Privacy policy

Privacy Policy – SSD Store

This Privacy Policy explains how SSD Store, operated by BN London Ltd, collects, uses, stores, and protects your personal data when you use ssdstore.co.uk or buy from our online store.

We comply with the UK General Data Protection Regulation (UK GDPR) and applicable UK data protection laws.

1. Who We Are

SSD Store is operated by:

BN London Ltd
Elthorne Gate
64 High Street
Pinner
England
HA5 5QA
United Kingdom

Company No: 14063196

Customer service and data protection contact:
support@ssdstore.co.uk

For the purpose of applicable data protection laws, BN London Ltd is the data controller of your personal information.

2. What Data We Collect

We may collect the following types of personal data when you use our website, contact us, or make a purchase:

Identity Data: your name, billing address, delivery address, and account details where applicable.

Contact Data: your email address, telephone number, billing address, and delivery address.

Order Data: products purchased, order history, delivery details, returns, refunds, exchanges, and warranty-related information.

Payment Data: payment details are processed securely by our payment providers. We do not store full card details.

Technical Data: IP address, browser type, device information, operating system, and website usage data.

Cookie Data: cookie preferences, analytics data, and functionality cookie information.

Communication Data: messages, enquiries, and information you provide when contacting us.

3. How We Use Your Data

We use your personal data to:

- Process and deliver your orders.
- Take payment and prevent fraud.
- Provide customer support.
- Handle returns, refunds, exchanges, and warranty enquiries.
- Send order updates and essential service messages.
- Improve website performance and user experience.
- Maintain security and prevent misuse.
- Comply with legal, tax, accounting, and regulatory obligations.
- Send marketing communications only where permitted by law or where you have opted in.

4. Legal Basis for Processing

We process personal data under the following lawful bases:

Contract: to process your order, deliver products, manage returns, and provide related services.

Legal obligation: to comply with accounting, tax, fraud prevention, consumer protection, and legal obligations.

Legitimate interests: to improve our services, maintain website security, prevent misuse, respond to enquiries, and operate our business.

Consent: for marketing communications and certain cookies where consent is required.

5. Payments and Third-Party Processors

We use secure payment providers and Shopify to process orders and payments. Payment information is handled directly by the relevant payment provider. We do not store full card details.

Our online store is hosted by Shopify. Shopify may process personal data needed to operate the store, checkout, payments, fraud prevention, hosting, analytics, and related ecommerce services.

We may also share necessary order and delivery information with courier, fulfilment, payment, fraud prevention, IT, analytics, and customer support providers.

6. Cookies

We use cookies and similar technologies for site functionality, security, analytics, and remembering your preferences.

You can manage or disable cookies through your browser settings. Some cookies may be necessary for the website, basket, checkout, and account features to work properly.

7. Data Sharing

We only share personal data where necessary to operate our store, fulfil orders, comply with the law, or provide customer support.

This may include sharing data with:

- Shopify, our ecommerce platform and hosting provider.
- Payment processors.
- Courier and logistics partners.
- Fraud prevention services.
- IT, analytics, and customer support providers.
- Professional advisers where necessary.
- Authorities or regulators where required by law.

We do not sell your personal data to third parties.

8. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

Typical retention periods include:

- Order and transaction records: up to 6 years where required for tax, accounting, and legal purposes.
- Customer service records: for as long as needed to resolve enquiries and maintain business records.
- Warranty or returns data: for the duration needed to handle the relevant warranty, return, or consumer rights issue.
- Analytics data: typically 12–36 months, depending on the tool and settings used.

9. Data Security

We use reasonable technical and organisational measures to protect personal data, including secure systems, access controls, and encrypted connections where appropriate.

No online system can be guaranteed to be completely secure. You should avoid sending sensitive information through unsecured channels.

10. Your Rights Under UK GDPR

Under UK GDPR, you may have the right to:

- Access your personal data.
- Request correction of inaccurate personal data.
- Request deletion of your personal data.
- Restrict or object to processing.
- Request a copy of your personal data in a portable format.
- Withdraw consent where processing is based on consent.
- Object to direct marketing.

To exercise your rights, contact us at:

support@ssdstore.co.uk

We may need to verify your identity before responding to a request.

11. Marketing

We will only send marketing communications where permitted by law or where you have opted in.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us at support@ssdstore.co.uk.

We may still send non-marketing messages relating to orders, accounts, customer support, returns, refunds, or legal notices.

12. International Transfers

Shopify and some service providers may process or store personal data outside the United Kingdom.

Where personal data is transferred outside the UK or European Economic Area, appropriate safeguards will be used where required, such as adequacy decisions, standard contractual clauses, or equivalent lawful transfer mechanisms.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first at:

support@ssdstore.co.uk

You also have the right to complain to the UK Information Commissioner's Office (ICO):

https://ico.org.uk/

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal obligations, or how we operate the website.

The latest version will always be available on this page. The “Last updated” date shows when this policy was most recently changed.

15. Contact

For privacy enquiries, GDPR requests, or questions about this Privacy Policy, contact:

Email:
support@ssdstore.co.uk

Postal address:

SSD Store
Operated by BN London Ltd
Elthorne Gate
64 High Street
Pinner
England
HA5 5QA
United Kingdom

For the purpose of applicable data protection laws, BN London Ltd is the data controller of your personal information.