Skip to main content

    Privacy Policy

    Effective August 2, 2026

    1. Who we are

    Grove3dprints ("we", "us") operates Grove3dprints, a 3D printing shop based in Florida, United States. This policy explains what personal information we collect, why we collect it, and how you can exercise your privacy rights.

    2. Information we collect

    We collect: (a) contact information you provide (name, email, phone, shipping address) when you order or contact us; (b) order and payment details required to fulfill purchases; (c) technical information (IP address, browser type) captured in server logs and rate-limit records for security and fraud prevention; (d) analytics data only if you consent to non-essential cookies.

    3. How we use your information

    We use your information to fulfill orders, respond to inquiries, prevent fraud, comply with legal obligations, and — where you have opted in — send occasional updates about new products.

    4. Sharing and service providers

    We share personal information only with the service providers needed to run the shop: Square (hosted checkout, payment processing, receipts and order records — Square collects your name, email, shipping address, and card details directly, and we never receive or store card numbers), Resend (delivery of transactional and reply emails), and our cloud database provider (contact and custom-request messages, order records, and short-lived rate-limit records). We do not sell or share personal information for advertising or targeted advertising, and we honour Global Privacy Control signals automatically.

    5. Your rights (CCPA/CPRA, GDPR)

    Depending on your jurisdiction, you may have the right to access, correct, delete, or receive a portable copy of your personal information, and to opt out of sale/sharing of personal information. Submit a request through our data request form at grove3dprints.com/privacy-request, or by emailing grove3dprintsanddesign@gmail.com with the subject line "Privacy Request". We acknowledge requests promptly and respond within 30 days; where a request is complex we may extend once by a further 45 days and will tell you before we do. To protect your data, we verify your identity in proportion to the request — an email confirmation for opt-outs, and two matching data points (for example your email plus an order number) for access, correction, or deletion. We will not ask for more information than is needed to verify you. Deletion requests cannot remove records we are legally required to retain, such as completed sales receipts.

    6. Children (COPPA)

    Grove3dprints is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child provided us information, contact us and we will delete it.

    7. Retention

    Order records, including name, email, and shipping address, are kept for 7 years to meet tax and bookkeeping obligations. Contact and custom-request messages are kept for 24 months and then deleted. Rate-limit records containing IP addresses are kept for 30 days. Cookie choices are stored only in your browser and remain until you clear them or change your choice.

    8. Security

    Payments run through a PCI DSS-certified processor and we never store card numbers on our servers. Our site is served over HTTPS with HSTS, X-Content-Type-Options, and Referrer-Policy headers. A Content-Security-Policy and X-Frame-Options cannot be set on this static single-page build; see our Security Practices page for the full picture.

    9. Contact

    Questions about this policy? Email grove3dprintsanddesign@gmail.com.

    10. What we hold

    Data collected by Grove3dprints, its purpose, processors, and retention period
    DataWhy we need itWho processes itHow long we keep it
    Order detailsTo make and ship your piece, and to answer questions about itSquare (payments and receipts) and our cloud database7 years, for tax and bookkeeping records
    Name, email, shipping addressTo deliver your order and send order updatesSquare and our cloud database7 years alongside the order record
    Card detailsPaymentSquare only — never sent to or stored by usHeld by Square under its own retention policy
    Contact and custom-request messagesTo quote and reply to your requestOur cloud database and Resend (email delivery)24 months, then deleted
    Cookie choicesTo remember whether you allowed analytics or marketing cookiesYour browser's local storage onlyUntil you clear it or change your choice
    Rate-limit records (IP address)To stop spam and abuse of our public formsOur cloud database30 days

    You can ask for a copy, a correction, or deletion at any time through our data request form, and you can change your cookie choices any time from the Cookie Settings link in the footer. See our Security Practices page for how this data is protected.