Trust, Security & Privacy

Accounts are protected by email + password, with optional Google sign-in. Passwords are hashed and stored by our backend provider; SDS staff never see them in plain text. Session tokens are scoped per device and can be revoked by signing out.

We store the information you give us when you create an account, place an order, or submit a trade-in: name, email, shipping address, order and quote history, and any notes you send us. Payment card details are handled by our payment processor (Stripe) and never touch our database.

All traffic to sds.net is served over HTTPS. Customer data is held in a managed Postgres database with row-level security so accounts can only read their own orders, quotes, returns, and warranty records. Internal pricing, cost, and inventory location fields are restricted to staff and never exposed to public visitors.

We rely on a small set of providers to run the site: Lovable Cloud (hosting & database), Stripe (payments), Royal Mail and DPD Local (shipping & returns), and Resend (our email provider) for transactional email. Each one only receives the data needed to perform its task.

Order and trade-in records are retained for as long as needed to support warranty, returns, and UK accounting obligations. You can request deletion of your account and personal data by contacting us at the address below; records required for legal/financial reasons will be retained in line with UK law.

To request a copy of your data, ask for deletion, or report a security concern, email office@sds.net. We aim to respond within 5 working days.