card details.

c) Technical Data

IP address

Browser type and version

Device information

Time zone setting

Website usage data

d) Account Data (where applicable)

Login credentials

Saved preferences

Communication history

e) Marketing & Communications Data

Preferences in receiving marketing communications

Responses to surveys or promotions


3. How We Use Your Personal Data

We process personal data for the following purposes:

To process and deliver orders

To manage payments and refunds

To communicate regarding orders or enquiries

To prevent fraud and protect our business

To improve website functionality and user experience

To comply with legal and regulatory obligations

To send marketing communications (where consent has been provided)


4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

Contract: Processing necessary to fulfil your order.

Legal Obligation: Compliance with tax and accounting laws.

Legitimate Interests: Fraud prevention, website security, and business improvement.

Consent: Email marketing and non-essential cookies (where applicable).

You may withdraw consent at any time where processing is based on consent.


5. Sharing Your Personal Data

We do not sell personal data.

We may share personal data with trusted third parties where necessary, including:

Payment service providers

Shipping and logistics partners

IT and website hosting providers

Email communication providers

Fraud prevention services

Where suppliers are located outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.


6. International Data Transfers

Some of our suppliers and service providers may be located outside the United Kingdom.

Where personal data is transferred internationally, we ensure appropriate safeguards are implemented, such as:

Standard contractual clauses

Adequacy regulations

Contractual data protection obligations


7. Data Retention

We retain personal data only as long as necessary:

Order and financial records: up to 6 years (for tax and accounting purposes)

Account data: while your account remains active

Marketing data: until consent is withdrawn or after a reasonable inactivity period

Technical logs: as required for security and operational purposes

Data may be retained longer where required for legal claims or regulatory obligations.


8. Cookies

We use cookies to:

Enable essential website functionality

Analyse website performance

Improve user experience

Deliver marketing communications (where consent is provided)

Non-essential cookies are only used with your consent.

For full details, please see our Cookie Policy.


9. Your Data Protection Rights

Under UK data protection law, you have the right to:

Request access to your personal data

Request correction of inaccurate data

Request erasure of your data (where applicable)

Object to processing

Request restriction of processing

Request data portability

Withdraw consent (where applicable)

To exercise your rights, contact:

đź“§ help@hacco.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.


10. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

Secure hosting environments

Access controls

Encryption where applicable

Fraud monitoring systems

However, no method of transmission over the internet is completely secure.


11. Children’s Data

Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors.


12. Automated Decision-Making

We may use automated systems to detect fraud, prevent misuse, and protect our business. This may include automated order screening and risk assessment.

Such processing does not override your legal rights.


13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices.

The updated version will be published on this page with a revised “Last Updated” date.


14. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

đź“§ help@hacco.co.uk

HACCO LTD
128 City Road
London
EC1V 2NX
United Kingdom