Privacy Policy

Last updated: 15 October 2026

HSD Express ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use our website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

HSD Express is a trading name of ALHAWSHI SMART DEALS LTD
Registered in England & Wales — Company No. 17253599
Registered office: 4 Evington Road, Leicester, LE2 1HF, United Kingdom
Phone: 07312006399
Email: elhosheb@gmail.com

2. Information we collect

When you use our website, we may collect:

• Account information: name, email address, phone number, password (stored encrypted).
• Order information: delivery address, items purchased, order history.
• Payment information: payments are processed securely by Stripe. We never see or store your full card details.
• Technical data: IP address, browser type, and session cookies needed for the site to function.

3. How we use your information

• To process and deliver your orders.
• To manage your account, returns, and refunds.
• To send order confirmations and delivery updates by email.
• To keep our website secure and prevent fraud.

We process your data on the legal bases of contract performance (fulfilling your order), legitimate interests (site security), and legal obligation (tax and accounting records).

4. Sharing your information

We only share your data with trusted partners needed to run our service:

• Stripe — secure payment processing.
• Delivery couriers — name, address, and phone number needed to deliver your order.
• Google (Gmail) — sending transactional emails.

We never sell your personal data to anyone.

5. Cookies

We use essential session cookies only — these keep you logged in and remember your shopping cart. They are required for the website to work and are deleted when you close your browser or log out.

6. How long we keep your data

We keep account and order data while your account is active. Order records are kept for 6 years as required by UK tax law. You may request account deletion at any time (see your rights below).

7. Your rights

Under UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing.
• Data portability.

To exercise any of these rights, email us at elhosheb@gmail.com. You also have the right to complain to the Information Commissioner's Office (ICO).

8. Security

We protect your data with industry-standard measures: encrypted passwords, secure (HTTPS) connections, and payment processing handled entirely by Stripe's certified secure systems.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with the date shown above.