TRUST CENTER

Security, privacy, and compliance

What we actually do to protect your data and your customers' payment details — and where to report a problem. We only publish controls that are genuinely in place.

Security

Card data never touches us

Payments run through our payment provider's hosted checkout. The provider handles all card data — we never store or even see raw card numbers.

Fixed-price checkout only

Every charge corresponds to a named SKU with a published price. We do not accept custom or typed-in payment amounts.

Fraud screening at checkout

All transactions are screened by our payment provider's fraud-prevention tooling as part of checkout.

Encryption in transit

All site traffic is served over TLS (HTTPS).

Access control

Internal systems use role-based access — staff see only the data needed for their function.

Order records

Every completed order is logged with its order ID, SKU, price, buyer email, timestamp, and delivery status.

Compliance

PCI-DSS

Card processing runs entirely on our payment provider's PCI-DSS certified infrastructure; we never ingest raw PANs.

UK GDPR

We process personal data under UK GDPR as data controller for account and order information. See the privacy summary below for your rights.

Subprocessors

Our payment provider, and our hosting provider, process data on our behalf. A full subprocessor list is available on request.

Cookie policy

We use essential cookies to keep you signed in and, with consent, analytics cookies to understand site usage. No advertising cookies.

Accessibility

We aim to meet WCAG 2.1 AA. Found a barrier? Email accessibility@smartmartglobaltrade.com.

Data retention

Account and order data is kept for as long as your account is active, plus the period required by UK tax law, then deleted or anonymized.

Business continuity & incident response

Availability

The platform targets standard commercial availability; planned maintenance is announced in advance where possible.

Incident response

Suspected security incidents are triaged immediately; affected customers are notified in line with UK GDPR breach-notification timelines.

Responsible disclosure

Found a security issue? Email security@smartmartglobaltrade.com — we ask that you don't publicly disclose before we've had a chance to respond.