Privacy Policy

1. Data controller

Yorkshire3D Limited, trading as Makr3D, is the data controller for personal data processed through the platform. Registered office: 53 Woodlea Avenue, Huddersfield, West Yorkshire HD3 4EF, United Kingdom. Data protection contact: [email protected].

2. What we collect

• Account and onboarding data: contact name, trading name, country, email, sales channels, store/website URL (optional), intended product category and monthly order estimate.
• Order data: order details, end-customer delivery addresses you supply for fulfilment, and tracking information.
• Uploaded files and product data: 3MF/STL files, images, product settings and production notes.
• Payment data: processed by our payment provider (Stripe). We store a payment-method reference to enable charge-on-import, not full card numbers.
• Technical and usage data: sign-in, device and log data used to operate and secure the service.

3. How and why we use it

We use personal data to provide fulfilment (quoting, review, printing, QA, packing, shipping and disputes), to bill sellers, to provide support, to detect and prevent fraud and abuse, and to comply with legal obligations. Our lawful bases are typically performance of a contract, our legitimate interests in operating the platform securely, and compliance with legal obligations.

4. End-customer data

When you place dropship orders you provide your customers’ delivery details so we can fulfil them. You are responsible for having a lawful basis to share that data with us; we process it to fulfil and ship the order and to handle delivery disputes as shipper of record.

5. Processors and recipients

We share data with service providers acting on our instructions, including our authentication provider (Clerk), payment provider (Stripe), shipping and label provider (ShipStation) and carriers, hosting and infrastructure (Railway), and error monitoring (Sentry). The final processor list will be confirmed before launch.

6. International transfers

Some providers process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses with the UK addendum).

7. File retention and deletion

We retain everything by default, including partial, rejected and unapproved uploads, so you can resume or revisit your work. We do not run automatic time-based purges. We delete data when you request it, or when we are legally required to (for example a valid takedown or a UK GDPR erasure request). Sellers and admins can action deletion through the platform.

8. Your rights

Subject to UK GDPR you may request access, rectification, erasure, restriction or portability, and may object to certain processing. To exercise a right, contact us using the details above. You may also complain to the Information Commissioner’s Office (ICO).

9. Cookies

We use strictly necessary cookies for authentication and security. A full cookie notice will be published before launch.

10. Changes

We may update this policy; material changes will be notified to sellers.