Your information should be handled with care.

1. Information we collect

Depending on how you use the website, we may collect your name, business email address, phone number, company or store name, country, store URL, marketplace or sales channel, product interests, requested quantities and the content of messages you send through enquiry, quote, sourcing or support forms.

If you place an order, we may process order numbers, selected products and variants, quantities, shipping address, destination, delivery option, price and payment status. If you submit manual-payment evidence, we may receive the transaction reference and a receipt image or PDF for review. Reseller account workflows also process account and authentication information.

To operate and protect the site, technical services may process request identifiers, security signals and rate-limiting information. Please do not submit passwords, one-time codes, full payment-card details or unrelated sensitive personal information through public forms or support messages.

2. How we use information

• Respond to product enquiries, quotes, sourcing requests, reseller applications and support tickets.
• Prepare and manage orders, confirm delivery options, arrange agreed fulfilment, and communicate changes or delays.
• Review manual-payment references and receipts and maintain payment, order and return records.
• Operate the reseller workspace, maintain service security, detect abuse, troubleshoot failures and protect stored records.
• Maintain business records, address disputes and meet legal or regulatory obligations where applicable.

3. Browser storage and access

The shopping cart uses local storage in your browser so selected products can remain in the cart while you use the site. For an order placed through public checkout, an order-access token may be stored in session storage to let that browser access the order-status workflow. Reseller sessions use an authentication cookie.

If you use a shared or public device, sign out of your reseller workspace and close the browser session when finished. Avoid sharing order-access links or tokens. Clearing local browser storage may remove your saved cart or order-access data, but it does not necessarily delete order or enquiry records held by SDB BUY.

4. When information is shared

Access to information should be limited to people who need it to respond to you, review a transaction, manage the service or perform an authorized business task. SDB BUY may share the necessary details with a carrier or service provider when necessary to deliver products purchased from SDB BUY or carry out an agreed dispatch arrangement. For dropshipping, the seller should have a valid basis to provide the recipient’s delivery details for that purpose.

The application uses MongoDB for stored business records and can send email notifications through Resend when the relevant email settings are configured. The website is hosted by a deployment provider, and uploaded payment receipts or product files may be handled by the private storage service enabled for the deployment. The precise provider configuration may vary. Service providers should process information for their assigned functions under their own applicable security and privacy obligations.

We do not need payment-card numbers or banking login credentials to verify a manual transfer. A payment receipt may contain personal or financial transaction details, so submit only the evidence requested for the relevant order.

5. Retention and security

Information is intended to be retained only for as long as reasonably needed to respond to the request, supply products or services, maintain transaction and accounting records, resolve disputes, prevent abuse and meet legal obligations. Different records may need different retention periods; a specific retention schedule should be applied by the business.

The website uses technical and access controls designed to reduce unauthorized access, misuse and data loss. No website, storage service or electronic transmission can be guaranteed completely secure. Keep your account credentials and order-access details confidential and notify SDB BUY if you suspect unauthorized access.

6. International processing and third-party websites

SDB BUY serves sellers and may work with service providers, suppliers or carriers in more than one country. Information may therefore be processed or accessed from a country different from yours, subject to the arrangements and legal requirements that apply to the service.

Links to marketplaces, seller platforms, carriers or other websites are provided for convenience. Those services operate under their own privacy notices and terms. SDB BUY does not control their data practices; review their policies before sharing information directly with them.

7. Your choices and privacy requests

Depending on the laws that apply to you, you may have rights to request access to, correction of, deletion of or a copy of personal information, or to object to or restrict some processing. These rights can be subject to legal, accounting, security and dispute-related exceptions.

To ask a privacy question or make a request, use the website’s Contact page and identify the email address associated with the enquiry or order, along with enough information for us to locate the relevant record. We may need to verify your identity or authority before disclosing or changing information. Do not include passwords or payment-card details in a privacy request.

8. Children and notice changes

The website and services are intended for business users and adults acting in a business capacity, rather than for children. If you believe a child has provided personal information, contact SDB BUY so the matter can be reviewed.

This notice may be updated when the website’s features, providers or legal requirements change. Check this page for the current notice and contact us if you need clarification.