Privacy Policy

Who we are

TALL Creations is a family-run 3D printing business based in Taunton, Somerset, United Kingdom. This policy explains what personal data we collect through TALL Creations's website, why we collect it, and what rights you have over it. If you have any questions, email us at hello@tallcreations.co.uk.

What we collect

Depending on how you use the site, we may collect:

• Order details: name, email, phone (optional), and delivery address, so we can fulfil and ship your order.
• Account details: if you create an account, your name, email, phone, and a securely hashed password. We never see or store your plain-text password.
• Contact form messages: your name, email, and message content, so we can reply to you.
• Payment information: handled entirely by Square (see below). We do not receive, see, or store your full card details on our own servers.

Why we collect it

We use your information to take and fulfil orders, respond to enquiries, prevent fraud, and meet our legal obligations (for example, UK tax law requires us to keep financial records, including order records, for at least six years). Where we rely on your consent (such as creating an account), you can withdraw it at any time by asking us to delete your account.

Payments

Card and Apple Pay payments are processed directly by Square, a PCI-compliant payment processor. Your card details are sent straight from your browser to Square; they never pass through or get stored on our servers. Square's own privacy policy governs how they handle that data; see squareup.com/uk/en/legal/general/privacy.

Cookies

This site only uses cookies that are strictly necessary for it to work. We don't use analytics, advertising, or cross-site tracking cookies of any kind. Specifically:

• Session cookie: remembers your shopping cart and keeps you signed in, if you have an account.
• CSRF cookie: a security cookie that protects forms on the site from being submitted by malicious third-party sites.
• Square & Cloudflare Turnstile: if you pay by card/Apple Pay, or submit the contact form, Square's and Cloudflare's own scripts may set cookies as part of fraud prevention and spam protection. These are set by them, not us, only while you're actively using that specific feature.

Because none of these are used for tracking, advertising, or analytics, we're not required to show a cookie consent banner under UK rules, but we wanted to be upfront about exactly what's in use.

Who we share data with

Square (payment processing), our web hosting provider, and Cloudflare (spam protection on the contact form), only as needed to run the site and fulfil orders. We do not sell your data to anyone, and we don't share it for marketing purposes.

Your rights

Under UK GDPR, you can ask us to:

• Give you a copy of the personal data we hold about you
• Correct any inaccurate details
• Delete your account and personal data ("right to be forgotten")
• Restrict or object to how we use your data

To exercise any of these rights, email hello@tallcreations.co.uk. Note that we may need to keep certain order records even after an account is deleted, where we're legally required to (e.g. for tax purposes); in that case we retain only what the law requires, and remove everything else.

Children

This site is not directed at children, and we do not knowingly collect data from anyone under 13 years old.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect the latest version.

Contact us

TALL Creations, Taunton, Somerset, United Kingdom.
Email: hello@tallcreations.co.uk