Privacy policy.

1. Who we are

COMPLETE 3D is a trading name of RAM Peripherals Ltd, a private limited company registered in England and Wales (Company No. 02231837), with registered office at 14 Lombard Road, Merton, London, SW19 3TZ. We are the data controller for personal data collected through this website.

2. What we collect

We collect only what we need to do business with you. Specifically:

• Quote form data: name, email, optional phone and company, your project notes, the parameters you configured (material, colour, quantity, etc.), and any 3D model file you upload.
• Account data: email, name, password (stored as a salted hash by our authentication provider — we never see the plaintext), and your trade-account flag if applicable.
• Technical data: server logs at our hosting providers (IP address, browser, page URL, timestamp) for security and abuse prevention. We do not run analytics cookies.

3. Why we collect it (lawful basis)

• Contract (UK GDPR Art. 6(1)(b)) — to fulfil quote requests and orders you place with us.
• Legitimate interest (Art. 6(1)(f)) — to follow up on quote enquiries, prevent fraud, and improve our services.
• Legal obligation (Art. 6(1)(c)) — for tax, accounting, and other statutory record-keeping.

We do not currently send marketing email and we don't run advertising on this site, so we don't process personal data on the basis of consent for marketing.

4. Where it's stored

Personal data is stored with our hosted-database provider (Supabase, EU/Frankfurt region) and our transactional-email provider (Resend, EU). Uploaded model files sit in our object-storage bucket on the same Supabase region. We do not transfer your data outside the UK / EEA.

5. How long we keep it

• Quote requests: 24 months from submission, then archived or deleted.
• Account data: for as long as you have an account; deleted within 30 days of account closure.
• Order & financial records: 7 years (HMRC requirement).
• Server logs: 90 days.

6. Cookies

We use a single browser-storage entry to remember your dark/light theme preference, and our authentication provider stores a session token while you're signed in. We don't use analytics, advertising, or tracking cookies. There is no consent banner because there's nothing to consent to.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you (a "subject access request").
• Have it corrected if inaccurate.
• Have it deleted ("right to be forgotten"), subject to our legal record-keeping obligations.
• Object to processing or request restriction.
• Receive a portable copy of your data.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these, email support@ram-peripherals.co.uk. We aim to respond within one calendar month as required by law.

8. Changes to this policy

If we materially change how we handle personal data, we'll update this page and bump the version date at the top. For users with an account, we'll also email you about significant changes.

9. Contact

Questions, requests, or complaints about this policy:
support@ram-peripherals.co.uk
RAM Peripherals Ltd · 14 Lombard Road · Merton, London · SW19 3TZ

This policy is a plain-English summary of our actual practice. It is not legal advice; we recommend any business adapt it with help from a solicitor before relying on it.