Privacy Policy | 3DPartGo

Who is responsible for your data

The controller, the company responsible for your data, is SIA TWIN, registered in Latvia in 2018. We run 3DPartGo from Riga.

Company: SIA TWIN

Address: Berzaunes iela 1, Riga, LV-1039, Latvia

Registration number: 40203181454

VAT number: LV40203181454

Email: info@3dpartgo.com

Phone: +371 28 328 228

What we process

We only process what the service needs to work:

Account data. Name, email address and country. Used to sign you in and to reply to you.

Uploaded model files and photos. Used only to prepare your order. They are stored on servers in the EU.

Order and delivery data. What you ordered, in which material and quantity, what it cost, and the name, address and phone number the parcel goes to. The carrier gets the address and the phone number, because a courier with neither cannot deliver.

Payment data. Your card never reaches us: it is typed on Stripe's own page. From Stripe we receive that the payment succeeded, the amount, the card brand and its last four digits, and that is all we store.

Company and VAT number. If you order as a company we store the company name, its registration number and its VAT number for the invoice. The VAT number is sent to VIES, the European Commission's validation service, which answers only whether the number is valid: that check is what allows us to invoice you at 0%.

Inquiry messages. What you write to us through the forms or by email, so we can answer.

Technical logs. The IP address a request came from, the time, the page and the browser string, kept so we can keep the site running, find a fault and stop an abusive flood of requests.

Cookies

We set a small number of cookies, all of them needed for the site to work:

A session cookie that keeps you signed in.
A guest project cookie that remembers your uploaded project before you sign in.
A cookie with your language preference.

There are no advertising trackers on this site. Analytics and marketing are switched off and empty, and the Cookies link at the bottom of every page is where you turn them on again or off. Turning a category off deletes what it had set.

Who sees your data

We do not sell your data and we do not pass it on for marketing.

We use a few service providers only where the service needs them: hosting in the EU, email delivery, Stripe Payments Europe for card payments, and Telegram, where a copy of a new order or message reaches our workshop on a phone. Stripe receives your name, email, delivery address and the amount, and processes them under its own privacy policy. If you sign in with Google or Apple, that provider tells us your name and email address and nothing else. Stripe and Telegram are outside the EU for some processing and rely on the European Commission's standard contractual clauses for it. Every processor works for us and for nothing else.

Why we are allowed to hold it

Every piece of data above is held for one of these reasons, which is what the GDPR calls a legal basis:

To perform the contract: your account, your files, your order, your delivery address and your payment. Without these we cannot make a part and send it to you.
To meet a legal obligation: an invoice and the tax records around it, which Latvian law requires us to keep whether you want us to or not.
Our legitimate interest: server logs and rate limiting, so the site stays up and is not abused. We keep these short and they identify a request, not a person.
Your consent, only where you gave it: writing to us through a form is you choosing to send us that message, and you can ask us to delete it at any time.

How long we keep it

Nothing is kept for ever, and each kind of data has its own clock. Ask us to delete your files at any time and we do it the same way, except where the law makes us keep a record:

Account: while the account exists. Ask us to close it and it goes, along with the projects in it.
Uploaded models and photos: while the project is in your account. Ask and we delete them sooner.
Invoices and the order data on them: five years after the year they were issued, because the Latvian accounting law says so. This is the one thing we cannot delete on request.
Messages from the forms: up to two years, so we can find what was agreed if you come back about the same part.
Server logs: up to ninety days.

When a period ends the record is deleted, not archived quietly somewhere else.

The price is calculated automatically

When you upload a model, software measures it and calculates a price from its volume, its size, the material and the delivery country. No person looks at it first. This decides what a part costs, not anything about you, and you are never obliged to accept it: if the figure looks wrong, send the model as a quote request and a person will price it by hand.

Your rights

The GDPR gives you a specific set of rights over your data, and they are not decoration. You can:

See what we hold about you, and get a copy of it
Have anything wrong corrected
Have your data deleted, except invoices we are required to keep
Ask us to stop using it while a dispute about it is open
Receive what you gave us in a machine readable file, or have it sent to another provider
Object to a use that rests on our legitimate interest
Withdraw a consent you gave, without that affecting what was lawful before

One email to info@3dpartgo.com is enough for any of these. We answer within a month, and we do not charge for it.

If you think we handle your data wrongly, you can complain to the Latvian data protection authority, Datu valsts inspekcija.

Questions

Write to info@3dpartgo.com. We work Mon-Fri, Riga time, and normally reply on the next working day.