Data policy

Last updated: October 2026

This Data Policy explains how SSTeche handles data, both the information of our website customers and the data stored on devices that businesses and individuals give us through our IT asset, trade-in and recovery services. It sits alongside our Privacy Policy.

Data on devices you send us

Laptops and other devices often hold personal or confidential information. We treat everything on a device as confidential.

• We do not access, copy, sell or share the data on devices we receive
• Devices accepted for resale or reuse are securely erased using recognised data-erasure methods before they are refurbished or sold
• Drives that cannot be erased are removed and physically destroyed or sent for secure recycling, and are never resold
• For business customers, we can provide a report listing each device and how its data was erased or destroyed

Before you send a device

We recommend that you back up anything you want to keep, sign out of all accounts and cloud services, and remove device locks such as Find My, activation locks or BIOS passwords. Devices that are still locked may not be accepted.

Chain of custody

For business and bulk orders, we record each device by serial number from the moment we receive it to its final outcome, whether resale, reuse, recycling or destruction. This record can be shared with you on request.

Website and customer data

We collect only what we need to run our business: contact details, order information and basic website usage data. We keep it secure, do not sell it, and share it only with providers who help us operate, such as payment, delivery and website platforms.

Access to your data

Only team members who need the information to do their work can access customer data. Our providers are required to protect it and use it only for the services they perform for us.

Retention

We keep customer and order records for as long as needed to provide our services and to meet tax, accounting and legal obligations. Erasure and destruction records for business customers are kept for a reasonable period so that we can answer audit questions.

If something goes wrong

If we ever become aware of a data security incident that affects your information, we will tell you promptly and explain what we are doing about it.

Your requests

You can ask us to access, correct or delete your personal data, or ask questions about how we handle device data, through our Contact Us page.