Last updated: [date]
[Entity legal name] ("Mandarin 3D", "we") runs mandarin3d.com. This policy explains what we collect, why, who we share it with and how long we keep it.
What we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, email, password (stored hashed), phone | Your account, order updates, support |
| Order details | Shipping address, items, material, price, messages | Making, shipping and supporting orders |
| Your 3D files | Uploaded models and the sliced files we make from them | Quoting and printing your order |
| Payment details | Handled by Shopify; we see the card brand, last 4 digits and billing ZIP | Payments, refunds, fraud prevention |
| Printer details (Printers only) | Legal name, business name, address, tax ID, bank details (collected by Stripe), test prints, ratings | Approving Printers, payouts, tax reporting |
| Usage data | Pages visited, device and browser, IP address (used briefly, see "Analytics" below) | Security, keeping the site working, basic analytics |
We don't knowingly collect information from children under 13, and you must be 18 to use Mandarin 3D.
How we use it
To quote, make, ship and support orders; pay Printers; prevent fraud and prohibited items; meet tax, legal and accounting duties; improve the service; and, if you opt in, send marketing email (you can unsubscribe in any email).
We don't sell your personal information or your files, don't share them for targeted advertising, and don't use your files to train AI models.
Who we share it with
| Who | What | Why |
|---|---|---|
| The Printer assigned to your order | Your file and the details needed to print it; your name and shipping address on the label | Making and shipping your order |
| Shopify | Payment details, your order, name, email and shipping address | Checkout, payments, refunds, receipts |
| Shipping carriers and label providers ([USPS / EasyPost / Shippo]) | Name, address, phone, parcel details | Delivery |
| Service providers ([hosting, database, email, file storage, error tracking]) | What they need to run their service for us | Running the site |
| Tax authorities and law enforcement | What the law requires | Legal duties, or to protect people from harm |
| A buyer of the business | Everything, under this policy | If the business is sold |
Printers may only use your file and details to complete your order and must delete files within [7] days of shipping.
How we protect your files
Files are stored privately and encrypted at rest. A Printer can download a file only for a job assigned to them and only until it ships; we log every download. Staff access is limited and protected by multi-factor authentication. No system is perfectly secure; if a breach affects your information we'll tell you as the law requires (in Florida, within 30 days).
How long we keep it
| Data | How long |
|---|---|
| 3D files | Deleted [90] days after delivery, unless you save them to your account |
| Order and payment records | [7] years (tax and accounting) |
| Account details | Until you delete your account, then [30] days |
| Printer tax records | As long as tax law requires |
| Server logs | [90] days |
| Analytics (see "Analytics") | 13 months, then daily totals only |
Your choices and rights
You can view and update your account, download or delete saved files, and close your account at any time from Settings, or by emailing orders@mandarin3d.com. We'll respond within [30] days. Some records (like orders and tax records) we must keep even after you close your account. If you live in a state that gives you extra privacy rights, email us and we'll honor them as the law requires.
Analytics
Mandarin 3D runs its own simple analytics on mandarin3d.com. It's first-party: the data goes only to our own server, never to Google, Meta or any other analytics or advertising company.
- No cookies and nothing stored on your device. No cookies, local storage or fingerprinting.
- What we record: the page you view, the site that sent you (like a search engine) and any campaign tag in the link, screen size class (phone, tablet or desktop), how long the page was open and how far you scrolled, and steps like uploading a file, seeing a price or starting checkout. We don't record file names, what you type or anything you upload.
- No IP addresses stored. To count unique visits we combine your IP address and browser name with a random key that changes every day, and keep only the scrambled result. The key is deleted daily, so a visit can't be traced back to you or linked to another day.
- Do Not Track and Global Privacy Control are honored: with either on, nothing is sent.
- Retention: detailed records are deleted after 13 months; we keep only daily totals after that.
We also count visits from search engines and AI crawlers by their published names, which involves no personal data.
Cookies
We use cookies only where needed to log in and keep your cart, and never for analytics or advertising.
Changes
We'll post changes here and email you about important ones.
Contact
[Entity legal name], [street address], orders@mandarin3d.com.