PRIVACY POLICY
Last updated: June 2026
1. Who we are
MAKE3D Ltd (‘MAKE3D’, ‘MAKE’, ‘we’, ‘us’, ‘our’) is a product design and engineering studio registered in England and Wales (Company No. 09438267). Our registered address is 369 Hagley Road West, Quinton, Birmingham, B32 2AL.
We are the data controller for personal data collected through this website and through our business activities. We are registered with the Information Commissioner’s Office (ICO) under registration number [ADD ICO NUMBER].
If you have any questions about this policy or how we handle your data, please contact us at studio@make3d.design.
2. What data we collect
Data you provide directly
When you contact us through our website contact form, by email, or by telephone, we may collect:
Your name and job title
Your company name and address
Your email address and telephone number
Details of your project or enquiry
Any other information you choose to share with us
Data collected automatically
When you visit make3d.design, we and our third-party service providers may automatically collect:
Your IP address and browser type
Pages visited and time spent on the site
Referring website or search query
Device type and operating system
This data is collected through cookies and similar technologies. Please see our Cookie Policy for full details.
3. How we use your data
We use the personal data we collect for the following purposes:
Responding to enquiries
To respond to your contact form submission, email, or telephone enquiry and assess whether we can assist with your project.
Delivering services
To fulfil our contractual obligations to clients, including project delivery, invoicing, and ongoing communication throughout an engagement.
Business administration
To manage our accounts, maintain client records, and meet our legal and regulatory obligations.
Improving our website
To understand how visitors use make3d.design and improve its content and functionality.
Marketing communications
With your consent, to send you updates about MAKE3D’s services, projects, or insights. You may withdraw consent at any time.
4. Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
Legitimate interests — responding to enquiries and maintaining client relationships
Contract performance — delivering services to clients under a signed agreement
Legal obligation — retaining financial records and complying with tax and regulatory requirements
Consent — for marketing communications and non-essential cookies, where we ask for your explicit consent
5. Who we share your data with
We do not sell your personal data to third parties. We may share your data with:
Professional advisors — our accountants, solicitors, and insurers where necessary
IT and software providers — including Squarespace (website hosting), Google (analytics and email), and any project management or CRM tools we use to manage client work
Subcontractors — specialist designers, engineers, or manufacturers engaged to support delivery of a specific project, only where necessary and subject to confidentiality obligations
Regulatory authorities — HMRC or other authorities where we are legally required to do so
All third-party processors we use are required to handle your data securely and only for the purposes for which it was shared.
6. How long we keep your data
Enquiry data (no project)
12 months from last contact, unless you ask us to delete it sooner
Client project data
7 years from project completion, in line with HMRC requirements for financial records
Website analytics data
26 months (Google Analytics default retention period)
Marketing consent records
Until you withdraw consent, plus 12 months thereafter
7. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access — to request a copy of the personal data we hold about you
Right to rectification — to ask us to correct inaccurate or incomplete data
Right to erasure — to ask us to delete your data in certain circumstances
Right to restrict processing — to ask us to limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, to withdraw it at any time
To exercise any of these rights, contact us at studio@make3d.design. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk.
8. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is hosted on Squarespace, which maintains industry-standard security infrastructure. Access to client data within our business is restricted to those who need it to perform their role.
No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.
9. International transfers
Some of our third-party service providers (including Google) may process data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement or equivalent mechanisms, to protect your data in line with UK GDPR requirements.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available at make3d.design/privacy-policy. We will notify you of any significant changes by updating the ‘Last updated’ date at the top of this page.