Privacy notice
This notice explains what personal information we collect when you use this website or buy from us, what we do with it, and your rights.
Last updated 11 Oct 2026
Who we are
Hatch3D (a sole trader business; full legal details are in the site footer) is the data controller for the personal information described here.
- Address: [ADDRESS_LINE_1], Colchester, Essex, [POSTCODE]
- Email: [EMAIL]
- Phone and WhatsApp: [PHONE]
If you have any questions about your information, contact us using any of the details above.
What we collect and why
We only collect what we need to make and deliver your order, answer your questions and run the shop.
| What you do | What we collect | Why | Lawful basis |
|---|---|---|---|
| Place an order | Name, email, mobile (optional), delivery address or collection choice, the text, colours and options for each item, photos you upload for photo products, how you'll pay, any note you add, how you heard about us (optional) | To make, deliver and support your order, and send your order and payment emails | Contract |
| Keep business records | Order details, amounts, payment dates | Tax and accounting records | Legal obligation |
| Send a custom request | Name, email, mobile (optional), your description, sizes, files and photos | To reply with a quote and, if you go ahead, make it | Steps before a contract, then contract |
| Use the contact form | Name, email, order number (optional), your message | To reply to you | Legitimate interests (answering enquiries) |
| Join the email list, or tick the marketing box | Email address | To send news about new colours, new prints, and Christmas order dates | Consent (untick or unsubscribe any time) |
| Visit the website | Visit statistics: pages viewed, where on a page people tap, how far they scroll and how long a page is open, plus the device type, country and the site or campaign that sent you (see "Visit statistics") | To see which pages and products work and improve the website | Legitimate interests, with an easy way to object |
| Any form | A hidden spam-trap field and spam checks | To stop automated spam | Legitimate interests |
We also save which advert or link brought you to the site (for example "TikTok") alongside an order, so we know which marketing works. This isn't used to build a profile of you.
You don't have to give us your information, but we can't take an order without a name, an email and a way to get it to you.
We never ask for or store card details on this website. If card payment is added later, it will be handled on Stripe's own secure page, and this notice will be updated first.
Who we share it with
We don't sell your information or share it for anyone else's marketing. We use these services to run the shop. They process information on our behalf and only as we instruct:
| Service | What it does for us | Where |
|---|---|---|
| Netlify, Inc. | Hosts this website, receives form submissions, stores uploaded photos and files, and stores our order records and visit statistics | United States |
| Resend, Inc. | Sends order and quote emails | United States |
| Google LLC (Google Workspace / Sheets) | Our order spreadsheet, if used | United States and other countries |
| postcodes.io | Checks that a postcode exists (only the postcode is sent) | United Kingdom |
| Royal Mail | Delivers posted orders (name and address on the parcel) | United Kingdom |
| Our bank | Receives bank transfers, which show your name and reference | United Kingdom |
| Stripe, once enabled | Card payments on Stripe's own page | United States and other countries |
Where information is processed outside the UK, we rely on the safeguards UK law allows, such as the UK–US data bridge for certified US companies or the UK International Data Transfer Addendum to standard contractual clauses. You can ask us for details.
We may also share information if the law requires it, for example with HMRC.
How long we keep it
| Information | How long |
|---|---|
| Orders and payment records | 6 years from the end of the tax year, for tax records |
| Photos uploaded for photo products | Deleted 90 days after your order is complete |
| Custom requests you don't go ahead with | 12 months |
| Contact form messages | 12 months, unless they become part of an order |
| Marketing email list | Until you unsubscribe |
| Visit statistics | 13 months, then deleted automatically |
Cookies and storage on your device
This site doesn't use cookies. We don't use advertising trackers, social media pixels, third-party analytics or embedded videos.
The site does store a few things in your browser, only so that features you use work. This information stays on your device and isn't sent to us unless you place an order or send a form.
| Stored in | What | Why |
|---|---|---|
| localStorage | Your basket | So it's still there when you come back |
| localStorage | Your details, only if you tap "Save my details" after ordering | To fill in checkout next time |
| localStorage | Whether you've seen the homepage animation, and your choice below about visit counts | To remember your settings |
| sessionStorage | Design drafts and the link that brought you here | So your design isn't lost while you browse; cleared when you close the tab |
| sessionStorage | A random visit number (h3d_sid), only if you haven't turned statistics off |
So our visit statistics can tell one visit from another (see "Visit statistics"); cleared when you close the tab |
| IndexedDB | Photos you add to a photo product | Kept on your device until you order, so you don't have to upload them twice |
Apart from the visit number, these are all strictly necessary for things you've asked for. The visit number is used only for our own statistics, which UK law (the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025) allows without a consent banner as long as we explain it clearly and you can easily object. That's what the next section and the switch below are for. You can clear any of this at any time in your browser settings. If we ever add an advertising pixel or other non-essential tracker, we'll ask for your consent first.
Visit statistics
We run our own simple visit statistics, so we can see which pages and products people look at and fix the bits of the site that don't work. They're collected by this website itself and stored with our host, Netlify. No other company sees them, and they're never used for advertising or to build a profile of you.
What's recorded for each visit:
- the pages you view, the website or campaign link that sent you (just the site name, such as "tiktok.com", or the campaign tag in the link), and whether it was your first page,
- where on a page you tap or click (as a position on the page), with the label of the link or button, such as "Add to basket",
- how far down a page you scroll and how long the page is open on your screen,
- steps in the shop, such as starting a design, adding to the basket or placing an order (the product and price, never your details),
- your screen size, device type (phone, tablet or computer) and country.
What's never recorded: your name, email, address or anything you type into a form, your IP address, cookies, or any ID that follows you between visits. The random visit number lives in your browser tab only and disappears when you close it, so we can't tell that two visits on different days were you. Visits from automated tools are ignored.
How long: statistics are deleted automatically after 13 months.
Your choice: if your browser sends a "Global Privacy Control" or "Do Not Track" signal, we don't collect statistics at all. You can also turn them off for this browser here (this stores one small setting on your device so we remember your choice):
Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you,
- correct anything that's wrong or incomplete,
- delete your information, where we don't need to keep it (for example, tax records must be kept),
- restrict or object to how we use it, including any use based on legitimate interests,
- move information you gave us to another service (data portability),
- withdraw consent at any time, for example by unsubscribing from emails.
To use any of these rights, contact us using the details at the top. We'll reply within one month. There's no charge.
Complaints
If you're unhappy with how we've handled your information, please tell us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this notice
We'll update this page if anything changes, such as a new service we use, and change the date at the top.
Hatch3D, [ADDRESS_LINE_1], Colchester, Essex, [POSTCODE]. [EMAIL] · [PHONE]. Not VAT registered, so no VAT is charged. Legal details are in the footer.