Privacy policy

This policy explains how M & R 3D Printing collects, uses, and protects your personal information. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Last updated: [FILL: date]

What we collect

We collect the minimum we need to fulfil your order and run the business:

Identity & contact: Name, email, phone, billing and shipping addresses.
Payment: Card payments are processed by Stripe — we don't store your full card number. Stripe gives us a token + the last 4 digits for receipts.
Order history: Items you bought, when, and at what price.
Files you upload: STL / OBJ / 3MF files you send for custom print jobs.
Site analytics: Anonymised page views and basic interaction data (no personally identifying tracking).
Communications: Emails you send us and our replies.

We don't collect more than necessary. We don't sell or rent your data to anyone.

Why we collect it

To process and ship your order
To answer your questions and provide support
To send order-related transactional emails (receipts, tracking, dispatch notifications)
To keep records for tax (we're required to retain transaction records for 7 years under Australian tax law)
To improve the site (aggregated, anonymised analytics only)

We only send marketing emails if you've opted in (e.g. via a newsletter signup). You can opt out at any time via the unsubscribe link in any marketing email — required under the Spam Act 2003.

Who we share it with

We share your data only with service providers we need to operate, and only the minimum required:

Stripe — payment processing
Australia Post — shipping
Email provider — to send transactional emails ([FILL: e.g. our SMTP runs via Uplink Web Services])
Uplink Web Services — our hosting provider, based in Australia

We don't share your data with advertisers, data brokers, or third-party analytics platforms that track you across the web.

Where it lives

All your data is stored on Australian servers operated by Uplink Web Services, located in Sydney. Backups are stored encrypted and retained for 30 days.

Stripe stores payment data in their PCI-DSS-compliant infrastructure, which may include US and EU regions.

Your rights

Under the APPs, you can:

Access the personal information we hold about you
Correct anything inaccurate
Delete your account and associated data (subject to legal record-keeping requirements for completed orders)
Complain to us first, then to the Office of the Australian Information Commissioner if you're not satisfied with our response

Email info@mandr3dprinting.com.au for any of the above. We'll respond within 30 days.

Cookies

We use minimal cookies — only what's required for the cart and login session. No advertising cookies. No cross-site tracking.

Children

We don't knowingly collect data from children under 13. If you believe we have, email us and we'll delete it.

Changes to this policy

We'll update this page if our practices change. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated to active customers by email.