Trust

Security

Last updated 12 August 2026

Your business data is the most valuable thing you'll trust us with, so security is built into axl from the start, not bolted on later.

Read-only by design

axl Recover connects to your B&Q Marketplace account with read-only access, using your own credentials. It only reads the order-level data needed to surface potentially eligible orders (order numbers, items, prices and tracking status), never your customers' personal data, and you can disconnect it at any time.

Encryption

All traffic to and from axl is encrypted in transit with TLS (HTTPS), and data we hold is encrypted at rest by our infrastructure providers.

Secure, resilient hosting

The site and its data run on Cloudflare's global network, with DDoS protection, automatic backups and infrastructure held in audited, secure data centres. Every third-party provider we rely on, and what reaches each, is listed at axl.co.uk/subprocessors.

Payments

Card payments are handled by Stripe. We do not see or store your full card details.

Reporting a vulnerability

If you believe you've found a security issue, please tell us at support@axl.co.uk. We welcome responsible disclosure and ask that you give us a reasonable chance to fix an issue before sharing it publicly.