Privacy Policy

1. Who we are

KB Prints (“KB Prints”, “we”, “us”) operates the website at kbprints.store and sells 3D-printed products and custom printing services. We are the data controller for the personal data described in this policy. You can reach us at contact@kbprints.store.

[Registered business name and postal address to be added here.]

2. What we collect

We use PostHogfor product analytics and session replay — understanding which pages and features people use, and reviewing anonymised recordings of site visits to find and fix problems. Recordings mask all text you type(so form entries aren’t captured), payment fields are handled in Stripe’s own secure frame and are never recorded, and we do not record the checkout, order-confirmation, or staff pages. PostHog respects your browser’s “Do Not Track” / Global Privacy Control signal. We do not use advertising cookies, third-party behavioural trackers, or data brokers, and we do not build marketing profiles about you.

3. Why we use it and our legal basis

• To take and fulfil your order — process payment, print and ship your items, send order confirmation and shipping updates. Legal basis: performance of a contract with you.
• To handle custom quotes — review your model, reply with pricing and lead time, and continue the conversation by email. Legal basis: steps taken at your request prior to a contract, and our legitimate interest in responding to enquiries.
• Customer support — answer questions, resolve issues, process returns and refunds. Legal basis: contract and legitimate interest.
• Fraud prevention and site security — detect and prevent fraudulent transactions and abuse. Legal basis: legitimate interest and legal obligation.
• Accounting and legal compliance — keep records of sales for tax and audit purposes. Legal basis: legal obligation.

4. Who we share it with

We share the minimum data needed with service providers who process it on our behalf under contract:

We also disclose data where required by law, to enforce our terms, or to protect our rights, users, or the public. We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

5. International transfers

Our providers are based in, or process data in, the United States and other countries. Where personal data is transferred out of the UK or EEA, it is protected by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

• Order records— retained for the period required by tax and accounting law (generally 6–7 years) from the date of the transaction.
• Quote requests and uploaded model files— kept while we’re in discussion and for a reasonable period afterwards, then deleted. Ask us to delete an uploaded file sooner and we will.
• Support emails — kept for up to 24 months unless a longer period is needed for a dispute.
• Analytics events and session recordings — retained in PostHog in line with our configured retention, currently up to about 30 days for recordings, then deleted.
• Server logs — retained on a short rolling basis by our infrastructure providers.

7. Cookies and local storage

We keep this deliberately minimal:

• Cart and theme preference— stored in your browser’s local storage on your device only. Not sent to us.
• Staff login session — a single secure, HTTP-only cookie set only when a KB Prints team member signs into the admin area. It is not set for customers.
• Stripe — sets its own cookies during checkout for fraud prevention and to make payment work. See Stripe’s privacy policy.
• PostHog analytics & session replay — sets a first-party cookie and a local-storage entry to hold an anonymous session ID so a visit can be reviewed as one recording. No advertising or cross-site use.

We do not use advertising cookies. Our analytics and session replay set a first-party cookie for an anonymous ID only. If your browser sends a “Do Not Track” or Global Privacy Control signal we honour it and do not track or record you; you can also ask us to exclude you by emailing contact@kbprints.store.

8. Your rights

Depending on where you live, you have some or all of the following rights over your personal data:

• Access a copy of the data we hold about you
• Correct data that is inaccurate or incomplete
• Delete your data (“right to erasure”)
• Restrict or object to how we use it
• Receive your data in a portable format
• Withdraw consent where we relied on it

UK/EU (GDPR): you can exercise these rights by emailing contact@kbprints.store. You also have the right to complain to your local data protection authority (in the UK, the ICO).

California (CCPA/CPRA):you have the right to know what we collect, to delete it, to correct it, and to opt out of “sale” or “sharing” of personal information — though we do neither. We will not discriminate against you for exercising any right.

We respond to verified requests within the timeframe required by applicable law (typically 30–45 days).

9. Security

The site is served over HTTPS. Payment card data is handled entirely by Stripe, a PCI-DSS Level 1 certified provider. Access to order and customer data is limited to KB Prints staff who need it, protected by authentication and stored with our infrastructure providers under their security controls. No system is perfectly secure, but we take reasonable steps to protect your data and will notify you and the relevant authority of a breach where legally required.

10. Children

Our site and products are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us their data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when. Material changes will be highlighted on this page.

12. Contact

Privacy questions or requests: contact@kbprints.store.