Privacy Policy

1. Data controller

The controller of your personal data is 3Dprintup SIA, reg. No. 40203299796, Rūpniecības iela 3, Liepāja, LV-3401, Latvia.

For any privacy question or to exercise your rights, contact us at info@3dprintup.eu or tel. +371 20 408 508.

2. What data we collect

Identity and contact data: name, email address, telephone number, delivery and billing address, and (for business customers) company name and VAT number.

Order and transaction data: products ordered, order value, invoices, delivery method and chosen pickup point, and order history.

Payment data: payments are handled by our payment provider (Stripe). We receive confirmation of payment and limited transaction metadata, but we do not receive or store your full card number.

Custom-work data: design files, drawings, images and specifications you upload or send for quotes and custom orders.

Communications: messages, quote requests and support correspondence.

Technical data: a strictly necessary session cookie and basic server logs (e.g. IP address) needed to operate and secure the site.

3. Why we use it and our legal bases

To perform our contract with you — process and deliver orders, handle quotes and custom work, provide support and manage returns (Art. 6(1)(b) GDPR).

To comply with legal obligations — accounting, tax and invoicing requirements (Art. 6(1)(c) GDPR).

For our legitimate interests — to secure the site, prevent fraud and abuse, and keep records of our business (Art. 6(1)(f) GDPR).

With your consent — where we ask for it separately, e.g. optional marketing; you may withdraw consent at any time (Art. 6(1)(a) GDPR).

4. Who we share it with

We share personal data only with providers who process it on our behalf or as needed to fulfil your order, under appropriate safeguards:

Payment processing: Stripe. Delivery: DPD and Latvijas Pasts (name, address/pickup point, phone and email for delivery coordination). Email and IT: our email/hosting providers. Accounting: our bank (AS Citadele banka) and accountants for invoicing and bookkeeping. Analytics (only if you consent): Google Analytics (Google Ireland Limited).

We may also disclose data where required by law or to establish, exercise or defend legal claims. We never sell your personal data.

5. International transfers

Most processing takes place within the EU/EEA. Where a provider (such as Stripe) processes data outside the EEA, the transfer is protected by an adequacy decision or by Standard Contractual Clauses approved by the European Commission.

6. How long we keep it

We keep order, invoicing and accounting records for as long as required by Latvian tax and accounting law (generally up to 5 years, and longer where a longer statutory period applies). Custom-work files are kept only as long as needed to fulfil and support your order and any warranty, then deleted or anonymised. Account data is kept while your account is active.

7. Your rights

Under the GDPR you have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent where processing is based on consent. To exercise any right, email us at info@3dprintup.eu. We respond within the statutory time limits.

If you believe your rights have been infringed, you may lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija) (www.dvi.gov.lv), or the supervisory authority in your EU country of residence.

8. Cookies and analytics

Strictly necessary cookies: we always use a small number of essential cookies required to run the site — for example to keep your session and cart working and to keep the site secure. These do not track you and, under EU law, do not require consent.

Analytics (with your consent): if you accept analytics in our cookie banner, we use Google Analytics (provided by Google Ireland Limited) to understand how visitors use the site — for example which pages are viewed — so we can improve it. Google Analytics sets its own cookies and processes usage data with IP anonymisation enabled. It is loaded only after you grant consent, and never before.

You can accept or decline analytics when you first visit, and change your choice at any time via the “Cookie settings” link in the footer; declining does not affect your ability to shop. For information on how Google processes data, see Google's privacy policy. Withdrawing consent stops further analytics collection.

Privacy-friendly first-party analytics: we also keep our own aggregate visit statistics (page counts and approximate visitor numbers) to run our business. This uses no cookies and creates no personal profile — we do not store your IP address; instead a rotating, anonymised daily value is used purely to estimate visitor counts and cannot identify you or track you across days or sites. Because it is anonymous and cookieless, it does not require consent.

9. Automated decisions and profiling

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

10. Children

Our website and products are directed at adults. We do not knowingly collect personal data from children under 16.

11. Security and changes

We protect personal data and uploaded files with access controls and encryption in transit; uploaded quote/custom files are private and not publicly accessible. No method of transmission is completely secure, but we take appropriate technical and organisational measures.

We may update this Policy from time to time; the “last updated” date shows the current version.