Privacy policy
Effective 16 September 2026
This policy explains what personal information 3D Shop collects, why, and what we do with it. We keep it simple: we collect only what we need to make and deliver your order, and we don't sell your data.
1. What we collect
When you place an order: your name, email address, phone number, shipping or billing address, the items you ordered, and the amounts paid. Payment card details are entered directly with Stripe and never reach our servers.
When you browse: standard server logs (IP address, browser type, pages requested, timestamps) kept by our hosting provider for security and troubleshooting. Your cart is stored in your own browser's local storage and is not sent to us until you check out.
When you contact us: whatever you include in your email.
We don't offer customer accounts and we don't collect anything beyond this.
2. How we use it
- To process payment, print your order, and ship it or arrange pickup.
- To send transactional emails about your order: confirmation, ready-for-pickup, shipping and tracking, delivery, and refunds.
- To calculate sales tax and shipping rates.
- To respond to your questions and resolve problems with an order.
- To keep the site secure and comply with legal obligations, such as tax records.
We don't send marketing email, and we don't use your data for advertising or profiling.
3. Who we share it with
Only the service providers needed to fulfil your order, each of which processes data on our behalf under their own privacy terms:
- Stripe — payment processing and sales tax calculation.
- Shippo and the carrier (USPS) — shipping rates, labels and tracking. Your name, address and phone number appear on the shipping label.
- Mailgun — delivering our transactional emails to you.
- Supabase and Netlify — database and website hosting.
We may also disclose information if required by law or to protect our rights. We never sell or rent personal information.
4. Cookies and tracking
The public storefront does not set tracking or advertising cookies. Your cart and checkout form are kept in your browser's local and session storage so they survive a page reload. Stripe's checkout page sets cookies necessary for payment and fraud prevention. Our admin area uses a session cookie that only applies to staff sign-in.
5. Order status links
Emails include a private link to your order status page. Anyone with the link can view that order's status, items and delivery details, so please don't share it.
6. Retention
We keep order records for as long as needed to fulfil the order, handle any issues, and meet tax and accounting requirements (generally seven years). Server logs are retained by our hosting provider for a short period. You can ask us to delete your contact details from an order once it's complete, though we may need to keep a minimal transaction record for legal reasons.
7. Your rights
You can ask us to access, correct or delete the personal information we hold about you, or object to how we use it, by emailing hello@d-d-d.shop. We'll respond within 30 days. Depending on where you live you may have additional rights under laws such as the California Consumer Privacy Act; we honour these on request and don't discriminate against you for exercising them.
8. Security
Data is transmitted over HTTPS and stored with access controls limited to staff who need it. Payments are handled entirely by Stripe, a PCI DSS Level 1 provider. No method of transmission or storage is completely secure, so we can't guarantee absolute security, but we take reasonable steps to protect your information.
9. Children
The site isn't directed at children under 13 and we don't knowingly collect information from them. If you believe a child has provided us information, contact us and we'll delete it.
10. Changes
We may update this policy occasionally. We'll change the effective date at the top when we do. Material changes will be noted on this page.
11. Contact
Privacy questions or requests: hello@d-d-d.shop. See also our terms of service.