UK GDPR notice · version of 13 November 2026

Privacy notice

What this site and the shipper account keep about people, why, on what lawful basis, for how long, who else handles it, and how to see it, correct it or have it removed. It is written from the code that does the keeping, item by item.

Kept only for the load, and only for as long as the load needs it.

Who is responsible

The controller of the information described here is HAKEM TRANSPORT LTD, the company that runs this site and the shipper account. It decides what is kept and why, and it answers for it.

The company has not appointed a data protection officer: the law does not require one for a business of its kind and size. Anything about this notice, or about information we hold, goes to the address on the right.

Controller: HAKEM TRANSPORT LTD
Company number: 17431100, registered in England and Wales
Registered office: 11 Windsor Road DAGENHAM, RM8 3JX United Kingdom
Write to: dispatch@hakemtransport.info

What we keep, and for how long

The site stores things in two places on Cloudflare's network, one for collection enquiries and one for shipper accounts. Each item below is a kind of entry those two places hold, or a trace that passes through the site's host. Nothing else about you is kept by the site.

A collection enquiry

What is in it: Where and when, what the goods are, pallets or packages, sizes and weights, what each end has for unloading, access notes, your name, company, email and telephone if given, the reference, the time it arrived, the steps the desk has set with its notes, a copy of a restraint calculation if one was attached, and whether a copy went by email.
Why: To read it, plan the load, reply, and show where it stands.
Lawful basis: Steps you asked us to take before a contract to carry the goods: UK GDPR Article 6(1)(b).
How long: Twelve months from the day it arrived, then deleted automatically; moving a step does not restart that clock. An enquiry raised from a shipper account also goes at once if the account is deleted.

A shipper account

What is in it: Your name, company if given, the email address you sign in with, the date it was opened and the date you ticked the consent line. The password itself is never kept: only a salted PBKDF2-SHA256 hash of it, which cannot be turned back into the password.
Why: To let you sign in and keep your points, loads and calculations together.
Lawful basis: Providing the account you asked for: Article 6(1)(b). The consent line you tick shows that you agreed to it being kept.
How long: Until you delete the account from its Settings page, which removes every item of it in one go.

Saved points, calculations and loads

What is in it: Points: a name, an address or postcode, how goods come off there, bay hours, limits on the way in and your notes (which may name a site contact, if you choose to write one). Calculations: the mass, friction, strap rating, angle, body and the forces worked out. Loads: the references of enquiries raised from the account.
Why: So that enquiries can be raised from them and you can see them again.
Lawful basis: Article 6(1)(b), as part of the account.
How long: Until you remove the item, or delete the account.

Signing in, and a reset link

What is in it: A random key that ties your browser to the account (stored only as a hash, with the account it belongs to), and, if you ask for one, a one-time key for choosing a new password, also stored only as a hash. The link carrying that key goes to the desk's mailbox, not to you, and the desk sends it on from dispatch@ once you have written in from the address you signed up with.
Why: To keep you signed in, and to let you reset a forgotten password.
Lawful basis: Article 6(1)(b).
How long: A sign-in lasts fourteen days or until you sign out, when it is deleted on our side too; changing the password ends every other sign-in. A reset key lasts one hour, or until it is used.

Messages you send us

What is in it: Whatever you write to dispatch@hakemtransport.info, with your address and the time.
Why: To answer it, and to deal with anything that later turns on what was agreed.
Lawful basis: Article 6(1)(b) where it is about carrying goods for you; otherwise our legitimate interest in answering the people who write to us, Article 6(1)(f).
How long: As long as it takes to deal with it, and no longer than six years after the matter it concerns has ended, which is the time in which a claim about a contract can be brought.

Traces of a visit

What is in it: When a request reaches the site's code (an account page, a form, a tracking lookup; plain pages do not), Cloudflare notes the address asked for, the time, the response and network details of the connection. Sign-in, sign-up, reset, form sending and tracking lookups are counted per connection, and sign-in and reset per hashed email, to stop repeated attempts.
Why: To keep the site working and to keep robots and guessers away from the accounts.
Lawful basis: Our legitimate interest in a secure, working site: Article 6(1)(f).
How long: The counts last sixty seconds. The request details are deleted by Cloudflare after three days.

Page-view counts

What is in it: Cloudflare, as the host, adds its Web Analytics script to the pages. It reports the page asked for, the page you came from, the type of browser and device, the country and how long the page took to load. It sets no cookie, uses no local storage and does not follow you to other sites.
Why: To see which pages are used and whether they load quickly enough.
Lawful basis: Our legitimate interest in a site that works for the people using it: Article 6(1)(f).
How long: Cloudflare keeps the figures as totals for the company's analytics view; the company never sees them visit by visit.

A tracking lookup stores nothing: the reference and postcode you type are compared with the enquiry and then dropped. No decision about you is made by a program; every enquiry is read by a person.

Who else handles it

Cloudflare hosts the site. It runs the site's code, stores the entries above on its network, counts the requests and keeps the request details for three days. It acts as our processor under its data processing terms, and handles the information only to provide that service.

Cloudflare's network has data centres in many countries, so information may be handled outside the United Kingdom. Its data processing terms include the safeguards UK law requires for that: the international data transfer addendum to standard contractual clauses.

Email copies. A copy of each enquiry, and each password reset link, is sent by Cloudflare Email Routing to the company's own mailbox, which the desk reads dispatch@ from, and is held there by the provider that hosts that mailbox. Email Routing delivers only to that mailbox and never to a visitor's address: everything you receive from us is written by the desk and comes from dispatch@hakemtransport.info.

Nobody else receives your information. It is not sold, not shared for marketing and not used for advertising, and nothing on the site follows you to other sites. We would only disclose it where the law requires us to, for example to the police with a court order.

Cookies

Every cookie the site's code can set. There are no others.
Name	What it does	How long
`__Host-hkt_dock`	Keeps you signed in to a shipper account. Set when you open an account or sign in, holding a random key. HttpOnly, Secure, SameSite=Lax: scripts cannot read it and other sites cannot use it.	Fourteen days, or until you sign out

Your rights, and how to use them

See it

Everything an account holds is on its own pages, and its points download as a CSV file from the Points page. For anything else, including an enquiry sent without an account, write and we send you a copy.

Correct it

Points can be edited in the account. To change the name or email address on an account, or something in an enquiry, write to us.

Remove it

Delete the account from Settings and everything in it goes at once, enquiries included. For an enquiry sent without an account, write with its reference.

Object or restrict

You can object to what we keep on the basis of legitimate interest, or ask us to hold something without using it while a question about it is settled.

Take it with you

The CSV of points is one way; on request we send what we hold about you in a common format you can read.

Write to dispatch@hakemtransport.info, from the address the information is about where you can, so that we know it is yours. We answer within one month. If a request is complex we may take up to two further months, and we tell you within the first month if we need them. Using these rights costs nothing.

Complain to the ICO

If you think we have handled your information wrongly, you can complain to the Information Commissioner's Office, the UK regulator for data protection: online at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We would like the chance to put it right first: the complaints procedure covers that, and the right to go to the ICO does not depend on it.

Children, and changes

The site and the account are for people arranging the carriage of goods, usually at work, and are not meant for children.

When what we keep changes, this notice changes with it, and the version date at the top moves. A change that affects information we already hold is told to account holders by email before it applies.