Privacy notice

Spraggs3D is the trading name of Natalie Spragg, a sole trader, who is the controller of your personal information. Our postal address is in clause 1 of our terms.

For any question about your data, to use a right below, or to make a complaint, email enquiries@spraggs3d.com or use the enquiry form.

When you send an enquiry: your name and email address; your company name and phone number, if you give them; the sector, quantity, target date and message you write; any CAD files you attach, with their names and sizes. We use these to reply and to prepare a quotation. Our lawful basis is legitimate interests: answering a business request for a quotation. You can object at any time.

When you place an order: your contact and billing details, what you ordered, and our quotations and invoices to you. We use these to make and deliver your parts, take payment and keep the records tax law requires. Our lawful bases are the contract with you and our legal obligations.

When you visit the site: our hosting provider handles your IP address, browser and the pages you request to serve the site and keep it secure. To stop abuse of the enquiry form we store a one-way hash of your IP address with your enquiry, not the address itself. Our lawful basis is legitimate interests: running a safe, working website.

Analytics: we count visits with Vercel Web Analytics: the page, the referring site, your country, and your device, browser and operating system. It sets no cookies, stores nothing on your device and does not track you across other sites; a visitor is recognised only by a hash of the request that is discarded after a day. Our lawful basis is legitimate interests: knowing which pages are useful. The back office is not counted.

CAD files usually sit alongside commercially confidential design information, and we treat them accordingly. We do not sell your information, use it for marketing without your consent, or make decisions about you by automated means.

We use these service providers. They act on our instructions, under contracts that require them to keep your information secure and use it only for the service they provide to us.

• Vercel: website and application hosting, and visitor analytics (USA and EU)
• Neon: the database that stores enquiries, customer and job records (London, UK)
• Cloudflare: storage for uploaded CAD files (EU) and DNS
• Resend: sends enquiry alerts to us, and quotes and invoices to customers (USA)
• Zoho: our email inbox (UK)

We also share information when we have to: with HMRC and our accountant for tax, with professional advisers, or with the police or courts where the law requires it.

Some of these providers store information outside the UK. When they do, it stays protected in one of the ways UK law allows: the country is approved by UK regulations as giving adequate protection (this includes EEA countries, and US organisations certified under the UK Extension to the EU-US Data Privacy Framework), or the provider uses the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Ask us if you want the details for a particular provider.

• Enquiries that do not lead to an order, and the files attached to them: deleted 90 days after the enquiry is closed.
• Customer and job records, and the files for orders: kept while you remain a customer. Your account is closed and these records deleted two months after your last order.
• Invoices: kept for as long as HMRC requires, currently at least five years after the 31 January Self Assessment deadline for the tax year they fall in.
• The hashed IP address: kept with the enquiry and deleted with it.

You have the right to ask for a copy of your information, to have it corrected, to have it deleted, to restrict how we use it, to object to our use of it where we rely on legitimate interests, and to receive information you gave us in a portable format. Some rights have limits; if we cannot do what you ask, we will tell you why.

Email enquiries@spraggs3d.com. There is no charge. We reply within one month, and may ask for proof of identity first. If a request is complex we can extend that by up to two more months, and we will tell you if we do.

If you are unhappy with how we have used your information, tell us first by email to enquiries@spraggs3d.com or through the enquiry form. We will acknowledge your complaint within 30 days, look into it properly and tell you the outcome.

You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

The public site sets no cookies while it is open to everyone. Our cookie policy lists the few the site needs.

Our services are for businesses and are not aimed at children. We do not knowingly collect information about anyone under 13.

We update this notice when what we do changes. The date at the top shows the latest version.