Last updated: 19 October 2026.
Who we are
3DSIII makes personalised MX number board light boxes in Yorkshire and sells through 3dsiii.com.
The controller responsible for your personal information is 3DSIII, at 34 Turnberry Avenue, Ackworth, Pontefract, WF7 7FB, United Kingdom. For privacy questions, email [email protected] or write to that address.
Information we use
We use the information needed to quote, make, deliver and support your order: your name, email, delivery and billing details, order reference, rider name, race number, design choices, uploaded artwork and messages you send us. A name or design may relate to someone you are buying for; please only supply information and artwork you are entitled to use.
Stripe handles payment details through its hosted checkout. Our website does not collect or store your full card number or security code. We receive payment status, transaction references and the customer details needed for the order.
Our hosting and security services also process technical information such as IP addresses, browser information and request records. The site uses a hashed, time-bucketed IP identifier to limit repeated checkout and delivery-quote requests.
Why we use it
- Orders and enquiries: to respond to you, calculate delivery, process payment, make your design and arrange delivery. Our basis is taking steps at your request before a contract and performing that contract.
- Accounts and legal duties: to keep required transaction records and comply with legal requests. Our basis is legal obligation.
- Security and disputes: to prevent abuse, protect orders, investigate problems and establish or defend claims. Our basis is our legitimate interest in running a secure business and resolving disputes.
We need the requested order and delivery details to fulfil a purchase. Without them, we may be unable to accept or deliver it. We do not sell your personal information or automatically add purchasers to a marketing list.
Service providers
We share relevant information with Stripe for payments and fraud prevention; Cloudflare for website hosting, private order and artwork storage, security and transactional order emails; Parcel2Go for delivery quotes and arrangements; and the selected courier for delivery. Quotes use destination and parcel information; booking delivery requires recipient details. We may also disclose records to professional advisers or authorities when necessary and lawful.
If you contact us through Facebook or another external platform, that provider also handles your information under its own privacy notice. Links do not automatically send your order details to those platforms.
International processing
Stripe and Cloudflare operate internationally, including in the United States. Their data-processing terms describe the transfer mechanisms they use, including applicable adequacy arrangements and standard contractual clauses with the UK Addendum where required. See Stripe's data-transfer terms and Cloudflare's data-processing terms.
Parcel2Go and delivery partners may share delivery information internationally to transport your parcel. Parcel2Go's privacy notice explains its overseas processing and safeguards. The delivery destination determines which overseas carriers and customs authorities need recipient details. Contact us for further information or a copy of relevant safeguards.
How long we keep information
We decide how long information is needed according to its purpose:
- Order and financial records: for the accounting and tax record-keeping period applicable to the transaction, and while needed for an unresolved payment dispute or legal claim. The relevant financial year, statutory record-keeping rules and applicable claim limitation period determine this period.
- Personalisation, artwork and support messages: while needed to make and deliver the lamp, resolve an enquiry or provide an outstanding repair, replacement or dispute remedy. Artwork is not kept for unrelated marketing or future orders without a separate reason.
- Incomplete orders: while needed to complete or reconcile a pending payment, deal with a failed attempt or investigate suspected misuse. An abandoned checkout alone is not a reason to retain details indefinitely.
- Technical and security records: while needed to operate request limits, investigate incidents and protect the service. Provider logs and backups also follow the relevant provider's retention arrangements.
When those purposes end, information should be deleted or anonymised, unless law or an active dispute requires it to be retained. You can contact us to request deletion or ask about the retention decision for your records. We will explain if a legal obligation prevents deletion.
Your choices and rights
Depending on the circumstances, you can ask to access, correct, erase, restrict or receive a portable copy of your information. You can object to processing based on legitimate interests. Contact us using the details above. Rights are subject to legal conditions; we may need to retain records we are legally required to keep.
If we rely on consent for a separate optional use, you can withdraw it without affecting earlier lawful use. Buying a lamp does not give us permission to publish your personalisation or photos for advertising.
You can complain to the Information Commissioner's Office or an applicable local data protection authority. You can contact us first if you would like us to help resolve a concern.
Cookies and website storage
The shop keeps your bag in page memory; refreshing the page clears it. Essential local storage remembers your advertising consent choice for up to 180 days. Cloudflare uses authentication cookies for the private owner dashboard, and Stripe may use cookies and similar technologies on its hosted checkout for payment and fraud prevention.
If you choose Allow advertising tracking, we load the Meta Pixel to measure visits, additions to the bag, checkout starts and confirmed paid purchases from Facebook and Instagram advertising. Meta receives technical browser information, IP address, page URLs, browser/ad identifiers, public product identifiers, an opaque transaction identifier for duplicate prevention, and transaction value/currency. We do not pass rider names, race numbers, uploaded artwork, contact details, card details or order access tokens as Pixel event fields. Automatic advanced matching and automatic event detection are not enabled by our integration.
Meta may set advertising cookies such as _fbp and _fbc, commonly lasting up to three months, and may link these events with information it holds about you. Your browser and Meta's settings affect the identifiers and duration. A session storage marker helps avoid counting the same purchase twice and lasts for the browser session. Purchase tracking depends on your consent, the browser allowing the Pixel and a return to the confirmation page; it is not our payment or order record.
Our basis for this optional advertising tracking is consent. Choose Reject advertising tracking to continue shopping without it. You can change your choice at any time using Cookie settings on public shop and policy pages. Withdrawing consent stops further events from our integration and removes the Meta cookies we can access; it does not undo information already sent to Meta.
Meta Platforms Ireland Limited processes advertising information under its privacy policy and Business Tools Terms. Meta may process information internationally, including in the United States, under the transfer arrangements described in those documents. Contact us for questions about our use of the Pixel.
Changes
We will update this notice if our practices change. The published version will show its last-updated date.