Privacy Policy

This privacy notice is issued by Yorkshire3D Limited (“Yorkshire3D”, “we”, “us”, “our”), a company registered in England and Wales under company number 15466679. Our registered office is at 53 Woodlea Avenue, Huddersfield, West Yorkshire HD3 4EF, United Kingdom.

Yorkshire3D Limited is the data controller for the personal data described in this notice and can be contacted at [email protected]. Our website is https://www.yorkshire3d.co.uk. Our consumer shop is operated on a separate subdomain at https://shop.yorkshire3d.co.uk, and additional notices may apply there.

When a customer buys through Amazon, Etsy, eBay, or our website, we receive the order data needed to make and deliver the item. This includes the recipient's name, delivery address, order contents, and any personalisation details.

For Amazon orders, this data arrives through Amazon's Selling Partner API (SP-API). We use it solely to manufacture and dispatch the product purchased.

For personalised Amazon Custom orders, we securely download the buyer's customisation archive from Amazon. The archive may contain text, selected options, colours, and artwork. We link it to the relevant order and use it only to manufacture that product. We never use Amazon Custom data for marketing, advertising, or profiling.

We never sell Amazon data. We do not share Amazon order data with any third party except the delivery carrier, which receives the recipient's name and address solely to deliver the order.

We collect the following categories of personal data:

• Enquiry data: name, business name, email address, telephone number, and the contents of any message you send through our contact or quote forms.
• Quote and order data: project specifications, delivery and invoicing addresses, purchase order references, and any technical files you upload for print-only or manufacturing work.
• Account data: business identity and registration details, account and purchasing contacts, invoice-routing requirements, delivery or fulfilment preferences, and, where you use an online account, login credentials and order history.
• Technical data: IP address, device type, browser, referring pages, and similar information gathered through analytics and server logs.
• Correspondence: emails, call notes, and other records of our interactions with you.

We use personal data to:

• respond to enquiries, prepare quotes, and fulfil orders;
• manage accounts, invoicing, and after-sales support;
• operate, secure, and improve our website and services;
• send service updates and, where you have opted in, occasional marketing; and
• comply with our legal, accounting, and regulatory obligations.

We do not sell personal data. We do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

We rely on the following lawful bases under UK GDPR:

• Contract: where processing is necessary to provide quotes, fulfil orders, or manage your account.
• Legitimate interests: for B2B communications with prospective and existing business clients, fraud prevention, network security, and service improvement. We balance these interests against your rights.
• Consent: for optional marketing communications and for non-essential cookies, which you can withdraw at any time.
• Legal obligation: for tax, accounting, and statutory record-keeping.

The only recipients of order PII outside our hosting infrastructure are delivery carriers, such as Royal Mail and DHL. They receive the recipient's name and address solely to deliver the order.

• Hosting: order data is stored in an encrypted Postgres database hosted on Railway. All connections use TLS.
• Application logs: application logs are sent to Better Stack and are configured to exclude customer PII.
• Legal obligations: records required for HMRC tax purposes are kept for the period required by UK law, minimised, and access-restricted.
• Other business data: where necessary, we may use payment, email, and analytics providers or professional advisers to process non-Amazon data, subject to appropriate contractual and data-protection safeguards.

We do not sell, rent, or licence personal data to third parties for their own marketing.

We retain personal data only for as long as it is needed:

• General enquiries: up to 12 months from last contact.
• Quote records: up to 6 years from the quote date, in line with UK financial record-keeping requirements.
• Amazon order PII:the recipient's name, address, and personalisation data are automatically deleted no later than 30 days after dispatch across the database, logs, files, caches, and backups.
• Records required by UK law: order and invoicing records required for HMRC tax purposes are kept for the statutory period. These records are minimised and access-restricted; personalisation data and delivery details not required by law are not retained under this exception.
• Account data: for as long as your account is active, plus up to 12 months after closure.
• Marketing data: until you unsubscribe or otherwise withdraw consent.

Order data is stored in an encrypted Postgres database hosted with our hosting provider Railway, with appropriate safeguards in line with UK GDPR. All connections use TLS. Where a supplier processes personal data outside the UK or EEA, we rely on an applicable UK adequacy regulation or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• access a copy of the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data in certain circumstances;
• restrict or object to processing;
• request portability of data you have provided to us;
• withdraw consent at any time, where consent is the legal basis; and
• lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

To exercise any right, email us at the address below. We aim to respond within one month.

For information about how we use cookies and similar technologies, please see our Cookie Policy.

For any privacy-related question, including to exercise your rights, please email [email protected]. Mark your message “Data protection” so we can route it correctly.