Privacy Policy

1. Introduction

‍VantaPrints ("we", "us", "our") values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit and make purchases from our online shop located at www.vantaprints.com ("Website"). We process your data lawfully, fairly, and transparently in accordanceance with the EU General Data Protection Regulation (GDPR) and applicable Maltese data protection laws (including the Data Protection Act, Chapter 586 of the Laws of Malta).

2. Data Controller

‍The entity responsible for processing your personal data (the data controller) is:

info@vantaprints.com

Website: www.vantaprints.com

‍

2. Service Description

‍VantaPrints sells pre-designed 3D printed products through this Website. Customers can often customize Products by selecting available options such as different colours and materials ("Variants") offered on the Product page.

3. Ordering Process

‍a. Placing Orders: Orders are placed exclusively through the shop interface on this Website. You are responsible for accurately selecting Products and Variants, quantities, and providing correct delivery and billing information via the guest checkout process.

b. Order Confirmation: Upon placing an order, you will receive an automated email confirming receipt to the email address provided. This does not constitute fully acceptance. Order acceptance is subject to material or stock availability (See T&C for more).

3. We collect personal data necessary to process your orders via our guest checkout, manage our relationship with you, and operate our Website:

• Identity Data: First name, last name.
• Contact Data: Billing address, delivery address, email address, telephone number(s).
• Financial Data: Payment card details (these are processed directly by our secure third-party payment processors, such as Stripe or PayPal; we do not store your full payment card numbers on our servers), bank account details (only if needed for processing refunds).
• Transaction Data: Details about products and services purchased, order value, order date, fulfillment status, and history associated with your contact details.
• Technical Data: Internet protocol (IP) address, browser type and version, approximate location derived from IP address, time zone setting, operating system and platform, device type.
• Profile & Preference Data: Preferences indicated through product Variant selections (e.g., chosen colours/materials), feedback or survey responses (if you choose to provide them).
• Usage Data: Information about how you navigate and interact with our Website (e.g., pages visited, products viewed, time spent, referring URLs), collected via cookies and analytics tools.
• Marketing and Communications Data: Your preference regarding receiving marketing communications from us (if you opt-in) and records of communications with us (e.g., customer service emails).

4. How We Collect Your Personal Data

• Direct Interactions: When you provide data by placing an order, filling in the checkout form, selecting product Variants, contacting customer support via email or other channels, or opting into marketing communications (e.g., via a checkbox at checkout).
• Automated Technologies: Via cookies and similar technologies (like the Meta Pixel) when you browse the Website. These automatically collect Technical Data and Usage Data. Please see our Cookie Policy below for details.
• Third Parties: We receive transaction confirmation data from payment processors. We receive Technical and Usage data from analytics providers (Google Analytics) and advertising platforms (Meta/Facebook). Delivery couriers provide delivery status updates.

5. Legal Basis for Processing Your Personal Data‍

We process your data only when we have a valid legal basis:

• Performance of a Contract: To fulfill your order (process payment, arrange delivery) and manage pre-contractual requests (like responding to product inquiries).
• Legitimate Interest: For our legitimate business interests, provided they don't override your rights. This includes fraud prevention, website security and administration, analyzing website usage to improve our services, providing customer support, and maintaining business records.
• Legal Obligation: To comply with Maltese and EU laws (e.g., tax laws requiring retention of financial records, consumer protection regulations).
• Consent: To send you direct marketing emails (only if you explicitly opt-in) and to place non-essential cookies and tracking technologies (like Google Analytics and Meta Pixel) on your device (managed via our cookie consent banner).

6. How We Use Your Personal Data

‍Your personal data is used for the following purposes:

• To process and deliver your order, including managing payments and shipping.
• To communicate with you regarding your order (confirmations, shipping updates, potential issues like colour availability).
• To respond to your customer service inquiries.
• To administer, maintain, and secure our Website.
• To analyze website traffic and user behaviour (using tools like Google Analytics) to improve our Website, products, and customer experience. This data is often aggregated or anonymized.
• To measure the effectiveness of advertising campaigns and potentially retarget advertising (using tools like Meta Pixel), subject to your consent choices.
• To comply with legal and regulatory obligations, including financial reporting.
• To send marketing information via email, but only if you have explicitly consented (opted-in).

‍

7. We do not sell your personal data. We share it only when necessary with trusted third parties who help us operate our business and fulfill your orders:

• Payment Processors: (e.g., Stripe, PayPal) to securely process your payment information.
• Delivery Couriers: To deliver your Products to the specified address.
• IT & Web Service Providers: Hosting providers, website platform providers (Webflow), email service providers, analytics providers (Google), advertising platforms (Meta). These providers process data based on our instructions and under contractual obligations.
• Professional Advisors: Lawyers, accountants, auditors, insurers, if legally necessary or required for professional advice.
• Legal Authorities: If required by law, court order, or to protect our legal rights.We take steps to ensure these third parties respect the security and confidentiality of your data and comply with GDPR.

8. Data Storage, Retention, and Security

• Storage: Your personal data is stored on secure servers. While primarily processed within the European Economic Area (EEA), use of certain third-party services (like Google Analytics, Meta) may involve data transfer outside the EEA (see Section 11).
• Retention: We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Order and Transaction Data related to purchases must generally be kept for up to 10 years to comply with Maltese financial record-keeping obligations. Data collected solely based on consent (e.g., for marketing or non-essential cookies) is kept until you withdraw consent or it's no longer needed for the specified purpose.

• Security: We implement appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. Access is limited to personnel who have a business need to know.

9. Your Data Protection Rights (GDPR)

‍Under GDPR, you have the following rights concerning your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure ('Right to be Forgotten'): Request deletion of your data, where there is no overriding legal reason for us to keep processing it (e.g., we may need to retain transaction data for legal compliance).

• Right to Restrict Processing: Request suspension of processing under certain circumstances (e.g., if you contest the data's accuracy).
• Right to Data Portability: Request transfer of certain automated data you provided to us (processed based on contract or consent) to you or another service provider in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on our legitimate interests if you believe your rights override our interests. You also have the absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data (e.g., for marketing emails or non-essential cookies via our consent banner). Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.To exercise any of these rights, please contact us at privacy@vantaprints.com.
• We may need to request specific information from you to help us confirm your identity. We aim to respond within one month.

‍