Privacy Policy for Harperz 3D Prints
Last Updated: 19 May 2026
At Harperz 3D Prints, accessible via [Insert Website URL], we manufacture and retail 3D-printed products catering specifically to the reptile husbandry and heavy plant industries. We are committed to protecting the privacy of our site visitors and customers. This Privacy Policy outlines how we collect, process, store, and safeguard your personal data in compliance with the General Data Protection Regulation (EU GDPR), the UK GDPR, and the ePrivacy Directive.
1. Data Controller
For the purpose of data protection laws, the Data Controller is:
- Company Name: Harperz 3D Prints
- Contact Email: harperz3dprints@gmail.com
- Postal Address: 24 Bredenbury Crescent, Portsmouth, Hampshire, PO63SL
2. Legal Basis for Data Processing
Under GDPR and UK GDPR, we rely on the following lawful bases to process your personal data:
- Contractual Necessity: To process, manufacture, and ship your 3D-printed orders.
- Consent: For marketing communications (newsletters) and non-essential cookies (analytics/tracking).
- Legitimate Interests: To improve storefront performance, secure our site from fraud, and manage internal accounting.
- Legal Obligation: To comply with tax laws and financial reporting requirements.
3. Personal Data We Collect
We collect information through your direct interactions with our PrestaShop storefront and automatic background logging:
- Identity & Contact Data: Name, billing address, shipping address, email address, and phone number. (Collected during registration, guest checkout, or contact form submissions).
- Transaction Data: Details of the specific 3D-printed items purchased, order amounts, and purchase history.
- Payment Data: Payment transactions are securely handled directly by our external payment gateways (e.g., Stripe, PayPal). We do not store your credit card numbers on our PrestaShop database.
- Technical & Usage Data: IP address, browser type, device details, and site interaction data (collected via cookies).
- User Content: Text and photos submitted via our product comment/review systems.
4. How We Use Your Personal Data
We process your information exclusively to serve your hobbyist or industrial needs:
- Order Fulfilment: Processing transactions, manufacturing custom 3D structures, and arranging courier deliveries.
- Customer Support: Responding to inquiries sent via our contact forms regarding specifications for reptiles or heavy plant.
- Marketing Communication: Sending promotional emails about new product lines, only if you have explicitly opted in.
- Site Optimisation: Enhancing PrestaShop security, preventing fraud, and analyzing browsing trends to improve site speed.
5. Cookies and Tracking Technologies (ePrivacy Directive)
Our PrestaShop site uses essential cookies to function (e.g., keeping tracking of your shopping cart and user sessions). Non-essential cookies used for statistics (Google Analytics) or marketing are blocked by default and are only enabled once you interact with our cookie consent pop-up and select "Allow". You can adjust your consent options at any time using the floating tab on our footer.
6. Data Sharing with Third Parties
We never sell your data. We only share information with critical service providers required to operate our business:
- Shipping Couriers: Sharing your address with delivery partners (e.g., Royal Mail, DPD, DHL) to dispatch your heavy plant products or reptile products.
- Payment Gateways: Sending transactional details securely to payment processors.
- Hosting & Web Services: Data is stored securely on servers provided by our hosting company IONOS.
7. International Data Transfers
If your personal data is transferred outside the UK or the European Economic Area (EEA), we ensure equivalent protection by using standard contractual clauses (SCCs) approved by the European Commission or the UK International Data Transfer Agreement (IDTA) to safeguard your privacy rights.
8. Data Retention Periods
We keep your personal information only as long as necessary:
- Order History: Retained for up to 6–7 years to meet tax obligations, business accounting rules, and product warranty queries.
- Account Profiles: Kept as long as your customer account remains active. You can request deletion at any time.
- Contact Inquiries: Retained for up to 12 months following resolution to guarantee quality support.
9. Security Measures
Our PrestaShop store utilizes industry-standard Hypertext Transfer Protocol Secure (HTTPS) encryption to protect data transfers. Access controls are tightly restricted so that customer records can only be accessed by authorized administrative accounts.
10. Your Data Protection Rights
Under UK and EU GDPR laws, you possess the following rights regarding your data:
- Right of Access: Request a free copy of all personal details we hold about you.
- Right to Rectification: Ask us to correct any inaccurate information.
- Right to Erasure ("Right to be Forgotten"): Request that we delete your personal data under certain conditions.
- Right to Object / Restrict Processing: Limit how we process your information or object to direct marketing.
- Right to Data Portability: Request the digital transfer of your files to another provider.
- Right to Withdraw Consent: Revoke your marketing or cookie preferences instantly.
To exercise any of these rights, please email us directly at the address provided in Section 1. We will fulfill legitimate requests within 30 days.
11. How to File a Complaint
If you have concerns about our data management practices, please contact us first so we can resolve them. If you remain unsatisfied, you have the legal right to lodge an official complaint with a Supervisory Authority:
- In the UK: The Information Commissioner's Office (ICO Official Site).
- In the EU: Your local national Data Protection Authority (e.g., CNIL in France, Irish DPC).