Privacy policy

Who is responsible

Yorick 3D is responsible for processing your data. If you have questions about your privacy, contact:

What data I collect and why

Your account

For an account, we ask for your name, email address and a password. We store that password in encrypted form, so we can't read it ourselves. You can also enter a phone number and address, and if you're ordering for a business, the company name, Chamber of Commerce number, VAT number and a separate email address for invoices. We use that data to handle your requests and orders, deliver them and issue invoices. The legal basis is our contract with you.

You can log in with your password, a login code or link we email you, or a passkey. If you enable two-step verification, we store its key in encrypted form. A login code is only valid for a short time; we delete expired codes every night.

Custom requests

In your request, you tell me what you'd like printed: a description, a link to a model if you have one, the size, colour, quantity and your budget. You can attach photos, sketches or files. Those files are private: nobody but you and us can open them. We use this to send you a proposal with a price and delivery time, and to make the item. The legal basis is the contract or the steps taken before entering into it.

Orders

When you place an order, we record your name, company name if applicable, email address, phone number and delivery address, along with what you order and when you paid. We need this to deliver your order and issue invoices, and we're legally required to keep our business records.

Feedback

You can leave a rating and a comment using the button on the side of the site. We record the page you were on, and your email address if you enter it so we can reply. If you're logged in, we link the comment to your account. We use feedback to improve the site and the shop; that's our legitimate interest.

Email

We email you about your request, your order and logging in. Before we store an email address, we check whether it can receive email, so a typo doesn't go unnoticed. We track whether each email we send has been delivered. We delete that data after 30 days.

Technical data

To keep you logged in and the site secure, we store your IP address and browser type for each session. If something goes wrong on the site, we receive an error report with details of what happened, including your IP address and, if you're logged in, your account. This helps us fix the error. We also record who changes requests and other data in the shop, and when. That's our legitimate interest: a site that works and is secure.

Cookies

We use functional cookies, which are needed for the site to work: to keep you logged in, secure forms and remember your cookie choice (12 months). These don't require consent.

With your consent, we use Google Analytics to see how visitors use the site. Without your consent, Google Analytics won't load. You can change or withdraw your consent using the cookie button at the bottom left or the cookie settings.

Third parties

A few services work on our behalf and process your data as part of that. We have agreements with them about security, and they may not use your data for their own purposes.

• the hosting provider for the server that runs the website and database;
• Amazon Web Services, for storing photos and the files you send with a request;
• Mailtrap, which sends our emails;
• Sentry, which collects error reports from the website;
• Google, for Google Analytics (only with your consent) and the site's fonts. Your browser loads these from Google's servers, which receive your IP address in the process.

Some of these providers are American. If this means your data is transferred outside the European Union, this is done under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. We only share your data with anyone else if the law requires us to.

How long we keep data

• Your account and requests: for as long as your account exists. If you delete your account, your requests are deleted too.
• Orders: seven years, as required by tax law. This also applies if you delete your account.
• Deleted files: permanently removed after 30 days.
• Records of sent emails: 30 days.
• Login codes: until they expire, then deleted overnight.

Security

The site only works over a secure connection (https). We store passwords in encrypted form, and files attached to a request can only be opened via a temporary link after logging in. Only Yorick de Jong can access your data as an administrator. If you think there's a security issue, email us straight away.

Your rights

You can access your data, have it corrected or deleted, object to its use, or ask to receive it in a file. You can do a lot yourself: you can update your details in your settings, where you can also delete your account. For anything else, email info@yorick3d.nl. We'll reply within a month.

If you're unhappy with how we handle your data, please let us know. You can also lodge a complaint with the Dutch Data Protection Authority.

Changes

If we change how we handle data, we'll update this statement. You can see at the top when it was last updated.