Privacy Policy

Forge3D is operated by ForgeTechX Limited, a company registered in Ireland (company no. 815122). ForgeTechX Limited is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) and the Data Protection Acts 1988 to 2018.

Registered office: Berkeley Court, South Douglas Road, Cork, Ireland.

Contact: support@forge3d.ie. For privacy requests, please email support@forge3d.ie with "Data Protection" in the subject line.

We collect the following personal data, based on the features we actually operate.

Account data. When you create an account, we collect your email address, display name, phone number and postal address. You may also add a profile picture.

Order and delivery data. When you place an order, we collect the name, email, phone number, billing address and shipping address you enter at checkout. We also keep the items ordered, the order total and the order status.

Custom design data. When you order a personalised or custom product, we collect the content you send us. This may include photos (for example for lithophanes), names and text, logos, artwork, 3D files, sketches, measurements, and design notes or instructions. Photos may show you or other people. Please only send content you have the right to use, and that the people shown are happy for you to share.

Payment data. We do not store your full card details. Payments are processed by Revolut, which receives your card data directly. We only keep the order reference and payment status that Revolut sends back to us.

Support messages. If you use our support chat, we store your user ID, your messages, the issue type, and who sent each message (you or our team).

Newsletter subscriptions. If you subscribe to the Forge Insider newsletter, we store the email address you submit.

Notifications. We store in-app notifications sent to your account (for example order updates), including the title, message and whether you have read it.

Technical data. When you visit our website, our hosting and security providers automatically process technical data. This includes your IP address, browser and device type, the pages you request, and the date and time of your visit. We use this to run, secure and protect the website.

Where your data comes from

• Directly from you, when you create an account, place an order, send us a design, subscribe or contact us.
• Automatically, from your device when you use our website, including through essential cookies.
• From our service providers, for example payment status from Revolut and delivery updates from our couriers such as AnPost.

What you must provide

To place an order, you must provide your name, email address, contact number and delivery address. We cannot process or deliver your order without them. For custom orders, we need the design content needed to make your product. All other information, such as a profile picture, is optional.

Performance of a contract. We use your data to create and fulfil your order, make your custom product, manage your account, process payment, and deliver to your address. This covers account, order, custom design, delivery and payment data.

Consent. We use your consent for the newsletter and marketing emails. We also ask for your separate consent before using any photo of your finished product or your design in our portfolio, website or social media. You can withdraw consent at any time (see section 6). This does not affect any processing that took place before you withdrew it.

Legitimate interests. We use your data to prevent fraud and abuse, keep our website secure, answer support enquiries, and improve our products and store. We balance these interests against your rights and only use your data in ways you would reasonably expect.

Legal obligation. We keep invoices and accounting and tax records for the period required by Irish law. We also respond to lawful requests from authorities.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects on you.

We only share your personal data where it is needed to run our service. We do not sell your personal data.

Service providers (processors). These companies act on our instructions and only use your data to provide their service to us:

• Base44: website hosting, accounts.
• Cloudflare: website security, database, protection and delivery.
• Base44: sending order emails and the Forge Insider newsletter.

Independent recipients. These organisations use your data under their own privacy policies:

• Revolut: payment processing. See Revolut's privacy policy at revolut.com.
• Couriers and postal services: AnPost/DPD. We share your name, address and phone number so they can deliver your order.
• Our accountants and professional advisers, where needed for accounting, tax or legal purposes.

Other cases. We may also share your data:

• with public authorities, courts or law enforcement where the law requires it;
• to protect our rights, our customers or others, or to enforce our terms;
• if our business is sold, merged or restructured, with the new owner, who must continue to protect your data in line with this policy.

• Account data: while your account is active. We delete it within 30 days of account closure, unless we need to keep some of it for the reasons below.
• Order, invoice and tax records: 6 years from the end of the financial year they relate to, as required by Irish tax and company law.
• Custom design files and photos: 90 days after your order is delivered, so we can handle any reprints or issues. After that, we delete them. If you ask us to keep them for future reorders, we will keep them until you ask us to delete them.
• Support messages: 2 years after your last message.
• Notifications: while your account is active.
• Profile picture: until you remove it or close your account.
• Newsletter subscriptions: until you unsubscribe.
• Technical and security logs: for a short period, as set by our hosting and security providers.

Under the GDPR, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data in certain circumstances.
• Restriction: ask us to limit how we use your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests, or to direct marketing at any time.
• Withdraw consent: for any processing based on consent, at any time.

To use any of these rights, email support@forge3d.ie. We may ask you to confirm your identity before we act on your request. We will reply within one week. If your request is complex, we may extend this by up to 3 more weeks, and we will tell you if we do.

Unsubscribing. You can unsubscribe from the newsletter and marketing emails at any time by using the unsubscribe link in any email, or by emailing us. We will still send you emails about your account and orders.

Complaints. You have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland. Phone: +353 1 765 0100. Email: info@dataprotection.ie. Web: www.dataprotection.ie.

We would welcome the chance to address your concern first, so please contact us at support@forge3d.ie.

Some of our service providers (for example Base44 and Cloudflare) may process personal data outside the European Economic Area (EEA). When this happens, we rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or on Standard Contractual Clauses approved by the European Commission, or another recognised safeguard, to protect your data.

We take reasonable technical and organisational steps to protect your personal data. Data is encrypted when it moves between your device and our website. Only staff who need your data to do their work can access it. We only use trusted service providers.

No system is completely secure, so we cannot guarantee absolute security. Please keep your account login details private, and tell us straight away if you think your account has been accessed without your permission.

We use the following cookies on forge3d.ie.

Essential cookies. These are needed for the site to work, for example to keep you logged in, remember the items in your cart, and protect the site from attacks. Our security provider (Cloudflare) and our payment provider (Revolut) may also set essential cookies. These cookies do not need your consent.

Analytics, advertising and other non-essential cookies. We do not currently use any analytics, advertising or other non-essential cookies. If we add them in future, we will ask for your consent through a cookie banner before setting them. You will be able to withdraw that consent at any time.

You can manage or delete cookies in your browser settings. If you block essential cookies, parts of the site will not work.

Some of our products may include NFC tags or QR codes. These usually link to a web address that you choose, such as your website or social media profile. We do not track who scans or taps your product.

When a scan opens another website, that website's own privacy policy applies.

Our website and products may link to websites run by other companies, such as social media platforms. We do not control those websites and are not responsible for their privacy practices. Please read their privacy policies before sharing your data with them.

Our services are intended for people aged 16 and over. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. If you are a parent or guardian and believe your child has given us personal data, please email support@forge3d.ie and we will delete it.

We may update this policy to reflect changes to our services or to the law. We will post the new version on this page and update the "Last updated" date. If the changes are significant, we will also tell account holders by email or with a notice on our website.

For any question about this policy or your personal data, please contact:

ForgeTechX Limited (trading as Forge3D)
Berkeley Court, South Douglas Road, Cork, Ireland
Email: support@forge3d.ie