Harle Tech GDPR Privacy Policy
Last Updated: September 2026
This Privacy Policy explains how Harle Tech (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website or purchase custom 3D printed and laser-engraved products from us. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are (Data Controller)
For the purposes of the UK GDPR, Harle Tech is the data controller responsible for your personal data.
- Business Name: Harle Tech
- Address: 99 Ivinson Road, Darwen, Lancashire, BB3 3AW
- Contact Email: info@harle.tech
- Phone Number: 07789 486154
2. The Personal Data We Collect
Because we specialise in personalised 3D printing and laser engraving, we collect and process data required to produce and deliver your custom orders. This includes:
- Identity Data: Your full name and title.
- Contact Data: Delivery address, billing address, email address, and telephone number.
- Customisation Data: Specific names, text, dates, or messages provided for custom engraving or printing.
- Photographic Images: Customer-provided photos, graphics, or digital files uploaded or emailed to us for producing personalised gifts (e.g., photo-etched prints, engraved plaques, or custom 3D models).
- Transaction & Payment Data: Details about products purchased and payment status. (Note: Payment details are processed directly by our secure third-party payment gateways; we do not store full card numbers).
- Technical & Usage Data: IP address, browser type, device information, and site browsing activity collected via cookies.
3. How We Use Your Data & Our Legal Basis
Under the UK GDPR, we must have a legal basis to process your personal data:
| Purpose / Activity | Type of Data | Legal Basis for Processing |
| Order Processing & Fulfilling: Processing payments, personalised printing/engraving, and delivering items. | Identity, Contact, Customisation Data, Photographic Images | Contractual Necessity (to fulfil your order). |
| Custom Artwork & Image Processing: Adjusting uploaded photos or designs to prepare 3D print or laser engraving files. | Photographic Images, Customisation Data | Contractual Necessity (to produce your personalised gift). |
| Customer Support: Contacting you via phone or email regarding order queries, design proofs, or delivery updates. | Identity, Contact, Customisation Data | Contractual Necessity & Legitimate Interests (providing good customer service). |
| Site Functionality & Security: Managing our online store and protecting against fraud. | Technical & Usage Data | Legitimate Interests & Legal Obligations. |
| Marketing Communications: Sending news, discounts, or updates (if opted in). | Identity, Contact | Consent (you may opt out at any time). |
4. Handling of Uploaded Photos and Custom Files
- Usage: Any photographic images or designs you submit will be used strictly for the purpose of creating, previewing, and manufacturing your custom product.
- Deletion: Uploaded images and custom 3D design files are retained only for as long as necessary to complete your order, handle potential replacements/returns, or manage repeat orders (typically [e.g., 30 to 90 days] after fulfilment), after which they are permanently deleted from our temporary production servers.
5. Sharing Your Personal Data
We do not sell, rent, or trade your personal data. We only share necessary information with trusted third-party service providers who assist in operating our store:
- Delivery & Courier Services: (e.g., Royal Mail, DPD) to deliver your orders (Name, Delivery Address, Phone Number).
- Payment Processors: (e.g., Stripe, PayPal, Shopify Payments) to securely process payments.
- IT & Web Hosting Providers: To securely host our e-commerce platform and file storage.
All third parties are contractually obligated to handle your data securely and in compliance with UK GDPR.
6. Data Retention
We retain your order-related personal data (e.g., names, addresses, invoice details) for as long as required by law, including tax and legal reporting obligations (typically up to 6 years). Photographic images and custom artwork files are deleted sooner, as outlined in Section 4.
7. Your Rights Under UK GDPR
Under UK data protection laws, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request corrections to incomplete or inaccurate data.
- Right to Erasure (“Right to be Forgotten”): Request that we delete your personal data (subject to legal obligations).
- Right to Restrict or Object: Limit or object to how we process your personal data.
- Right to Data Portability: Request transfer of your data to another provider.
To exercise any of these rights, please contact us at [Your Contact Email].
8. Cookies
Our website uses essential cookies to enable online shopping functionality (e.g., maintaining your shopping basket). Non-essential cookies (such as analytics) are used only with your consent via our website cookie banner.
9. How to Complain
If you have concerns about how we handle your data, please contact us first so we can resolve the issue. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues:
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
See our legal trust centre for information on our other policies.