Privacy notice

Last updated: 21 July 2026

This notice explains how PrintShop3D collects and uses personal information when you visit printshop3d.co.uk, create an account, place or receive an order or gift card, join a subscription, contact us, use a customer feature, subscribe to marketing, or buy from us through a connected marketplace.

1. Who we are

PrintShop3D is operated by Merr Digital LTD, a company registered in England and Wales under company number 17320278. Its registered office is 66 Paul Street, London, England, EC2A 4NA, United Kingdom.

Merr Digital LTD is the controller of the personal information described in this notice. You can contact us at:

• Email: [email protected]
• Contact form: https://printshop3d.co.uk/contact
• Post: 66 Paul Street, London, England, EC2A 4NA, United Kingdom

2. Information we collect

Depending on how you use the shop, we may collect:

• Account and security information: your name, email address, email-verification status, password hash, passkey details, two-factor authentication settings, account status and sign-in or session records. We do not store your password in readable form.
• Order and delivery information: your name, email address, telephone number, billing and delivery addresses, products and options ordered, prices, discounts, gift-card and loyalty use, order status, carrier and tracking details, returns, refunds and invoices.
• Payment information: Stripe checkout, payment, refund, customer, invoice and subscription references; payment status; amount; currency; and limited fraud or reconciliation information. Stripe processes the payment-card details and does not give us the complete card number.
• Gift-card information: purchaser, sender and recipient names and email addresses, a personal message, card value, protected code, balance and redemption history.
• Subscription information: the plan, price and contents, billing interval, status and period dates, protected Stripe references, delivery address and renewal-order history.
• Shopping and account activity: basket and saved items, address book, wishlist, comparisons, recently viewed products, product alerts, reviews, questions, rewards, referrals and preferences you choose to save.
• Messages and contributions: contact and support messages, return descriptions, product reviews and questions, blog comments, and our replies. Sensitive support and return fields are protected at rest.
• Marketing information: email address, optional name, when and how you subscribed, protected consent evidence, unsubscribe status, selected campaigns and delivery status.
• Technical and security information: session identifiers, IP address, browser or user-agent information, timestamps, request and security events, rate-limit information and diagnostic error or performance data.
• Marketplace information: where a connected eBay or Etsy channel is used, buyer contact and delivery details, order information and marketplace identifiers needed to fulfil, support, reconcile or refund the order.
• Information about another person: for example, a gift-card recipient or a person receiving an order at a different address.

Please do not send passwords, full payment-card numbers, API keys or unnecessary sensitive information in a message, review, question or comment.

3. Where information comes from

We collect information:

• directly from you when you use the website or contact us;
• from Stripe when it confirms a payment, refund or subscription event;
• from eBay or Etsy where you buy through a connected marketplace;
• from delivery providers where tracking information is available;
• automatically from your browser, device and use of the website; and
• from another person when they arrange a gift card or delivery for you.

If you provide another person's details, please make sure you are entitled to do so and that they know we will use the details for that purpose.

4. How and why we use information

Purpose	Lawful basis
Provide accounts, baskets, checkout, orders, delivery, gift cards, subscriptions, returns and support	Taking steps at your request and performing our contract with you
Manufacture, quality-check, deliver, track, return and refund goods	Contract and legal obligations concerning consumer rights and accounting
Process payments, prevent fraud and reconcile refunds	Contract, legal obligations and our legitimate interests in protecting customers and the business
Keep transaction, invoice, refund and tax records	Legal obligation and establishing, exercising or defending legal claims
Protect accounts and the website and investigate misuse	Our legitimate interests in security, fraud prevention and service integrity; legal obligations and legal claims where applicable
Send service messages about orders, accounts, delivery, returns, support or safety	Contract, legal obligation and our legitimate interest in servicing the relationship; these are not marketing messages
Send product news and offers	Consent, which you can withdraw at any time
Operate reviews, questions, comments, wishlists, alerts, rewards, referrals and recommendations	Contract and our legitimate interests in providing requested features and useful customer content
Produce privacy-minimal storefront totals and improve the shop	Our legitimate interests in understanding demand and improving the service
Diagnose faults and monitor performance	Our legitimate interests in operating a reliable and secure service

Where we rely on legitimate interests, we consider the need for the processing, its likely impact and the safeguards available. You may ask us for more information about that assessment.

We do not use personal information to make decisions about you based solely on automated processing that produce legal or similarly significant effects. Stripe may perform its own payment and fraud checks under its privacy information.

5. Marketing

We send product news and offers only while our records show a valid marketing permission. Service messages about an order, account, subscription, return, support request or product-safety matter are not marketing.

Every marketing email contains an unsubscribe method. You can also contact [email protected]. Withdrawing consent does not affect processing that took place before withdrawal. We do not buy marketing lists or sell your details to advertisers.

6. Cookies and similar technologies

The website uses first-party session and security cookies. They protect forms and accounts, keep you signed in, maintain a basket, remember checkout state and provide other features you request. Guest recently viewed and comparison choices may also use first-party session storage.

Our general storefront insight counters are recorded on the server as identity-free daily totals. They do not use an analytics cookie or third-party browser tag and do not contain a visitor identifier, account, IP address, user agent, search term, URL or referrer.

We do not currently place third-party advertising cookies. If a non-essential browser technology is introduced, we will provide the information and choice required by law before using it.

You can block or delete cookies in your browser, but account, security, basket and checkout functions may then stop working.

7. Who we share information with

We share only what is reasonably necessary with:

• Stripe, for checkout, payment, refunds, fraud checks and recurring billing;
• our website hosting, database and encrypted-backup providers;
• our email delivery provider, including Lettermint where configured, for service and consented marketing messages;
• Sentry, if production error or performance monitoring is enabled;
• delivery and tracking providers used for your order;
• eBay or Etsy where needed to operate a connected marketplace order;
• professional advisers, insurers, accountants, auditors or a purchaser of the business under appropriate confidentiality duties; and
• courts, regulators, law-enforcement bodies and public authorities where disclosure is required or permitted by law.

We do not sell or rent personal information.

8. International transfers

Some providers may process information outside the United Kingdom. Where UK data-protection law treats this as a restricted transfer, we use an appropriate safeguard, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework where applicable, or approved contractual clauses and the UK addendum.

Contact us if you would like more information about a safeguard relevant to your information.

9. How long we keep information

We keep information only for as long as needed for the purpose collected, legal obligations, security and legal claims. In particular:

• order, payment, invoice, refund and associated accounting records are normally kept for up to seven years;
• account information is kept while the account is active and then deleted or anonymised, except where linked evidence must be retained;
• saved shopping features are kept until you remove them, close the account or they are no longer needed to provide the feature;
• support, return, review, question and complaint records are kept while needed to provide the service, moderate content or deal with a dispute or claim;
• active marketing details are kept until you unsubscribe or we otherwise stop using them, with minimal suppression evidence retained where needed to honour your choice;
• identity-free storefront daily totals are normally kept for 400 days;
• application logs and failed-job diagnostics are normally kept for short operational periods, subject to a longer security or incident hold where necessary;
• uploaded files and technical diagnostics are kept only while needed for the request, production, security, troubleshooting or a related claim; and
• deleted live information may remain in a protected backup until that backup is replaced.

A record may be kept for longer if it is relevant to an active dispute, fraud investigation, regulatory enquiry or legal claim.

10. Account closure and data export

A verified customer can use Settings → Privacy & data to download a machine-readable copy of account data after confirming their password. The temporary export file is deleted after delivery.

The same area can close a normal customer account. Closure removes sign-in credentials and optional saved shopping information and anonymises the profile and eligible public attribution. Transaction, refund, return, gift-card, reward, support, security and legal evidence may remain where it is still needed under the retention rules or law. A live subscription must first be resolved so recurring billing does not continue against a closed account.

These tools do not replace your other data-protection rights. Contact us if your request needs individual assessment.

11. Security

We use measures designed to protect personal information, including HTTPS, password hashing, access controls, protected sensitive fields and backups, signed provider webhooks, staff permissions, auditing and data minimisation. No internet service can guarantee absolute security. Please use a unique password and tell us promptly if you suspect misuse.

12. Children

The shop may sell products used by children, but customer accounts, orders, gift-card purchases, subscriptions and marketing sign-ups are intended for people aged 18 or over. A parent or guardian should place an order for a child.

13. Your rights

Depending on the circumstances, you may have the right to:

• be informed about how we use your information;
• request access to it;
• correct inaccurate or incomplete information;
• request erasure or restriction;
• receive information you provided in a portable form;
• object to processing based on legitimate interests;
• object at any time to direct marketing; and
• withdraw consent where we rely on it.

These rights are not absolute. For example, we may need to retain transaction information to meet a legal obligation or handle a claim. We may ask for information needed to verify your identity. We normally respond without undue delay and within one month, subject to any lawful extension for a complex request.

To make a request, email [email protected] or use the contact form with the subject Data protection request.

14. Data-protection complaints

If you are concerned about how we use your information, email [email protected] or use the contact form with the subject Data protection complaint. We will acknowledge a data-protection complaint within 30 days, investigate it without undue delay, keep you informed and tell you the outcome.

You may also complain to the Information Commissioner's Office:

• Website: https://ico.org.uk/make-a-complaint/
• Telephone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

You do not have to contact us before contacting the ICO.

15. Changes to this notice

We may update this notice when our services, providers or the law change. We will post the latest version here with its revision date and provide any additional notice or choice required for a material change.