This policy explains what personal data GRP 3D Limited collects through grp3d.shop, why we collect it, and what rights you have. We are the data controller for that information.
Who we are
GRP 3D Limited, Unit 23 Merton Buildings, Glandwr Industrial Estate, Aberbeeg, NP13 2LN, United Kingdom. Email hello@grp3d.shop or call 01495 820215.
What we collect
- Order details — name, email, phone, billing and delivery address, and items ordered.
- Payment details — handled entirely by our checkout provider. We never see or store your full card number.
- Files you upload — STL, image and artwork files submitted for quotes or custom printing, plus any order notes you add.
- Enquiries — messages sent by email, phone or the website chat widget.
- Trade accounts — the contact details and account settings of approved business customers who sign in to our trade portal.
- Usage data — pages viewed, referring site, approximate location (country/region from your IP), device, browser and operating system.
Why we use it
- To take payment, produce your order and deliver it (performance of a contract).
- To answer questions and provide quotes (legitimate interests).
- To send stock or order notifications you asked for (consent or contract).
- To keep accounting and tax records (legal obligation).
- To understand how the site is used, keep it secure and improve it (legitimate interests).
We do not sell your personal data, and we do not use your uploaded designs for anything other than producing your order.
Cookies and analytics
We use a small number of cookies and similar identifiers that are needed for the site to work — remembering your basket and keeping you signed in to a trade account. We also run our own privacy-friendly analytics, which records page views along with a randomly generated visitor identifier and coarse location, device and browser information. This is not used to build advertising profiles.
Who we share it with
We share data only with service providers that help us run the shop: our e-commerce and payment platform, our email delivery provider, our hosting and database provider, our chat provider, and couriers who deliver your order. Each processes data on our instructions. We may also disclose information where the law requires it.
Some providers operate outside the UK. Where that happens, transfers are covered by UK adequacy regulations or standard contractual clauses.
How long we keep it
Order and invoice records are kept for six years to satisfy UK tax law. Quote requests and uploaded files are kept for up to 12 months unless they form part of an order. Analytics records are kept for up to 24 months. Trade account data is kept while the account is active and for six years after the last order.
Your rights
You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on consent, you can withdraw it at any time — every marketing email has an unsubscribe link. Email hello@grp3d.shop and we will respond within one month.
If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last revised.
