Privacy Policy

This policy covers personal information collected through sm3dlabs.com and orders placed through SM3D Labs. The store is operated by Mass3D Inc. from Kingston, Ontario, Canada, and Mass3D Inc. handles personal information under Canada's Personal Information Protection and Electronic Documents Act.

Customer accounts are optional. If you create one, the account keeps your name, email address, saved shipping address, and order history so you can see fulfillment, tracking, and invoices. You can still check out as a guest.

At checkout we collect what is needed to price, tax, and deliver the order:

• Your name
• Your email address
• Your shipping address, including province and postal code
• Your phone number, if you give one. It is optional and used for delivery
• What you ordered, the totals, any discount or coupon applied, and the tax charged

We also keep whatever you send us by email, and the order records that go with it.

If you create an account, Saleor stores a one-way password hash rather than a readable copy of your password. Password-reset and account-confirmation links contain short-lived credentials and should not be shared.

We never receive your card number, expiry date, or security code. Those go straight to Stripe. What comes back to us is whether the payment succeeded and a payment reference.

If you pay by Interac e-transfer, the transfer arrives through your bank. We see the sender name and email your bank puts on it, the amount, and the reference in the message.

We run no analytics. There is no Google Analytics, no advertising tag, no tracking pixel, and no third-party script watching what you look at. We do not sell or rent personal information, and we do not send marketing email.

Cloudflare serves the site and may set a cookie for security and bot filtering. If you sign in, SM3D Labs sets secure, HttpOnly session cookies so the site can recognize your account. They are not advertising or analytics cookies.

Your cart is kept in your browser's local storage. It stays on your device until you start checkout, when its contents are sent to the store to price and create the order.

To take the order, charge the right amount, calculate tax and shipping, pick and pack, and get the parcel to you.

To answer your email, handle a return, a refund, or a claim with a carrier.

To keep the business records that tax and accounting rules require us to keep.

To catch fraud and misuse. We use it for nothing else.

Only the parties needed to complete the order:

• Stripe, to process card payments. Card details go to Stripe directly and are covered by Stripe's own privacy policy
• The delivery carrier selected for your parcel, which gets the name, address, and phone number needed to deliver it
• Our bank and Interac, for e-transfer payments
• Cloudflare, which serves the site and processes the IP address and request data any web host sees
• OVHcloud, which provides the Canadian server where we operate the store software and keep order records

The store software is Saleor, which we host ourselves. It is not a third-party service and order data is not shared with a store platform.

We will also disclose information where the law requires it, or to establish or defend a legal claim. If the business is ever sold or transferred, order records may go with it.

Order records sit on a self-managed OVHcloud server in Canada.

The site is served from Cloudflare's global network, so the request that loads a page may be handled outside Canada. Stripe processes card payments in the United States and in other countries.

While personal information is outside Canada it is subject to the laws of the country it is in, and the courts and authorities of that country may be able to reach it.

Order records are kept for as long as we need them to fill and support the order, and after that for as long as tax and accounting rules require business records to be kept.

An account remains available until it is deleted or no longer needed. Deleting an account does not erase order, tax, payment, or shipping records that Mass3D Inc. is legally required to retain.

Email is kept for as long as it is useful for support and then deleted.

The site and checkout run over HTTPS. Card numbers never reach our systems. Account session credentials are kept in secure cookies that browser scripts cannot read. Access to order records is limited to the customer who owns the account and the people who fill orders.

No system is perfectly secure and we will not claim otherwise. If a breach affects you, we will tell you and report it as the law requires.

Email seed@mass3d.com and you can:

• Ask what personal information we hold about you and get a copy
• Have anything inaccurate corrected
• Ask us to delete it, other than records we are required to keep
• Withdraw consent for anything that is not needed to complete an order you have already placed

We may need to confirm who you are before acting on a request. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

The store is not aimed at children and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we will delete it.

We can change this policy. Changes take effect when they are published on this page, and the date at the top is updated.

Privacy questions and requests: seed@mass3d.com.

SM3D Labs is operated by Mass3D Inc., Kingston, Ontario, Canada.