Privacy policy
Information we collect
When you place an order, create an account, or contact us, we collect:
- Full name
- Billing and shipping address
- Email address
- Phone number (if provided)
- Payment information (processed securely — we do not store card details)
- Order history and purchase details
When you visit smartdehook.com, we automatically collect:
- IP address and approximate location (country/region)
- Browser type and version
- Device type and operating system
- Pages visited, time on site, and referring URLs
- Cookie and tracking data (see Section 10)
How we use your information
We use the information we collect to:
- Process and fulfil your orders
- Send order confirmations, shipping notifications, and tracking updates
- Respond to customer service enquiries
- Prevent fraud and protect the security of our store
- Comply with legal obligations (including tax and accounting requirements)
- Send marketing communications — only with your explicit consent
- Improve our website and product offerings based on aggregate usage data
Legal basis for processing (UK GDPR)
If you are located in the United Kingdom or the European Economic Area (EEA), KMSE LTD processes your personal data under the following legal bases:
- Contract performance — to process and deliver your order
- Legal obligation — to comply with applicable laws (e.g. tax, fraud prevention)
- Legitimate interests — to improve our services and protect against fraud, where this does not override your rights
- Consent — for marketing communications, which you may withdraw at any time
Consent and withdrawal
Where we rely on your consent to process your personal data — for example, to send you marketing emails — you have the right to withdraw that consent at any time by:
- Clicking "unsubscribe" in any marketing email
- Emailing us at support@smartdehook.com
Disclosure and third parties
We do not sell your personal data. We share your data only where strictly necessary to operate our business, with the following categories of trusted service providers:
- E-commerce platform — Shopify Inc., which hosts our store and processes order data
- Payment processors — Stripe, Inc., to securely process transactions
- Shipping carriers — to deliver your order and provide tracking information
- Email marketing tools — only if you have provided explicit consent
- Analytics providers — for aggregate, anonymised website performance data
All third-party providers are contractually obligated to process your data only for the purposes we specify and to maintain appropriate security standards. We may also disclose your data where required by law, court order, or regulatory authority, including to prevent fraud or protect the rights and safety of our customers.
Shopify and payment processors
Our store is built on the Shopify platform. Your order and account data is stored on Shopify's secure servers. Shopify is certified Level 1 PCI DSS compliant. You can review Shopify's privacy policy at shopify.com/legal/privacy.
Payments are processed by Stripe, Inc. We do not store, see, or have access to your full card number at any time. All payment data is transmitted using industry-standard TLS encryption directly to the payment processor.
For Stripe's privacy practices, please visit stripe.com/gb/privacy.
Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, tax, and accounting requirements:
- Order records — retained as required by applicable tax and accounting legislation (HMRC requirements)
- Customer account data — retained for as long as your account remains active, or up to 2 years following your last interaction with us
- Marketing consent records — retained until you withdraw consent, plus a reasonable period thereafter for compliance purposes
- Communications and support records — retained for 3 years from the date of the last communication
When data is no longer required, it is securely deleted or anonymised in accordance with our internal data retention procedures.
Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure, including:
- SSL/TLS encryption for all data transmitted to and from our website
- Secure, access-controlled hosting on Shopify's PCI DSS Level 1 certified infrastructure
- Restricted administrative access on a need-to-know basis
If you believe your data has been compromised, please contact us immediately at support@smartdehook.com.
Your rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your data, subject to legal retention obligations
- Right to restriction — to request that we limit how we use your data in certain circumstances
- Right to data portability — to receive your data in a structured, machine-readable format
- Rights related to automated decision-making — we do not make automated decisions that produce legal or similarly significant effects
To exercise any of these rights, please contact us at support@smartdehookcom. We will respond within 30 days.
If you are dissatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
Our website uses cookies — small text files placed on your device — to provide core functionality, analyse site performance, and (with your consent) deliver personalised advertising.
- Essential cookies — required for the store to function (e.g. shopping cart, session management). These cannot be disabled.
- Analytics cookies — help us understand how visitors use the site. Used only with consent.
- Marketing cookies — used to deliver relevant advertisements. Used only with consent.
You can manage or disable cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of the store.
Age of consent
Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 16. If you are under 16, please do not submit any personal data through our website.
If we become aware that we have inadvertently collected personal data from a person under 16 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a minor has submitted data to us, please contact us at support@smartdehook.com.
International transfers
We may transfer, store, and process your personal data outside the country you live in. If we transfer personal data out of the UK or the European Economic Area, we rely on recognised transfer mechanisms such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, unless the transfer is to a country deemed to provide an adequate level of protection.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the revised policy on this page and update the "Last updated" date.
We encourage you to review this policy periodically. Your continued use of smartdehook.com after any changes constitutes your acceptance of the updated policy.
Contact and complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your personal data, please contact us using the details below. We aim to respond to all enquiries within 5 business days.