Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains how 3Dimensional Studio collects, uses, stores and shares personal information when you visit our website, place an order, contact us or otherwise interact with our business.

1. Who is responsible for your information

The controller responsible for the personal information described in this policy is:

Legal business name: 3DIMENSIONAL STUDIO LTD, trading as 3Dimensional Studio

Business address: Office B Chesil House Arrow Close, Boyatt Wood, Eastleigh, Hampshire, SO50 4SY

Email: help@3dimensionalstudio.co.uk

Our website is www.3dimensionalstudio.co.uk.

Shopify hosts our store and processes personal information to provide its services. For some activities, Shopify acts independently as a controller, as explained below.

2. Personal information we collect

Depending on how you interact with us, we may collect:

• Contact and delivery information: your name, email address, telephone number, billing address and delivery address.
• Order information: products purchased, order history, payment status, delivery details, cancellations, returns and refunds.
• Payment information: information needed to process your payment, including transaction references and any limited payment details made available to us by the payment provider. Payment providers process the payment credentials required for your chosen method.
• Account information: information associated with a customer account, where you choose to create or use one.
• Communications: enquiries, complaints, feedback and other information you send us.
• Safety information: product-safety enquiries, reports of damaged products and information relevant to investigating a safety concern.
• Acknowledgement records: records of your acknowledgement of our Product Safety & Care Guidelines, where captured by our checkout tools.
• Technical and usage information: information such as IP address, browser and device details, and interactions with our website, where collected through Shopify, cookies or other enabled services.
• Preferences: marketing subscriptions, unsubscribe requests and cookie or privacy choices.

Please avoid sending sensitive personal information unless it is necessary for your enquiry. We may need additional safeguards and a separate legal condition if a safety report includes health information.

3. Where information comes from

We receive information:

• Directly from you when you order, contact us, subscribe or submit information.
• From Shopify and providers supporting payments, delivery, customer accounts and other store functions.
• Through cookies and similar technologies, subject to applicable requirements and your choices.
• From someone placing an order for delivery to you.

Where you provide another person’s details, please ensure you are entitled to do so and make this policy available to them.

4. How we use information and our lawful bases

Data-protection law requires us to have a lawful basis for using personal information. The basis depends on why we use it.

Processing orders — contract

When you purchase as an individual, we use the information necessary to process your order, take payment, arrange delivery and handle contractual returns or refunds. Our lawful basis is performing our contract with you, or taking steps you request before entering into a contract.

When you act on behalf of a company or other organisation, we generally rely on our legitimate interests in managing that organisation’s order and business relationship.

Tax, accounting and other legal requirements — legal obligation

We use and retain relevant information where necessary to comply with applicable tax, accounting, product-safety and other legal duties. We rely on this basis only where a relevant legal obligation applies.

Customer enquiries — contract or legitimate interests

We use information to answer questions and provide support. Where this is necessary to fulfil our contract with you, we rely on contract. For general enquiries, we rely on our legitimate interests in responding to customers and prospective customers.

Security and fraud prevention — legitimate interests

We use relevant information to help prevent fraud, investigate suspicious transactions and protect our customers and services. Our legitimate interests are maintaining a secure website and protecting people and our business against misuse and financial loss.

Product safety and acknowledgement records — legitimate interests or legal obligation

Where recorded, we use acknowledgements of our Product Safety & Care Guidelines to retain evidence that warnings and instructions were presented and acknowledged.

We also use relevant information to investigate safety concerns, respond to complaints and establish, exercise or defend legal claims. We generally rely on our legitimate interests in supporting safe product use and maintaining appropriate records.

Where a specific legal duty requires safety notifications, corrective action or retention of information, we rely on legal obligation for that activity.

The safety acknowledgement checkbox is not consent to marketing or a waiver of privacy rights.

Marketing — consent or legitimate interests where permitted

Where consent is required, we obtain it before sending marketing emails or text messages.

Where the existing-customer soft opt-in legally applies, we may rely on our legitimate interests in promoting our own similar products or services. We provide an opportunity to opt out when collecting your details and in each subsequent marketing message.

You may object to direct marketing at any time by using the unsubscribe link or contacting us.

Cookies and similar technologies — consent where required

We obtain consent before using cookies or similar technologies where the law requires it, including relevant advertising and tracking technologies.

For essential website functions and other activities that do not require cookie consent, we use an appropriate data-protection basis, such as our legitimate interests in providing a functioning, secure online store. Further details are provided in our cookie information.

How we assess legitimate interests

Where we rely on legitimate interests, we assess whether the processing is necessary and balance our interests against your rights and reasonable expectations. We apply appropriate safeguards and do not rely on this basis where your interests or rights override ours.

You can contact us for further information or to object to processing based on legitimate interests.

Withdrawing consent

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing lawfully carried out before you withdrew consent.

5. Marketing choices

You can unsubscribe from marketing emails using the link in the message or by contacting us.

Where consent is required, we will obtain it before sending marketing. Where we rely on a permitted existing-customer arrangement, we will meet its conditions, including providing an opportunity to opt out when collecting your details and in subsequent marketing messages.

Unsubscribing does not prevent necessary communications about orders, refunds, account security or product-safety matters.

Our product-safety acknowledgement checkbox does not subscribe you to marketing.

6. Cookies and similar technologies

Our website uses cookies and similar technologies to support functions such as shopping baskets, checkout, security and remembering relevant choices.

Depending on our enabled services and your choices, technologies may also be used for analytics, personalisation and advertising.

Where consent is legally required, these technologies should operate only after you give consent. You can manage available choices through our website’s privacy controls.

Browser settings also allow you to manage cookies, although blocking essential technologies may affect website functions.

7. Who receives personal information

We share information where necessary and appropriate with:

• Shopify, for hosting and operating the store.
• Payment providers, to process payments and address payment disputes.
• Postal services, couriers and fulfilment providers, to deliver orders.
• Providers supporting store functions, customer service, reviews, communications and checkout acknowledgements.
• Professional advisers, such as accountants, insurers and legal advisers.
• Regulators, public authorities or other parties where legally required or necessary to address safety issues or legal claims.
  

Where analytics or advertising services are enabled, relevant information may also be shared with those providers, subject to applicable law and your choices.

Additional providers and their purposes: 

CheckMate - Terms and conditions checkbox and age gate for the store.

Smile.io - Customer loyalty points, VIP tiers, referrals, rewards program

Mega PDF Invoices - Automatically generate PDF invoices, receipts + order printer

8. Shopify

Our store is hosted by Shopify. Information submitted to the store is shared with Shopify and relevant service providers, including providers located outside the UK.

Shopify processes information to operate and improve its services. Depending on our settings, Shopify may also provide enhanced services using information from interactions with our store, other merchants and Shopify.

Shopify Network Intelligence: [CONFIRM WHETHER ENABLED AND ENSURE THIS SECTION MATCHES YOUR SETTINGS]

Where Shopify determines its own processing purposes, it is responsible for that processing and associated privacy requests.

Further information is available in the Shopify Privacy Policy. Depending on your location, you can exercise relevant choices through the Shopify Privacy Portal.

9. Product-safety acknowledgement records

We use CheckMate to present an acknowledgement linked to our Product Safety & Care Guidelines.

Where the tool records an acknowledgement against an order, we use that record for the purposes described in section 4.

Information actually recorded: https://checkmate.nerdlabs.us/privacy.html

We do not treat acknowledgement of safety instructions as a waiver of your privacy rights.

10. International transfers

Shopify and other providers may process information outside the UK.

Where a transfer is restricted under UK data-protection law, we ensure an appropriate transfer mechanism applies. This may include UK adequacy regulations or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum, together with any required assessment.

Contact us for information about relevant safeguards or how to obtain a copy, subject to necessary redactions.

11. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including meeting legal obligations, handling complaints and addressing product-safety concerns.

Order and accounting records

We retain the information required for tax and accounting purposes for the applicable statutory period. For limited-company accounting records, this is generally six years from the end of the relevant financial year. For sole-trader tax records, it is generally at least five years after the relevant 31 January filing deadline. Longer periods may apply in particular circumstances.

We do not retain every item of customer information merely because some accounting records must be kept.

Routine enquiries

We normally delete or anonymise routine enquiries that do not result in an order within 12 months after the last contact, unless there is a continuing reason to retain them.

Order-related complaints and disputes

We retain relevant correspondence with the associated order records where necessary to resolve complaints, meet legal obligations or establish, exercise or defend legal claims. Records relating to an ongoing dispute may be retained until it is resolved and any relevant further retention period has expired.

Product-safety reports and acknowledgements

Where recorded, we retain relevant safety reports and acknowledgements of our Product Safety & Care Guidelines for a period determined by the expected product lifespan, applicable legal duties, potential claims and relevant insurance requirements.

We review the continuing need for these records at least annually. We retain only information necessary for those purposes and do not keep identifiable records indefinitely without justification.

Customer accounts

We review customer accounts after two years of inactivity and delete or anonymise information no longer needed. Order, accounting or safety records that remain necessary are retained separately under the criteria above.

Marketing preferences

We retain marketing contact information until you unsubscribe, withdraw consent or it is removed under our inactivity reviews.

After an opt-out, we may retain a minimal suppression record for as long as necessary to respect your choice and prevent further marketing.

Cookies and technical information

Retention periods vary according to the cookie, technology and provider. Details are provided in our cookie information and relevant provider disclosures. We review technical records and remove information that is no longer necessary for security, operation or other stated purposes.

Deletion and exceptional retention

When information is no longer needed, we securely delete or anonymise it. Information in backups is removed through our normal backup replacement cycle and is not used for routine business purposes while awaiting removal.

We may retain particular information longer where necessary for a legal obligation, unresolved claim, regulatory investigation or continuing safety matter. We restrict its use to the purpose that justifies continued retention.

12. Security

We use appropriate technical and organisational measures to protect personal information, including limiting access to those who need it.

No online service can guarantee absolute security. Please do not email full payment-card details, passwords or unnecessary sensitive information.

13. Your rights

Depending on the circumstances, you may have rights to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request deletion.
• Restrict processing.
• Receive or transfer certain information in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent where processing relies on consent.
• You have the right to object to direct marketing at any time.

These rights have conditions and exceptions. For example, we may need to retain some information to meet legal obligations or handle legal claims.

To make a request, email help@3dimensionalstudio.co.uk. We may reasonably verify your identity. We generally respond within one month, subject to lawful extensions or other applicable rules.

Withdrawing consent does not affect processing lawfully carried out before withdrawal.

14. Information you need to provide

Some information is necessary to process an order, take payment or arrange delivery. If you do not provide it, we may be unable to complete the purchase.

Optional information and marketing subscriptions are not required to purchase.

15. Children

Our store and specialist training aids are directed towards adults.

We do not intentionally collect children’s information for customer accounts or marketing. If you believe a child has provided information to us, contact us so we can assess the circumstances and take appropriate action.

16. Complaints

Please contact us if you have concerns about our use of personal information.

You also have the right to complain to the UK Information Commissioner’s Office. Information about making a complaint is available at ico.org.uk/make-a-complaint.

If you live outside the UK, you may also have the right to complain to your local data-protection authority.

17. Other websites

Links to independent websites are provided for convenience. Their operators are responsible for their own privacy practices. Please read their privacy information before submitting personal information.

18. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. We will publish the updated version here and revise the date above.

Where required, we will provide additional notice or obtain consent before making relevant changes to processing.