Security & Privacy at Direct Parts Source

We collect only what we need to respond to a quote, fulfill an order, or follow up on a support request: name, business name, email address, phone number, and the message or part details you send us through the contact form. We do not sell or rent customer contact information.

Quote requests and operational data are stored in a managed Postgres database with row-level security enabled. Database access is restricted to least-privilege application roles; privileged service credentials are kept server-side and are never shipped to the browser.

The site is served over HTTPS end-to-end. Form submissions and API calls are transmitted over TLS, and internal calls between our app and the database run over encrypted connections.

Transactional notifications (quote confirmations, contact-form receipts) are sent from our notification domain. Every marketing-style email includes an unsubscribe link, and unsubscribe requests are honored automatically.

Internal tools require authentication. Administrative actions are gated by role checks enforced on the server, not in the browser. Secrets and API keys are stored in a managed secrets vault.

We retain quote and order records for as long as needed to support the customer relationship and to meet tax and recordkeeping obligations. To request access to or deletion of your data, email parts@orderdps.com.

If you believe you have found a security issue affecting OrderDPS.com, please email parts@orderdps.com with details and steps to reproduce. We will acknowledge reports promptly and work with you on a fix.