We only collect what we need to make your order, get it to you and keep honest records. We don't sell your data, we don't use advertising trackers and we don't run analytics cookies.
Who we are
3D4U Prints is the data controller for the personal data described here. You can reach us about anything in this policy by email.
- Trading name: 3D4U Prints
- Email: help@3d4u.site
- Postal address: c/o King's College School, Southside, Wimbledon Common, London SW19 4TT
What we collect
When you place a pre-order
- Your name and email address.
- What you ordered: products, colours, quantities and prices.
- Any personalisation you give us, such as a name to print or, for a photo night light, the photo you upload. Your browser redraws the photo before uploading it, which removes hidden details such as where and when it was taken. Photos are kept in private storage that only we can open.
- Your order number, order status and the payment reference SumUp gives us.
- Only if you chose Accept all on our cookie banner and came from one of our tagged links (in a newsletter, a post or on a flyer): the name of that link, such as "friends, newsletter". It tells us which promotion worked and nothing else about you.
You pay on SumUp's secure payment page. Your card details go straight to SumUp; we never see or store them.
If you create an account
An account is optional; you can check out without one. If you create one, we keep your name, email address and a securely hashed version of your password (we can never see the password itself), and we link your orders to your account so you can see them in one place.
If you're a teacher choosing a wishlist gift
Your title and surname, the gift and colour you chose, any note you add, and the date and time you agreed to your name being shown. We only show your title and surname alongside your gift: on our Teacher Wishlist, on the gift's own page, and on the order of the person who buys it. Neither page is listed in search engines.
If you join our mailing list
Your email address, the date you signed up, the wording you agreed to, which link or flyer brought you (if any), your discount code and whether you've used it.
When you email us
Your email address, your message and anything you choose to include.
When you use the site
- Your basket is saved in your own browser so it survives a page refresh. It holds product names and quantities only, and it stays on your device until you check out.
- Essential cookies link your order to your device and, if you log in, keep you signed in. Details are in our cookies policy.
- Our hosting provider keeps short-lived technical logs (such as IP address and browser type) to keep the site running and secure.
- We count visits with Vercel Web Analytics. It uses no cookies and saves nothing on your device. It records which page you looked at, the site or tagged link you came from, your country, and your browser and device type, with a visitor number that changes every day, so we can't tell who you are.
Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Take payment, make your order and hand it over at collection | Contract: we need it to do what you asked |
| Email your order confirmation and any updates about your order | Contract |
| Run your account, if you create one, including sign-in and password reset emails | Contract |
| Show a teacher's name next to the gift they chose on the Teacher Wishlist | Consent: you can withdraw it at any time by emailing us, and we'll take your name down |
| Send you news and offers, including your discount code, if you join our mailing list | Consent: unsubscribe at any time with the link in every email, or by emailing us |
| Note which of our promotion links led to an order | Consent: given with Accept all on the cookie banner. Choose Reject all in Cookie settings to stop it |
| Count visits to see which pages and promotions work | Legitimate interests: improving the shop. No cookies, and we can't tell who you are |
| Keep sales records for tax and accounts | Legal obligation |
| Answer your questions and handle refunds or complaints | Legitimate interests: looking after our customers |
| Keep the site secure and stop fraud or misuse | Legitimate interests: protecting you and us |
We only send news and offers to people who have signed up to our mailing list themselves. Every email has a one-click unsubscribe link. Buying from us doesn't put you on the list.
Who we share it with
We use a small number of trusted services to run the shop. Each only gets what it needs to do its job.
- SumUp processes your payment. For card data SumUp acts as its own controller under its own privacy notice.
- Supabase stores order records and accounts in a database hosted in the EU (Ireland), and handles account sign-in.
- Vercel hosts the website and counts visits (see above).
- Resend sends our order and mailing-list emails.
We only share anything else if the law requires it. We never sell or rent your personal data to anyone.
Data sent outside the UK
Some of these providers are based in, or use servers in, the EU or the United States. Where your data leaves the UK, it is protected by UK adequacy regulations or by approved safeguards such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
- Photos for photo night lights: deleted automatically 30 days after you collect your order. A photo uploaded without a finished order is deleted after 2 days.
- Order details: deleted 12 months after your order, apart from the sales records we must keep for tax and accounts, which we keep only as long as the law requires.
- Your account: kept until you ask us to delete it. Email us and we'll close it and delete your login details.
- Teacher Wishlist names and choices: deleted by 31 January 2027, or sooner if you ask. If someone has bought your gift, the order record (which names the gift) is kept like any other order.
- Mailing list: kept while you're subscribed. When you unsubscribe we stop emailing you straight away; email us if you also want your address deleted.
- Emails with us: deleted 12 months after the conversation ends.
- Cookies and browser storage: each one's time is in the cookies policy. The longest is 12 months, for your cookie choice.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete your data, where we don't need to keep it by law;
- limit or stop how we use it, or object to it;
- send your data to you or another organisation in a common format.
Email help@3d4u.site and we'll reply within one month. It's free. If you're unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children
Many of our customers are families. If you're under 13, please ask a parent or guardian to place the order for you. If you think a child has given us personal data without a parent knowing, email us and we'll delete it.
Keeping it safe
Order data is only reachable through our own server, behind access controls, and only the people who run 3D4U Prints can see it. Photos are kept in private storage and are never published.
Changes to this policy
If we change how we use your data, we'll update this page and the date at the top. If a change affects an order you have already placed, we'll email you.