Privacy Policy

Last updated: September 2026

1. Overview

This Privacy Policy explains how 3DPrintMyFile collects, uses, and protects your personal data when you use our services.

By using our service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller is:

3DPrintMyFile
Email: [email protected]

If you have any questions about this policy or how we handle your data, please contact us using the details above.

3. Data We Collect

We collect the following personal data when you use our service:

  • Name
  • Email address
  • Shipping address
  • Uploaded files and associated data

We do not collect phone numbers or billing addresses directly. Note that our payment processor, Stripe, may collect billing information as part of processing your payment - please see Stripe's own privacy policy for details of what they collect and how they use it.

4. How We Use Your Data and Our Legal Basis

We use your data for the following purposes, relying on the legal bases set out below under UK GDPR:

PurposeData usedLegal basis
Generating quotesName, email, uploaded filesContract (steps taken at your request prior to entering a contract)
Processing and manufacturing ordersName, email, shipping address, uploaded filesContract (performance of our contract with you)
Arranging shipping and deliveryName, shipping addressContract
Providing customer supportName, email, order detailsContract / Legitimate interests (resolving your queries)
Improving our servicesAggregated order and website usage dataLegitimate interests (improving service quality)
Website analyticsDevice type, approximate location, pages visitedLegitimate interests (understanding and improving website performance)
Complying with legal obligations (e.g. tax, accounting)Order and payment recordsLegal obligation

We do not use your data for marketing purposes, and we do not send marketing communications unless you separately opt in to receive them. If this ever changes, we will update this policy and seek your consent where required.

5. Third-Party Processors

We use trusted third-party services to operate our business:

  • Stripe - payment processing
  • MakerCommand - order processing, file handling, and quoting
  • Royal Mail - shipping and delivery
  • Mailgun - transactional email delivery

These providers may process your data on our behalf, acting as data processors under our instructions. We only share the minimum data necessary for each provider to perform their function.

For further details on how your data is handled within MakerCommand, please refer to:

6. Data Storage & Retention

Your data is stored securely on our infrastructure and through our service providers.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. As a general guide:

  • Order and customer records (name, email, shipping address, order history): retained for 6 years from the end of the tax year in which the order was completed, in line with UK HMRC record-keeping requirements.
  • Uploaded files: retained in line with MakerCommand's data retention practices (see links above) for the purpose of order fulfilment and reprints, after which they are deleted. You may request earlier deletion of your files at any time by contacting us.
  • Website analytics data: retained for up to 12 months in aggregated/anonymised form.
  • Correspondence with customer support: retained for up to 2 years after the matter is resolved.

Where we no longer need your data for the purposes above, we will delete or anonymise it.

7. Data Sharing

We do not sell your personal data. We only share your personal data with third parties where necessary to:

  • Provide our services (e.g. sending order and file data to MakerCommand)
  • Process payments (e.g. sending payment data to Stripe)
  • Deliver orders (e.g. sending shipping details to Royal Mail)
  • Comply with a legal obligation, or respond to a lawful request from a public authority

We do not share your data with third parties for their own marketing purposes.

8. International Transfers

MakerCommand (order processing, file storage and quoting) is UK-based and UK-hosted, so no international transfer applies to the data they process for us. We use the EU region of Mailgun, and transfers from the UK to the EU are covered by the UK's adequacy regulations, so no extra safeguards are required.

Stripe may transfer data outside the UK and EU, including to the US, under mechanisms such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework. Details of Stripe's specific safeguards are available in their own privacy policy, or by contacting us.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access - request a copy of the personal data we hold about you
  • Rectification - request correction of inaccurate or incomplete data
  • Erasure - request deletion of your data, where applicable
  • Restriction - request that we restrict or pause processing of your data in certain circumstances
  • Objection - object to processing based on legitimate interests
  • Portability - request that we provide your data in a structured, commonly used, machine-readable format, or transmit it to another organisation, where technically feasible

To exercise any of these rights, contact us at [email protected]. We will respond within one month, as required by law.

Right to complain: If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO):

We'd appreciate the chance to address your concerns directly first, but you're not required to contact us before contacting the ICO.

10. Cookies

We do not use cookies. See section 11 for details of our cookieless website analytics.

11. Website Analytics

We collect basic, anonymous analytics data when you visit this website. This helps us improve our website and service so it always works best for your device type, and so we can identify and fix any issues with the website.

The data collected includes:

  • Pages visited and time spent on each page
  • Device type (mobile, tablet, or desktop)
  • Approximate location (country only - your full IP address is never stored)
  • How you arrived at the website (for example, from a search engine)

No cookies are set. A temporary session identifier is stored in your browser's session storage, which is automatically deleted when you close the tab. This data is never shared with third parties and is processed entirely on our own infrastructure.

Because this analytics activity is limited to what's strictly necessary for us to run and secure the site and does not involve tracking you across other websites or building a profile of you, it does not require separate consent under the Privacy and Electronic Communications Regulations (PECR). If we ever introduce analytics or storage that goes beyond this (for example, third-party tracking tools), we will update this policy and request your consent where required.

12. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. This includes restricting access to personal data to those who need it to perform their role, and requiring our third-party processors to maintain appropriate security standards.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to ensure your data is protected to an appropriate standard.

13. Children's Data

Our services are not directed at children, and we do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or legal requirements. Any changes will be posted on this page along with an updated "Last updated" date. We encourage you to review this page periodically.

← Back to Policies