Privacy Policy

1. Identity of data controller

Where used in this Policy, "TSO" means The Stationery Office Limited, having its registered office at 1-5 Poland St, Soho, London W1F 8PR or any of its subsidiaries or related companies. For the purposes of applicable legislation, including the EU General Data Protection Regulation, as amended or supplemented (the "Data Protection Laws"), the TSO group company that you have dealings with is the controller of your personal information.

2. Relationship between The Stationery Office LTD and HSE

TSO hosts, manages and fulfils orders made through this Site on behalf of The Health and Safety Executive ("HSE"). Personal information we collect about you including: your name, email address, item(s) purchased, whether or not you have asked to receive marketing from HSE will to a limited extent be shared with HSE for various purposes including:

  • to support HSE's business operations and understand and manage demand from the public for HSE's goods or services;
  • to facilitate monitoring of our performance in providing relevant goods or services under concession from HSE and the relationship between TSO and HSE;
  • to enforce or protect our rights under relevant agreements with HSE;
  • to transition the running of HSE's Books website, and the provision of related services, to a third party in the event that TSO and HSE choose to end their arrangement.

You should not submit any personal information to us if you do not wish it to be shared with HSE. HSE will process your personal information in accordance with its privacy policy, which is available herelink opens in a new window, and which we have no control over.

If you have any questions about how your personal information may be processed by HSE, you can contact HSE's Data Protection Officer by email at or in writing at:

Data Protection Officer
Health and Safety Executive
1.3 Redgrave Court Merton Road, Bootle
L20 7HS

3. Our Data Protection Officer

Our Data Protection Officer can also be contacted by email at or in writing at:

Data Protection Officer
Williams Lea Tag
PO Box 29
United Kingdom

4. How we collect and process your personal information

5. Our legal basis for using your personal information

When you sign up for an account on our Site

If you sign up for an account on our Site, we will collect basic information about you including your name, email address, and telephone number. We will use the information that we collect about you to:

  • create and maintain your account;
  • allow you to log in to the Site;
  • coontact you about your account and the services that we offer.

When you contact us

If you contact us by telephone, email, post or using another function offered by our Site, e.g. livechat we will collect any information about you that you choose to give us. We will use this information to review, investigate and respond to any comment or question that you may raise.

Information we collect automatically from you

The information we automatically collect may include your Internet Protocol (IP) address, software configuration, aggregate use information, geographical location data, operating system and use of cookies. We will not usually be able to identify you from this information. Cookies are small files sent from us to your computer where they are stored and may be read. You can find out more about our use of cookies in our Cookie Policy.

If you create an account or place an order through our Site, our legal basis for processing your personal information is that it is necessary for the performance of the Terms and Conditions between you and us. In all other circumstances, including where you contact us, our legal basis for processing personal information is that it is necessary for our legitimate interests in conducting our business and meeting the requirements of our current and prospective customers.

6. How we may share your personal information

We will disclose the personal information we hold about you to:

  • HSE;
  • our group companies and affiliates;
  • our service providers, including IT hosting companies;
  • banks, other financial institutions and credit reference agencies;
  • payment service providers;
  • third party companies in the event that we are involved in a corporate transaction such as an actual or potential merger, joint venture, consolidation or asset sale;
  • professional advisors such as attorneys, accountants, auditors, financial and other professionals;
  • regulatory authorities, including tax authorities;
  • law enforcement agencies, courts and other relevant tribunals.

7. International transfers of personal information

We process your personal information using data centers located inside the European Union and, in some cases, using data centers located outside the European Union. Where we transfer personal information to our group companies or other third parties outside of the European Economic Area, we will ensure that those transfers take place in accordance with the applicable data protection laws, including by entering into data transfer agreements with recipients. If you would like more information about how your personal information may be transferred, please contact us at

8. Retention of your personal information

The period for which we will retain personal information will vary depending on the purposes that it was collected for, as well as the requirements of any applicable law or regulation:

  • if you have signed up for an account on our Site, we will store your personal information and the information in your account for as long as is necessary to provide the account, and for the period for which you or we could bring legal proceedings in relation to the running of your account;
  • if you order a product through our Site, we will store your personal information and information about your order for as long as is necessary to comply with applicable tax legislation, and for the period for which you or we could bring legal processing in relation to your order.

9. Your rights

You may have certain rights in relation to the personal information we collect about you. These may include the right to request access to your personal information, to request that it is erased, that its processing is restricted, or that any inaccurate personal information is rectified. You may also have the right to object to the processing of your personal information, or in some circumstances to obtain a copy of the personal information in machine readable format. Any such request should be submitted in writing to

You also have the right to complain about the use your personal information directly to us as an organisation to or to local supervisory authority, which in the UK is the Information Commissioner's Office ( opens in a new window).

You can contact them by calling 0303 123 1113. Or go online opens in a new window (opens in a new window; please note we can't be responsible for the content of external websites).

Or you can write to them at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow Cheshire

10. Changes to this Privacy Policy

This Policy will be reviewed from time to time to take account of changes to our operations or practices and, further, to make sure it remains appropriate to any changes in law, technology and the business environment. Any personal information held will be governed by our most current Policy.

11. Links to third party websites

This Site may contain links to other websites. These are not covered by this Privacy Policy. If you access other websites using the links provided, you do so at your own risk. The operators of these websites may collect and use your information in accordance with their privacy policies, which may differ from ours. Please check the relevant policies before you submit any personal information to any other websites.

12. Contact us

If you have any questions or wish to contact us please contact us at: or