Privacy policy

How Flintform handles your personal data under UK GDPR — short, honest and free of legalese.

What we collect

Only what's needed to make and deliver your prints: your name, email address and delivery address from checkout, the model files you upload, and any emails you send us. If you use the chat or the "Ask the workshop" assistant, we also keep those messages, and the email address you give us there if you ask us to follow up. We don't ask for anything else.

Why we collect it

To fulfil your order — the legal basis is performance of a contract. We use your details to print, pack, post and support your order, and for nothing else without asking first.

How long we keep it

Uploaded model files are kept while we may still need them to reprint or support your order, and deleted whenever you ask — just email us and we'll remove them. Chat and assistant conversations are kept so we can pick up where we left off if you come back. Order records (who bought what, when, for how much) are kept for six years as required for UK tax records.

Marketing

We won't send you marketing emails unless you've explicitly opted in, and you can withdraw consent at any time. Order emails (confirmations, dispatch notices) aren't marketing — they're part of fulfilling your order.

Cookies & tracking

No third-party tracking cookies, no ad pixels, no cross-site tracking — which is why you don't see a cookie banner. The only browser storage we use is strictly necessary: a session cookie when you sign in to your account, a short-lived security cookie during Google sign-in, storage remembering the items in your quote basket, and security cookies our hosting network (Cloudflare) may set to protect the site.

Privacy-friendly analytics

To understand how the site is used, we count page views and a few conversion steps (for example, how many visitors reach checkout) using our own first-party, cookie-less analytics. It stores nothing on your device and sets no cookie. To count visits without identifying you, our server derives a one-way hash from your IP address and browser type using a secret that is rotated and destroyed within days; your IP address itself is never stored, and the hash can't be reversed or used to recognise you on another day or another website. We may also record technical error messages (with personal details automatically stripped) so we can spot and fix faults. Because none of this stores information on your device for a non-essential purpose, no consent banner is required — but if you'd prefer we didn't count your visits at all, email us and we'll exclude you.

Who we share data with

Only essential processors: Stripe processes card payments on its own secure pages (we never see your card details), Brevo delivers our order and account emails, Google handles sign-in only if you choose "Continue with Google", Anthropic powers the "Ask the workshop" assistant, and our hosting network (Cloudflare) carries the site's traffic. We don't sell or share your data with anyone else.

On the assistant specifically: when you send it a message, that message and the recent conversation are sent to Anthropic to generate a reply. Under Anthropic's commercial API terms, messages sent this way are not used to train their models. Your uploaded model file is never sent — only measurements taken from it on our own server, such as its size in millimetres and how many grams it will use, so your design itself stays with us. If you would rather not use it at all, just email us instead; nothing on the site requires the assistant.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it — just email [email protected]. We'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.