Privacy Policy

Last updated: 2 October 2026

Who we are

GN3D Prints is operated by Gemma Neal, a sole trader.

Our website address is https://gn3d.co.uk.

For data-protection enquiries, you can contact us at:

Email: [email protected]
Postal address: 29 Bank Avenue, Peterborough, PE7 8GP, United Kingdom

For the purposes of UK data-protection law, Gemma Neal trading as GN3D Prints is the data controller.

Information We Collect

Depending on how you use our website, we may collect:

Your name, email address, telephone number, billing address and delivery address.
Account information, including your username and encrypted password.
Order details, purchased products, payment status, delivery information, refunds and correspondence.
Technical information such as your IP address, browser, device information and security logs.
Messages you send through our website or by email.
Your marketing preferences.
Pokédex information, including qualifying purchases, collected designs, reward-tier progress and issued rewards.
Cookie and consent preferences.

Payment-card details are handled by our payment providers. GN3D Prints does not ordinarily receive or store your complete card number or security code.

How We Use Your Information

We use personal information to:

Process payments and fulfil orders.
Deliver products and provide delivery updates.
Create and manage customer accounts.
Maintain your GN3D Pokédex collection and reward progress.
Issue and administer discount rewards.
Respond to enquiries and provide customer support.
Process cancellations, returns and refunds.
Prevent fraud, misuse and security incidents.
Maintain financial and business records.
Improve the reliability and operation of our website.
Send promotional emails where you have agreed to receive them.
Comply with legal and regulatory obligations.

Our Lawful Bases

We process your information using the following lawful bases:

Contract: where processing is necessary to accept, fulfil or manage an order, maintain an account or provide requested services.
Legal obligation: where we must retain information for tax, accounting, fraud-prevention or other legal requirements.
Legitimate interests: where necessary to operate and secure our store, answer enquiries, prevent misuse and improve our services, provided those interests do not override your rights.
Consent: where you choose to receive promotional emails or accept non-essential cookies. You may withdraw consent at any time.

Where information is required to complete an order, we may be unable to supply the product if you do not provide it.

Customer accounts and the GN3D Pokédex

If you create an account, we store the information needed to manage it.

Eligible purchases made while signed in may be recorded in your GN3D Pokédex. This can include the products collected, the number of qualifying purchases, reward-tier progress and rewards issued or redeemed.

Guest orders are not normally connected automatically to a Pokédex account.

Pokédex records are used to provide the collection and rewards service requested through your account. Removing or anonymising an account may prevent us from restoring its Pokédex progress later.

Marketing communications

We may send promotional emails only where you have consented to receive them or where another lawful basis permits us to do so.

You can unsubscribe at any time using the link in a marketing email or by contacting [email protected]. Unsubscribing from marketing will not prevent necessary messages concerning your account, orders, payments or deliveries.

Who we share information with

We share personal information only where necessary to run the store, fulfil orders or meet legal obligations. Recipients may include:

Payment providers, including WooPayments and their payment-processing partners.
Delivery and fulfilment services, including Sendcloud and the selected delivery carrier.
Website and ecommerce software providers, including WordPress and WooCommerce.
Cloudflare, which provides website connectivity, performance and security services.
Email providers used for transactional and customer-service messages.
IT, backup, security and hosting providers.
Professional advisers, insurers, banks, regulators, law-enforcement bodies or public authorities where required.

These organisations receive only the information reasonably necessary to provide their service or meet the relevant obligation.

We do not sell customer personal information.

International transfers

Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we expect the recipient to use an approved legal safeguard, such as UK adequacy regulations or recognised contractual protections.

Information sent to us by email may be processed by our email provider in accordance with that provider’s privacy terms.

How long we retain information

Our current retention periods are:

Inactive customer accounts: 72 months.
Pending orders: 7 days.
Failed orders: 30 days.
Cancelled orders: 12 months.
Completed orders: 6 years.
Refunded orders: 6 years.

Account and Pokédex information is generally retained while the account remains active and for up to 72 months after it becomes inactive.

We may retain limited information for longer where necessary to establish, exercise or defend legal claims, prevent fraud, resolve a dispute or meet a legal obligation. Once information is no longer required, it will be deleted or anonymised where reasonably possible.

Cookies

Our website uses cookies and similar technologies necessary for:

Shopping-basket and checkout operation.
Customer login and account security.
Remembering preferences.
Payment and fraud prevention.
Website protection and reliable operation.

We are not currently aware of using dedicated advertising pixels or visitor-analytics services. If we introduce non-essential analytics or advertising cookies, we will update this policy and obtain consent where required.

You can control cookies through your browser. Blocking necessary cookies may prevent the basket, checkout or account areas from working correctly.

Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, loss or disclosure.

However, no website or electronic transmission can be guaranteed completely secure. Customers are responsible for keeping their account credentials confidential and should contact us if they suspect unauthorised account activity.

Your data-protection rights

Depending on the circumstances, you may have the right to:

Ask for access to your personal information.
Ask us to correct inaccurate or incomplete information.
Ask us to erase information.
Ask us to restrict how information is used.
Object to certain processing, including direct marketing.
Receive certain information in a portable format.
Withdraw consent at any time where processing relies on consent.

Some rights are subject to legal exceptions. For example, we may need to retain order information required for accounting, fraud prevention or legal claims even after an account-erasure request.

To exercise your rights, contact [email protected]. We may need to verify your identity before completing a request.

You also have the right to complain to the UK Information Commissioner’s Office. Information about making a complaint is available at www.ico.org.uk/make-a-complaint.

Links and embedded content

Our website may link to or display content supplied by other websites. Those organisations may collect information according to their own privacy policies. GN3D Prints is not responsible for the privacy practices of independent third-party websites.

Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The latest version will be published on this page with its revision date.