Privacy policy

Who we are

3dandfun is a small family business run by Scott and Louise in Lincoln, England. We're responsible for the personal information you give us through 3dandfun.com. If you have a question about your data, or want to use any of your rights below, get in touch through our contact page.

What we collect and why

When you place an order

We collect your name, email address, delivery address, phone number if you give one, what you ordered, and any notes or personalisation you add. We use this to make your order, send it to you, and contact you about it. Our legal basis is that we need it to carry out our contract with you.

Payments are taken by Stripe. Your card details go straight to Stripe and never reach us or our website.

We keep order records for six years, because UK tax law requires it.

Logos and artwork you upload

If you upload a logo or artwork for a custom product, we store it securely so it can be sent to us with your order. It's deleted from our website as soon as your order email reaches us, and in any case within 7 days. We keep a copy with your order only for as long as we need it to make your product and handle any remakes. Please only upload artwork you have the right to use.

When you use our Cover Designer

The Cover Designer works in your browser, so your logo isn't sent to us while you design. If you press "Download your design", we keep a copy of the finished picture, which mic it's for, and roughly where it was made (town, region and country, worked out by Cloudflare; we don't keep your IP address). If you ask us to email you a quote, we keep your email address, your design choices, the picture, the logo file you uploaded and the quote we sent. We use these to see which designs people make, to follow up on your quote and to make your cover if you order. Our legal basis is our legitimate interest in running and improving the shop, and taking the steps you ask for before an order. Everything is deleted after 30 days.

When you contact us

If you use our contact form, we collect your name, email address and message so we can reply. We keep these messages for up to two years, unless they relate to an order. The form uses Cloudflare Turnstile to check you're a real person and not a spam bot.

Cookies and your browser

We don't use advertising cookies. When you first visit, a small notice asks whether you're happy for us to use Google Analytics. If you press Accept, Google Analytics sets cookies in your browser (such as _ga) and counts which pages are visited, using an anonymised IP address, browser type and rough location. If you press No thanks, nothing is loaded from Google and the site works just the same. We remember your choice in your browser; clear the site's data in your browser settings to be asked again. Your basket and chosen delivery country are saved in your own browser so they're still there when you come back. That information stays on your device and isn't sent to us until you check out. Stripe and Cloudflare may set cookies needed to take payments safely and protect the site from fraud and abuse.

Who we share it with

We never sell your information. We only share it with the services we need to run the shop:

• Stripe processes payments and helps prevent fraud.
• Resend sends our emails to you, such as order updates and Cover Designer quotes.
• Cloudflare hosts our website, protects it from spam and attacks, and delivers our order and contact emails.
• Our delivery carriers get your name and address so they can deliver your parcel.
• Google Fonts serves the fonts on our pages, which means your browser asks Google's servers for them.
• Google Analytics counts visits to our pages, but only if you press Accept (see cookies above).
• Google Customer Reviews: after you order, our thank-you page shows Google's offer to email you a short survey about it. To do that it passes Google your email address, order number, country and expected delivery date, and Google only emails you if you say yes.
• Etsy hosts some of our product photos, so your browser loads them from Etsy's servers.

Some of these companies process data outside the UK, including in the United States. Where they do, they use legal safeguards approved under UK law, such as the UK International Data Transfer Addendum.

Your rights

Under UK data protection law you can ask us for a copy of the information we hold about you, and ask us to correct it, delete it, restrict how we use it, or send it to you in a portable format. You can also object to how we use it. We'll reply within one month. Just ask through our contact page.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office. We'd appreciate the chance to put it right first.

Changes

If we change this policy we'll update it here and change the date at the top.