PRIVACY POLICY

Last updated: June 2026

1. Who we are

MAKE3D Ltd (‘MAKE3D’, ‘MAKE’, ‘we’, ‘us’, ‘our’) is a product design and engineering studio registered in England and Wales (Company No. 09438267). Our registered address is 369 Hagley Road West, Quinton, Birmingham, B32 2AL.

We are the data controller for personal data collected through this website and through our business activities. We are registered with the Information Commissioner’s Office (ICO) under registration number [ADD ICO NUMBER].

If you have any questions about this policy or how we handle your data, please contact us at studio@make3d.design.

2. What data we collect

Data you provide directly

When you contact us through our website contact form, by email, or by telephone, we may collect:

  • Your name and job title

  • Your company name and address

  • Your email address and telephone number

  • Details of your project or enquiry

  • Any other information you choose to share with us

Data collected automatically

When you visit make3d.design, we and our third-party service providers may automatically collect:

  • Your IP address and browser type

  • Pages visited and time spent on the site

  • Referring website or search query

  • Device type and operating system

This data is collected through cookies and similar technologies. Please see our Cookie Policy for full details.

3. How we use your data

We use the personal data we collect for the following purposes:

Responding to enquiries

To respond to your contact form submission, email, or telephone enquiry and assess whether we can assist with your project.

Delivering services

To fulfil our contractual obligations to clients, including project delivery, invoicing, and ongoing communication throughout an engagement.

Business administration

To manage our accounts, maintain client records, and meet our legal and regulatory obligations.

Improving our website

To understand how visitors use make3d.design and improve its content and functionality.

Marketing communications

With your consent, to send you updates about MAKE3D’s services, projects, or insights. You may withdraw consent at any time.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

  • Legitimate interests — responding to enquiries and maintaining client relationships

  • Contract performance — delivering services to clients under a signed agreement

  • Legal obligation — retaining financial records and complying with tax and regulatory requirements

  • Consent — for marketing communications and non-essential cookies, where we ask for your explicit consent

5. Who we share your data with

We do not sell your personal data to third parties. We may share your data with:

  • Professional advisors — our accountants, solicitors, and insurers where necessary

  • IT and software providers — including Squarespace (website hosting), Google (analytics and email), and any project management or CRM tools we use to manage client work

  • Subcontractors — specialist designers, engineers, or manufacturers engaged to support delivery of a specific project, only where necessary and subject to confidentiality obligations

  • Regulatory authorities — HMRC or other authorities where we are legally required to do so

All third-party processors we use are required to handle your data securely and only for the purposes for which it was shared.

6. How long we keep your data

Enquiry data (no project)

12 months from last contact, unless you ask us to delete it sooner

Client project data

7 years from project completion, in line with HMRC requirements for financial records

Website analytics data

26 months (Google Analytics default retention period)

Marketing consent records

Until you withdraw consent, plus 12 months thereafter

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — to request a copy of the personal data we hold about you

  • Right to rectification — to ask us to correct inaccurate or incomplete data

  • Right to erasure — to ask us to delete your data in certain circumstances

  • Right to restrict processing — to ask us to limit how we use your data

  • Right to data portability — to receive your data in a structured, machine-readable format

  • Right to object — to object to processing based on legitimate interests or for direct marketing

  • Right to withdraw consent — where processing is based on consent, to withdraw it at any time

To exercise any of these rights, contact us at studio@make3d.design. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is hosted on Squarespace, which maintains industry-standard security infrastructure. Access to client data within our business is restricted to those who need it to perform their role.

No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

9. International transfers

Some of our third-party service providers (including Google) may process data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement or equivalent mechanisms, to protect your data in line with UK GDPR requirements.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available at make3d.design/privacy-policy. We will notify you of any significant changes by updating the ‘Last updated’ date at the top of this page.