Secure Disposal Statement

This statement covers our handling of:

• Storage drives sent to us for sale (SSDs, NVMe drives, U.2/SAS server drives) — wiped before resale
• Storage drives we don't buy (HDDs, sub-128GB drives, faulty drives) — destroyed and recycled
• Non-storage components we don't buy (motherboards, GPUs, PSUs, cases) — recycled through our WEEE pipeline

Every storage drive sent to us is wiped on receipt, before any resale activity, to NIST SP 800-88 Rev. 1 Purge standard:

• SATA SSDs — ATA Security Erase or vendor cryptographic erase, verified
• NVMe drives — NVMe Format with Cryptographic Erase, verified
• U.2 / SAS enterprise drives — Sanitize command (block erase or crypto erase), verified

Verification consists of a read-back sample of unallocated sectors. A drive that fails to wipe successfully is removed from resale and physically destroyed (see Section 3).

We do not at any point read, image, copy or attempt to recover user data from drives sent to us.

Drives that cannot be wiped (faulty controller, refused commands) are physically destroyed:

• HDDs — platters degaussed and shredded
• SSDs / NVMe — chip-level shredded to particles < 10mm

Destruction is performed at our Rochdale facility under monitored conditions. Shredded media is collected by our Environment Agency-registered downstream recycler.

For every drive processed under this statement we record, at minimum:

• Receipt date and seller reference
• Drive identifier (serial number where readable)
• Method (NIST 800-88 Purge command issued / physical destruction)
• Operator
• Verification result

Trade clients receive a per-batch Certificate of Destruction by email. Individual sellers may request a certificate at info@chipflip.co.uk.

If your parcel contains items we don't buy (motherboards, GPUs, PSUs, cases, HDDs, DDR2/DDR3 RAM), we process them through our Environment Agency-registered WEEE pipeline at no cost to you:

• Pre-processed to remove residual data-bearing media (where present)
• Routed to a downstream Approved Authorised Treatment Facility (AATF)
• Waste Transfer Notes issued and retained for 2 years (EPA 1990)

Routed through WEEE channels.

• Environment Agency: registered waste carrier and IT processor
• NIST SP 800-88 Rev. 1: data destruction standard
• UK GDPR / Data Protection Act 2018: data destruction is a security measure under Article 32
• Environmental Protection Act 1990: waste documentation and duty of care
• WEEE Regulations 2013: producer-responsibility compliant treatment

For trade and ITAD clients with audit needs, we welcome scheduled site visits to inspect our destruction process and documentation. Contact info@chipflip.co.uk to arrange.