Privacy Policy

1. Who We Are

PrintShop3D ("we", "us", "our") is the data controller responsible for your personal data. If you have questions about this policy or your data, please contact us at hello@printshop3d.co.uk.

2. Data We Collect

We may collect the following personal data:

• Account information: name, email address, password (encrypted)
• Order information: delivery address, billing address, order history
• Payment information: processed securely by Stripe; we do not store card details
• Communication data: messages sent via our contact form, support tickets
• Technical data: IP address, browser type, pages visited (for site functionality and security)

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders
• Manage your account
• Communicate with you about orders, deliveries, and support
• Send marketing communications (only with your consent)
• Improve our website and services
• Prevent fraud and ensure security

4. Legal Basis for Processing

We process your data based on:

• Contract: to fulfil orders and manage your account
• Legitimate interests: to improve our services and prevent fraud
• Consent: for marketing communications and non-essential cookies
• Legal obligation: to comply with tax and accounting requirements

5. Cookies

We use essential cookies to keep you logged in and manage your shopping cart. These are necessary for the site to function. We may also use analytics cookies to understand how visitors use our site, but only with your consent. You can manage your cookie preferences at any time.

6. Third-Party Services

We share data with trusted third parties only as necessary:

• Stripe: payment processing
• Royal Mail / delivery partners: order delivery
• Google Fonts: web fonts (loaded from Google servers)

We do not sell your personal data to any third party.

7. Data Retention

We retain your personal data for as long as necessary to fulfil orders, manage your account, and comply with legal obligations. Order records are kept for 7 years for tax purposes. You can request deletion of your account and data at any time.

8. Your Rights

Under UK GDPR, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Restriction: limit how we process your data
• Portability: receive your data in a portable format
• Object: opt out of marketing communications

You can exercise these rights from your account settings, including exporting your data or deleting your account. You can also contact us directly.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure password hashing, and access controls.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

11. Contact & Complaints

If you have concerns about how we handle your data, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.