Privacy Policy

This policy explains what personal data we collect when you use craftmill3d.co.uk, ask us for a quote or order 3D printed parts from us, what we do with it, and the rights you have over it.

1. Who we are

CraftMill3D Ltd is registered in England and Wales, company number 17420869. Registered office: 8 Broome Cottages, Spital Heath, Dorking, RH4 1QG. We are the controller of the personal data described here.

For anything about your data, email info@craftmill3d.co.uk.

2. What we collect

• Quote requests: your name and email address, the model files or file link you send, the print settings you choose and any notes about your project. Files you add to the quote form are uploaded to us straight away so we can work out your price, even if you don't go on to send the request.
• Custom design requests: your name and email address, your project description, dimensions, any reference link and the files or images you attach.
• Your customer account: your email address and, if you add them, your name, phone number, company name, VAT number and delivery or billing address.
• Orders: what you ordered, prices, invoices, payment status, delivery details and the updates we send you about your order.
• Messages: anything you tell us when you email us.
• Technical data: your IP address and browser details, recorded in our server logs when you visit the site, and the cookies described in section 9.

We don't ask for special category data (such as health information), and we never see or store your full card details.

3. How we use it, and our lawful basis

• To quote for, make and deliver your order, invoice you and keep you updated on its progress. Lawful basis: contract, or steps you ask us to take before entering one.
• To run your customer account, including emailing you sign-in links. Lawful basis: contract.
• To keep accounting and tax records. Lawful basis: legal obligation.
• To keep the site secure, prevent abuse and fix faults. Lawful basis: our legitimate interests in running a safe, working service.

We don't sell your data, use it for advertising, or send you marketing emails unless you've asked us to.

The price shown when you upload a file is an estimate calculated automatically from your model. A person checks every quote before we confirm a price, and we don't make any decision about you by automated means alone.

4. Who we share it with

We only share what each of these needs to do its job for us:

• SwartWorks Ltd, our production partner, which prints and finishes our orders and runs the system we manage quotes and orders in.
• IONOS, which hosts this website and our email in its UK data centre.
• Google, which stores our encrypted backups in Google Drive. Backups are encrypted before they leave our server, so Google can't read them.
• Delivery companies, which receive your name, delivery address and, where needed, a phone number.
• Our bank and accountant, for payments and our accounts.
• HMRC, the police or a court, if the law requires us to.

5. Where your data is kept

Our website, database and uploaded files are kept on servers in the United Kingdom. Our encrypted backup copies in Google Drive may be stored outside the UK. Google holds them under the safeguards UK data protection law requires for international transfers, and because they're encrypted before upload, Google can't read them.

6. How long we keep it

• Files you add to the quote form but don't send: deleted within 2 days.
• Quotes and design requests that don't become an order, with their files: 12 months after we last heard from you.
• Orders and invoices, and the details on them: 6 years after the end of the financial year they belong to, as HMRC requires.
• Your customer account: until you ask us to close it. Order records are then kept for the period above.
• Server logs that record IP addresses: 14 days. Security logs, for example of blocked sign-in attempts, may be kept longer while we need them to protect the site.
• Backups: each copy is deleted after 30 days.

7. Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct anything that's wrong or incomplete;
• ask us to delete your data, unless we have to keep it (for example, invoices for HMRC);
• ask us to restrict how we use it, or object to our using it on the basis of legitimate interests;
• ask for the data you gave us in a format you can take elsewhere.

To use any of these rights, email info@craftmill3d.co.uk. It's free, and we'll reply within one month.

8. Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

9. Cookies and storage on your device

We only use what the site needs to work, so we don't ask for cookie consent:

• craftmill3d-session: keeps you signed in and remembers your progress through a form. It expires after 2 hours without use.
• XSRF-TOKEN: protects the forms on this site from being submitted by other websites. It also expires after 2 hours.
• remember_customer_…: set when you sign in to your customer account with an emailed link, so you stay signed in on that device. It lasts until you sign out, or up to 400 days.
• Your quote basket: the files, name and email address you add while building a quote are stored in your own browser until you submit or clear them. Your name and email aren't sent to us until you submit. The files are uploaded when you add them, to price them (see section 2).

We don't use analytics, advertising or tracking cookies.

10. Children

You must be 18 or over to place an order with us. We don't knowingly collect personal data from children.

11. Changes to this policy

If we change how we use your data, we'll update this page and the date at the top. If a change affects an order you've already placed, we'll tell you by email.