1. Who We Are
Device Resale Ltd. ("we", "us", "our") operates the Device Resale wholesale client portal located at deviceresale.co.uk. We are registered in England and Wales. We act as a data controller in respect of your personal data.
If you have any questions about this policy or how we handle your data, please contact us at privacy@deviceresale.co.uk.
2. Data We Collect
We collect the following categories of personal data when you register and use the portal:
- Account data: Your name, email address, company name, and password (stored as a secure hash).
- Order data: Products ordered, quantities, pricing, and order history.
- Shipping addresses: Delivery names and full postal addresses you save to your account.
- Payment data: Card payments are processed by Stripe and we do not store full card numbers. For bank transfers we record your payment reference and confirm receipt.
- Communications: Messages and notes exchanged between you and our team.
- Usage data: Log files, IP addresses, browser type, and pages visited, used for security and improving the portal.
3. How We Use Your Data
We use your personal data for the following purposes:
- To provide and manage your client account and portal access.
- To process orders, arrange dispatch, and deliver goods to your specified addresses.
- To process payments and maintain financial records as required by law.
- To send you transactional emails (order confirmations, dispatch notifications, receipts).
- To send you notifications about new stock, relevant to your purchasing activity — you may opt out in account settings.
- To respond to enquiries and provide support.
- To detect and prevent fraud and abuse.
- To comply with our legal obligations.
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
4. Legal Basis for Processing
We process your data under the following legal bases under UK GDPR:
- Contract performance: Processing necessary to fulfil your orders and manage your account.
- Legal obligation: Retaining financial records as required by HMRC and applicable law.
- Legitimate interests: Security monitoring, fraud prevention, and improving our services.
- Consent: For optional marketing notifications, which you can withdraw at any time in account settings.
5. Data Sharing
We share your data only where necessary with trusted third parties:
- Stripe: Payment processing. Subject to Stripe's own privacy policy.
- Shippo / Courier partners: Your name and delivery address are shared with our logistics providers (DHL, Royal Mail, DPD, Evri) to arrange delivery of your orders.
- Hosting providers: Our servers are hosted with reputable UK/EU providers.
We require all third parties to respect the security of your data and treat it in accordance with applicable law.
6. Data Retention
We retain your personal data for as long as your account is active. If you close your account, we will delete your personal profile within 30 days. Order records, invoices, and financial data are retained for 7 years as required by HMRC rules. Anonymised analytics data may be retained indefinitely.
7. Your Rights
Under UK GDPR you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate data.
- Erasure: Ask us to delete your data (subject to legal retention requirements).
- Restriction: Ask us to restrict processing in certain circumstances.
- Portability: Receive your data in a machine-readable format.
- Object: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@deviceresale.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use only essential session cookies required to keep you logged in and maintain your cart. We do not use advertising or tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.
9. Security
We take appropriate technical and organisational measures to protect your data, including password hashing, HTTPS encryption, and restricted database access. No method of transmission over the internet is 100% secure, but we take commercially reasonable steps to protect your information.
For any privacy-related questions or to exercise your rights, contact us at privacy@deviceresale.co.uk or via our contact page.