Privacy Policy

Lunia 3D Ltd · Company No. 12582551 · ICO Registration No. ZC221698 · 12 Stadium Close, Cardiff CF11 8TS, Wales

Last updated: 17 August 2026

Lunia 3D Ltd (“Lunia 3D”, “we”, “us”) is the data controller for the personal information described in this policy. We are registered with the Information Commissioner’s Office under registration reference ZC221698. This policy covers www.lunia3d.co.uk and our instant quote and ordering system at quote.lunia3d.co.uk.

If you have any question about it, email info@lunia3d.co.uk or call 0330 043 2414.

In short

We collect what we need to quote your parts, make them, deliver them and get paid.
Your 3D files are treated as confidential. We do not share them, publish them or use them for anything other than making your parts.
We do not sell your data to anyone.
Our quote tool measures visitors without cookies and without storing anything that identifies you.
Advertising and analytics cookies are only set if you agree to them.

1. What we collect, and why

When you browse our website

Standard information your browser provides: pages viewed, approximate location, device and browser type, referring site, and the date and time. This is used to understand how the site is used and to keep it working.

Our website is built on Wix. Wix sets cookies that are necessary for the site to function, and may collect standard traffic information. See Wix’s own privacy notice for details.

When you use the instant quote tool

The 3D files you upload (.stl, .obj, .3mf, .step) — to measure the part and calculate a price, and to make it if you order.
Measurements taken from those files — size, volume and surface area, to price the part and plan the build.
A small image of the part — so we and you can identify it on quotes, orders and job sheets.
Your name, email address, phone number and company — to send you your quote, confirm your order and contact you about it.
Delivery and invoice address — to get the parts to you and raise an invoice.
Notes you add to an order — to make the part the way you need it.

You can get a price without giving us any personal information at all. Details are only asked for at the point of ordering, or when you ask us to email you a quote.

When you create an account

We store your email address, name, phone number, company, addresses and your order history. Signing in works by a six-digit code emailed to you — we do not store passwords. The code is valid for 10 minutes. A successful sign-in sets a session cookie that lasts up to 60 days, or until you sign out.

When you place an order

We additionally hold your order, the parts on it, the price, the delivery method, and how it was paid for.

Card payments are handled entirely by Stripe. Your card details are entered on Stripe’s own secure payment form. We never see or store your card number.
Account customers paying by purchase order: we store your PO number and, if you attach one, the PO document, so our accounts team can raise the invoice against it.

Advertising attribution

If you reach our quote tool from a Google advert, the click identifier and campaign details are stored with your order so we can tell which advertising is worth paying for. It is attached to the order, not to a profile of you.

Visitor statistics on the quote tool

Our own quote tool counts visitors without cookies and without storing your IP address. Each day we create a one-way cryptographic hash of your IP address and browser, mixed with a secret and the date. It cannot be reversed to identify you, and because the date is part of it, the same visitor produces a completely different value tomorrow. We use it only to count how many people looked, not to follow anyone.

2. Cookies and similar technologies

Session cookie (m3d_session) — set by us, keeps you signed in to the quote tool. Lasts up to 60 days.
Consent choice — set by us, remembers whether you accepted analytics and advertising cookies. Kept until cleared.
Saved basket — stored on your device only, keeps the parts you were quoting if you close the tab. Up to 30 days.
Google Analytics and Google Ads — set by Google, measuring which pages and adverts lead to orders. Up to 2 years.
Wix functional cookies — set by Wix, running the main website. Lifetime varies.

Analytics and advertising cookies are switched off until you accept them. We use Google Consent Mode: until you agree, no advertising or analytics identifiers are stored on your device. You can change your mind at any time by clearing your browser’s site data for our domains, or by using your browser’s cookie controls.

Necessary cookies — the ones that keep you signed in and keep the basket working — cannot be turned off without breaking the service.

3. Your 3D files

This matters more than anything else in this policy, so it is written out plainly.

Your files are confidential. We treat every model as commercially sensitive whether or not you ask us to.
We do not share, publish, sell or licence your models, and we do not use them to make parts for anyone else.
We use them only to quote, make, inspect and deliver your parts, and to answer questions about the order afterwards.
Files are stored on our own systems with access limited to Lunia 3D staff who need them for your job.
We will show a photograph of a finished part on our website or social media only with your permission.
If you need a formal agreement, see our Non-disclosure & IP policy — we are happy to sign your NDA.

Deleting your files. Email info@lunia3d.co.uk quoting your order number and we will delete the model files. We keep the order record itself — reference, price, materials, dates — because we are legally required to retain accounting records.

4. Who we share information with

We use a small number of trusted suppliers to run the business. Each only receives what it needs.

Stripe — card payments.
Twilio SendGrid — sending quotes, order confirmations and sign-in codes.
Railway — hosting the quote and ordering system.
Wix — hosting www.lunia3d.co.uk.
Google (Analytics, Ads) — website statistics and advertising measurement, only with your consent.
Intuit QuickBooks — invoicing and accounts.
Royal Mail, DHL and other carriers — delivering your parts.

We may also share information with our accountants and professional advisers, or where we are required to by law.

We never sell your personal information, and we do not share your 3D files with any of the above.

Some of these suppliers are based outside the UK. Where information is transferred internationally it is protected by the UK’s approved safeguards — an adequacy decision, the UK International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum.

5. How long we keep it

Orders, invoices and accounting records — 6 years after the end of the relevant financial year, as UK tax law requires.
3D model files — while your job is live and afterwards so we can repeat it. Deleted sooner on request.
Quotes that were never accepted — 12 months, so we can pick the conversation back up.
Account details — while your account is open, and for 6 years after your last order.
Sign-in codes — 10 minutes.
Sign-in sessions — up to 60 days.
Visitor statistics — aggregated counts only. The daily hash cannot be traced back to a person.

6. Legal bases

Under UK GDPR we rely on:

Performance of a contract — quoting, making and delivering your parts, and taking payment.
Legitimate interests — running and improving the service, preventing fraud and abuse, keeping records of quotes, and measuring which advertising works. We have considered your rights in each case and use the least intrusive method that works, which is why our own visitor statistics are cookieless.
Consent — analytics and advertising cookies, and any marketing email. You can withdraw consent at any time.
Legal obligation — keeping accounting and tax records.

7. Your rights

You have the right to:

ask what personal information we hold about you and get a copy;
have inaccurate information corrected;
ask us to delete information we no longer need;
object to, or ask us to restrict, certain processing;
receive your information in a portable format;
withdraw consent at any time, where we rely on it.

Email info@lunia3d.co.uk and we will respond within one month. There is no charge.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office, the UK’s data protection regulator, with whom we are registered under reference ZC221698 — ico.org.uk, 0303 123 1113 — though we would appreciate the chance to put it right first.

8. Security

All traffic to our website and quote tool is encrypted in transit (HTTPS).
Card details never touch our systems; payment is handled by Stripe.
Access to customer records and files is limited to Lunia 3D staff who need it.
Sign-in is by one-time emailed code, so there is no password of yours for us to lose.

No system is perfectly secure, and we cannot guarantee the security of information sent over the internet. If a breach ever affects your rights we will tell you and the ICO as the law requires.

9. Children

Our services are aimed at businesses and adults. We do not knowingly collect information from anyone under 18. Where we run workshops involving young people, arrangements are made directly with the school or organisation.

10. Other websites

Our site links to other websites. We are not responsible for their content or their privacy practices — please read their policies before giving them your information.

11. Changes to this policy

We may update this policy from time to time. The date at the top always shows when it last changed. Material changes will be highlighted on this page.

Contact

Lunia 3D Ltd
12 Stadium Close, Cardiff CF11 8TS, Wales
info@lunia3d.co.uk · 0330 043 2414
Company No. 12582551 · ICO Registration No. ZC221698

Visits to our premises are by appointment only.