Privacy Policy
Effective date: June 5, 2026
This Privacy Policy explains how 3de (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you visit or place an order through this website. By using the site you agree to the practices described below.
Sales region: we currently sell and ship our products only within India. The site is intended for use by residents of India, and orders with delivery addresses outside India will not be fulfilled.
1. Information we collect
Information you provide
- Account details — name, email address, and password (hashed) when you register, or your Google profile basics if you sign in with Google.
- Phone number — when you verify a number over WhatsApp OTP to sign in or to submit an on-demand request.
- Order & on-demand request details — items requested, quantity, sizing/colour notes, design references, and any messages you send us.
- Wishlist activity — products you save while signed in.
- Support correspondence — content of emails or WhatsApp messages you exchange with us.
Information collected automatically
- Device & usage data — IP address, browser type, operating system, referring pages, pages viewed, and timestamps.
- Cookies and similar technologies — used to keep you signed in, remember your session, and measure traffic. See “Cookies” below.
- Analytics & advertising pixels — if enabled in our settings, we use Google Analytics, Google Tag Manager, and the Meta (Facebook) Pixel to understand site performance and audience reach.
2. How we use your information
- To create and secure your account and authenticate you (including OTP and Google sign-in).
- To process, confirm, produce, and ship orders or on-demand 3D-printing requests.
- To contact you about quotes, order status, delivery, or follow-up questions — by email, phone, or WhatsApp.
- To operate features like the wishlist and dashboard.
- To improve the site, troubleshoot issues, and prevent fraud or abuse.
- To comply with legal, tax, and accounting obligations.
3. Legal basis under Indian law
We handle your personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
We process your personal data on one or more of the following bases:
- Your consent, given when you create an account, verify your phone over OTP, place an order, or accept analytics/advertising cookies.
- To fulfil a contract with you — taking your order, producing the item, arranging delivery, handling returns, and providing support.
- To comply with a legal obligation, such as tax, GST, and accounting record-keeping under Indian law.
- For other legitimate uses permitted under the DPDP Act, such as preventing fraud, securing the site, and responding to lawful requests.
You can withdraw consent at any time by contacting us (see Section 12). Withdrawing consent does not affect the lawfulness of processing already carried out, and may prevent us from continuing to provide certain services such as your account or pending orders.
4. Sharing your information
We do not sell your personal information. We share it only with:
- Service providers who help us run the site, such as our hosting provider, email delivery, and storage.
- WhatsApp (Meta Platforms) for OTP delivery and customer messaging via the WhatsApp Cloud API.
- Google if you choose “Sign in with Google,” and for analytics if enabled.
- Logistics partners to ship physical orders to your address.
- Authorities when required by law, court order, or to protect our rights.
5. Cookies
We use a small number of cookies that are necessary for the site to work (for example, your login session and CSRF token). If analytics or advertising tools are enabled, additional cookies may be set by Google or Meta. You can control or block cookies through your browser settings; blocking essential cookies may break login and checkout flows.
6. Data retention
We keep personal information only as long as needed for the purposes described here — typically: account data while your account is active; order and tax records as long as required by law; analytics data per the provider’s standard retention. You can ask us to delete your account at any time.
7. Security
We use HTTPS, hashed passwords, and reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your rights
Under the DPDP Act, as a Data Principal you have the right to:
- Access a summary of the personal data we process about you and the processing activities undertaken.
- Correction, completion, and updating of inaccurate or incomplete data, and erasure of personal data that is no longer needed for the purpose it was collected.
- Grievance redressal — to raise a concern with us about how we handle your data. We will respond within the timelines prescribed under the DPDP Act.
- Nominate another individual to exercise your rights in the event of death or incapacity.
- Withdraw consent at any time for processing that is based on consent.
To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before acting on the request. If you are not satisfied with our response, you may approach the Data Protection Board of India.
9. Children
Under the DPDP Act, a “child” means an individual who has not completed eighteen (18) years of age. We do not knowingly process the personal data of children, or of persons with disabilities who have a lawful guardian, without the verifiable consent of the parent or lawful guardian. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us with personal data without such consent, please contact us so we can delete it.
10. Where your data is processed
We sell and ship only within India, and we expect our users to be residents of India. Your personal data is primarily processed in India. Some of the service providers we rely on (for example, hosting, email delivery, Google sign-in, Google Analytics, the WhatsApp Cloud API, and the Meta Pixel) may process limited data on servers located outside India. Such transfers are only to countries not restricted by the Central Government under the DPDP Act, and we use providers that maintain reasonable security practices comparable to those required by Indian law.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Effective date” at the top will reflect the latest version. Significant changes will be communicated through the site or by email.
12. Contact us & Grievance Officer
If you have questions about this policy, want to exercise your rights, or wish to raise a grievance about how we handle your personal data, you can contact our Grievance Officer at the details below. We will acknowledge your request and respond within the timelines prescribed under Indian law.
- 3de
- Email: support@3de.com
- Phone: +919815501074