Privacy Policy

Who we are

SixthLayer (“we”, “us”, “our”) is a UK 3D-printing business operated by a sole trader trading as SixthLayer. We are the “data controller” responsible for your personal data under the UK GDPR and the Data Protection Act 2018.

You can contact us about privacy at any time by email at info@sixthlayer.co.uk.

What we collect

Depending on how you use the site, we may collect:

• Your name, email address and delivery/billing address.
• The contents of your order and your order history.
• Messages you send us through the contact or custom-order forms.
• Any model files you upload for a custom order (e.g. STL, STEP, OBJ, 3MF).

Payments are processed by Stripe. We never see or store your full card details — Stripe handles card data on its own secure systems.

How and why we use it

We use your personal data to:

• Process, fulfil and deliver your orders and quotes.
• Respond to your enquiries and provide customer support.
• Meet our legal and tax obligations.
• Protect against fraud and keep the shop running securely.
• Send you marketing — only if you have opted in.

Our legal bases

Under UK GDPR we rely on:

• Contract — to take and fulfil your order.
• Legal obligation — to keep tax and accounting records.
• Legitimate interests — to run and secure our business and prevent fraud.
• Consent — for marketing emails, which you can withdraw at any time.

Who we share it with

We only share your data with the services needed to run the shop:

• Stripe — payment processing.
• Royal Mail — delivery and tracking.
• Resend — sending order, enquiry and (if opted in) marketing emails.
• Render — website hosting.

These providers process data on our behalf under their own security and privacy terms. We never sell your personal data, and we only disclose it otherwise where the law requires it.

Cookies & storage

We use only essential first-party browser storage to make the shop work — for example, remembering the items in your basket and keeping track of your checkout session. We do not use advertising or analytics cookies. When you pay, Stripe sets its own cookies on its checkout pages under Stripe’s privacy policy.

How long we keep it

• Order and financial records: 6 years, to meet UK tax and accounting requirements.
• Custom-order model files you upload: kept only to fulfil your order and deleted within 90 days of completion. We do not reuse or share them.
• Enquiry messages: kept only as long as needed to deal with your query.
• Marketing contact details: until you unsubscribe.

Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Ask us to erase your data, where we’re not required to keep it.
• Receive your data in a portable format.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent to marketing at any time.

To exercise any of these, email info@sixthlayer.co.uk. If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.