The short version
- A single laptop, a single spreadsheet, a single account is a genuine single point of failure - not a dramatic risk, just an ordinary one that eventually catches almost everyone who never plans around it.
- Three things actually matter for a dropshipping shop specifically: financial records (kept for the length of time HMRC actually requires), supplier agreements and pricing history, and order records for anything still within a return or dispute window.
- The simple, long-standing rule worth following is "3-2-1" - three copies of anything that matters, on two different kinds of storage, with one of those copies kept somewhere other than the main workspace.
- eBay and most other platforms are not backing up a seller's own business records for them - they keep what they need for their own purposes, on their own schedule, not necessarily what a seller would need to reconstruct a tax year from scratch.
- None of this needs to be complicated. A genuinely adequate system takes under an hour to set up and almost no ongoing effort once it exists.
Why this is worth taking seriously before it ever becomes a problem
Nobody plans to lose a year of financial records. It happens through entirely ordinary events: a laptop's hard drive failing, an account getting locked out with no immediate way back in, a spreadsheet file quietly corrupting without anyone noticing for weeks, a phone lost with the only copy of a supplier's written agreement on it. None of these require anything unusual to happen - they are the normal failure modes of ordinary equipment and ordinary software, and the only thing standing between an inconvenience and a genuine crisis is whether a second copy exists somewhere else.
What actually needs backing up for a dropshipping shop specifically
- Financial records - sales, costs, expenses, anything that goes into a tax return - kept for the full period GOV.UK's own guidance requires: at least 5 years after the 31 January submission deadline for the relevant tax year.
- Supplier agreements and pricing history - written confirmation of terms, minimum order quantities, anything a supplier has stated in writing about returns or dispatch times, which is exactly the kind of evidence worth having if a disagreement ever needs resolving months later.
- Order records still within a live window - anything a buyer could still return, dispute, or raise a case about, which needs to be genuinely retrievable, not archived somewhere that takes a day to dig back out.
Everything else - draft product descriptions, half-finished research, general notes - is convenient to keep but rarely catastrophic to lose. The three categories above are the ones actually worth deliberate, planned protection.
The simple rule worth actually following: 3-2-1
A long-standing, genuinely simple principle covers almost every ordinary failure mode: keep three copies of anything that matters, store them across two different kinds of storage (not just two files on the same hard drive), and keep at least one of those copies somewhere physically or logically separate from the main workspace - a different device, a cloud account, an external drive kept elsewhere. This single habit defeats the vast majority of realistic ways records actually get lost: a laptop failing does not touch a cloud copy; a cloud account issue does not touch a local external drive; a single corrupted file does not take the other two genuinely separate copies down with it.
None of this requires anything sophisticated. A spreadsheet or exported records saved to a cloud storage service, plus an occasional copy onto a separate external drive, already satisfies the principle properly for most a small shop's actual needs.
A separate, longer window worth knowing if a return is ever filed very late
Checked 27 September 2026, directly against the same GOV.UK guidance: the standard 5-year figure is not the only retention rule worth knowing - if a tax return is ever sent more than 4 years after its original deadline, the records for that year must instead be kept for 15 months from the date the return was actually sent, regardless of how that compares to the standard 5-year rule. This is worth knowing specifically because a genuinely late return does not shorten the retention obligation to whatever remains of the original 5 years - it resets the clock against the actual filing date instead, which can mean holding onto records for considerably longer than the standard rule alone would suggest.
What HMRC's own guidance says if records are ever genuinely lost despite every precaution
Worth knowing directly, since this piece is entirely about preventing exactly this outcome: GOV.UK's own guidance is explicit about what to do if records are lost, stolen or destroyed despite everything - a taxpayer unable to replace them must do their best to provide figures, using clearly labelled estimated figures where the actual numbers cannot be recovered, or provisional figures where a genuine, temporary estimate will later be replaced with real numbers once available. This is worth knowing as a genuine, honest fallback rather than a reason to skip the backup discipline covered throughout this piece - HMRC's own process assumes good faith when records are genuinely, unavoidably lost, but it is a considerably worse and more stressful position to be in than simply having the real numbers backed up and genuinely ready in the first place.
What this actually looks like when it goes wrong
A seller's laptop dies without warning three months before a Self Assessment deadline. The spreadsheet tracking every cost for the tax year lived only on that machine, never copied anywhere else. Rebuilding it means going back through bank statements, supplier order confirmations buried in an email inbox, and memory, for months of transactions that were once a few clicks away in an organised sheet. Some of it is recoverable with real effort. Some of it - a supplier's exact wording on a returns policy, mentioned once in a message that has since been deleted, never quoted anywhere else - is simply gone. None of this happened because the seller was careless in any obvious way. It happened because a single copy, on a single machine, was quietly treated as good enough until the day it very suddenly was not.
A related risk worth covering in the same routine: losing access, not just losing files
Backing up files solves half the problem. The other half is losing access to an account itself - a password forgotten with no recovery method set up properly, a two-factor authentication app reinstalled on a new phone with the old recovery codes never saved anywhere. A password manager, and a habit of actually saving two-factor recovery codes somewhere safe the moment an account is set up, belongs in the same conversation as backing up files - both are about not discovering, at the worst possible moment, that the only way back into something important was never actually secured properly in the first place.
What eBay and other platforms are not actually doing for you
It is tempting to assume a platform is quietly keeping everything safe on a seller's behalf - eBay, a payment processor, whatever software runs the shop. In practice, each of these keeps what it needs for its own purposes, on its own retention schedule, not necessarily structured or retained the way a seller would actually need it if reconstructing a specific tax year or resolving an old dispute from scratch. Order history on eBay's own side is not automatically a complete financial record; a payment processor's transaction log is not automatically a proper set of business accounts. Treating any platform as an implicit backup, without ever actually confirming what it keeps and for how long, is the single most common assumption behind a seller discovering too late that a record they needed no longer exists anywhere retrievable.
Why testing a restore matters more than the backup itself
Checked 28 September 2026: a genuinely common failure mode worth naming directly is a backup that technically exists but was never actually verified to work - a cloud sync that silently stopped running weeks ago, an external drive with a corrupted file system nobody noticed because nothing was ever restored from it, a scheduled copy job that quietly failed without any visible error. A backup nobody has ever tried to actually restore from is, in a genuine practical sense, indistinguishable from no backup at all until the exact moment it's actually needed - which is precisely the worst possible moment to discover it doesn't work. Setting a simple, recurring reminder to actually open a backed-up file from the secondary location, every few months, and confirm it opens correctly and contains what it should, closes this specific, easily-overlooked gap for the cost of a few minutes.
A routine that genuinely takes under an hour to set up
- Pick one cloud storage service and put financial records and supplier agreements into it, in folders organised by tax year.
- Buy one inexpensive external drive and copy the same folders onto it every month or two - a recurring reminder is enough; it does not need to be daily.
- Export anything genuinely important from a platform's own system periodically, rather than assuming it will always be reachable there in exactly the form needed later.
- Test recovering a file at least once, from wherever the second or third copy lives - a backup that has never actually been opened is a hope, not a genuine safety net.
Where Sellhelm actually fits
Sellhelm keeps its own database of orders, products and finances on a seller's own computer, and its Finances page exports the full year's figures as a genuine, portable file whenever needed - the kind of file that belongs in the routine above, not left as the only copy sitting in one place. The discipline of actually running that routine regularly, and checking a backup can genuinely be restored from, stays entirely the seller's own habit to build.
Questions people ask
What business records does a UK dropshipper actually need to back up?
Financial records (kept for the period HMRC requires), supplier agreements and pricing history, and order records for anything still within a return or dispute window - everything else is convenient to keep but rarely critical.
What is the 3-2-1 backup rule?
Three copies of anything that matters, stored across two different kinds of storage, with at least one copy kept somewhere separate from the main workspace - a simple habit that defeats most ordinary ways records actually get lost.
Does eBay back up my business records for me?
Not in the way a seller would need for their own accounts or disputes. eBay keeps what it needs for its own purposes, on its own schedule - it is not a substitute for a seller’s own backed-up financial records and agreements.
How often should I back up my business records?
Financial records and supplier agreements are worth backing up whenever they change meaningfully - for most small shops, checking and copying everything across every month or two is enough, provided it is actually done consistently.
What else should I protect besides files themselves?
Access to the accounts those files live in - a password manager and properly saved two-factor recovery codes matter just as much as the backup itself, since losing access to an account can be just as costly as losing a file.