Steadrock Orders
Privacy policy
Version 2026-11. This explains what personal information Steadrock Orders keeps, why, and what you can do about it.
Who we are
Steadrock System Ltd, a company registered in England and Wales (company number 17432189), registered office 3 Hadrian Way, BH21 3XF, UK. We decide how the information on this site is used, so we are the "controller" under the UK GDPR. Questions or requests: orders@steadrock.co.uk.
What we keep, why, and for how long
| Information | Why we keep it | How long |
|---|---|---|
| Your account: name, work email, language, how you sign in (passkey, authenticator app or password), when you last signed in, and which terms you agreed to. | To give you access to your organisation's orders and downloads, and to keep that access secure. | While your account is open. Removing someone ends their access at once; the account record stays so the audit trail still makes sense. |
| Access requests: company, contact name, email, country and your message. | To decide whether to open an account for your organisation. | Declined requests for one year. Sign-ups that are never confirmed for seven days. |
| Your organisation: company details, delivery addresses with a contact name and phone number, and an accounts contact. | To deliver orders and send invoices. | While you are a distributor. |
| Orders and units: what was ordered, by whom, what was shipped, serial numbers, quality checks and returns. | To fulfil orders, support the products in the field and meet our traceability and legal duties. | Ten years after the record is closed. |
| Firmware and security records: releases you downloaded or were told about, and security notices sent to you. | To keep products supportable and to meet product security law (including the Cyber Resilience Act). | Ten years, or until the end of support if later. |
| Change history: who changed what, and when. | To investigate problems and keep the system trustworthy. | One year. |
| Emails we sent you, and whether they were delivered. | To show what you were told, and to fix delivery problems. | Two years. |
| Server logs: requests and errors, which can include IP addresses. | To keep the service working and secure. | Up to 31 days. |
We use this information because it is needed to run the account your organisation asked for, and because we have a legitimate interest in running a secure service and keeping records of what we sold. We do not sell it and we do not use it for advertising.
Who else handles it
- Scaleway hosts the site, database, files, logs and the email we send. Hosting is in the Netherlands (Amsterdam); email is sent from France (Paris).
- Xero holds our accounting records. We share your organisation's name and accounts contact so invoices reach you.
- DHL receives the delivery address, contact name and phone number for shipments, so the parcel can be delivered.
Each provider acts for us under its own terms. We share only what the task needs, and we may also share information where the law requires it.
Cookies
We use only the cookies that sign you in, keep the site secure and remember your language. There is no advertising or analytics tracking, so there is no cookie banner to dismiss.
Your rights
You can ask us to show you what we hold about you, correct it, delete it, restrict how we use it, or give it to you in a usable form, and you can object to how we use it. Some records must be kept for the periods above, and we will say so if that applies. Email orders@steadrock.co.uk and we will reply within one month. If you are not happy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If this policy changes, the version above changes and we ask users to agree again the next time they sign in.