LEGAL

Privacy Policy

What we collect, why, and what we will never do with it. Questions: info@sdshq.com.

DRAFT · PENDING REVIEW BY COUNSEL — NOT YET IN FORCE

1. What we collect

  • Account data — name, work email, company, and billing details for paid plans.
  • Your library — the SDSs and related documents you upload or author.
  • Usage data — access logs (which sheets were viewed and when), which also power your compliance records.

Workers reading sheets through portal links or QR codes are not required to identify themselves, and we do not build profiles of them.

2. How we use it

To run the service, keep your library available, maintain access records, bill paid plans, and respond when you write to us. We do not sell personal data and we do not use your library to advertise to anyone.

3. Sharing

We share data only with processors needed to run the service (hosting, payments, email), under contracts limiting use to our instructions — and when the law requires it.

4. Retention

Your library and access logs are kept as long as your account is active — access records often have their own regulatory retention requirements, which remain your responsibility. After cancellation, content is exportable for 30 days, then deleted from active systems.

5. Security

Data is encrypted in transit and at rest. Access to production systems is limited and logged.

6. Your rights

You can access, correct, export, or delete your data. Write to info@sdshq.com and we'll act on it — no forms, no runaround.

7. Contact

SDS HQ · info@sdshq.com