MakerCommand Privacy Policy

Section 1

Introduction

This privacy policy explains how MakerCommand collects, uses, stores and protects personal information when you use our website and platform.

MakerCommand is a multi-tenant SaaS platform that provides quoting, order management, and payment processing services for 3D printing businesses.

Where MakerCommand provides services to independent print farms using our platform, we may act as a data processor on behalf of those farms. In those cases, the relevant print farm is the data controller and is responsible for determining the lawful basis for processing customer data.

Section 2

Contact Details

Section 3

What Information We Collect

We may collect and process the following personal information:

• Names and contact details (including email address)
• Shipping and billing addresses
• Purchase and order history
• Payment references and transaction identifiers
• Uploaded 3D model files and associated technical metadata
• Communications sent to us

Section 4

How We Use Personal Information

We use personal information to:

• Provide quoting and order management services
• Process payments via Stripe Checkout
• Deliver transactional emails
• Generate shipping labels and provide tracking
• Maintain platform security
• Prevent fraud and abuse
• Comply with legal obligations

Section 5

Lawful Bases

We rely on the following lawful bases under UK GDPR:

Contract
We process personal information where it is necessary to enter into or perform a contract with you.

Legal obligation
We process personal information where necessary to comply with legal and regulatory obligations, including tax and accounting requirements.

Legitimate interests
We process certain information to maintain platform security, prevent fraud, improve our services, and protect our business, provided this does not override your rights.

Section 6

Where We Get Information From

We collect personal information directly from you when you use our website and services.

Section 7

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.

Order and transaction records are generally retained for up to 6 years for tax and accounting purposes.

For detailed retention periods, please see our retention schedule at:
https://makercommand.com/data-retention

Section 8

Who We Share Information With

We share personal information with the following categories of data processors:

Stripe (Payment Processor)
Stripe processes customer payments, handles fraud detection, and manages Stripe Connect destination charges.

Mailgun (Email Service Provider)
Mailgun delivers transactional emails and stores delivery logs.

Cloud Hosting Providers
We use secure cloud hosting providers located in the UK or EEA to host our servers and databases.

We may also share information with:

• Financial or fraud investigation authorities
• Relevant regulatory authorities (such as HMRC or the ICO)
• Organisations we are legally obliged to share information with

Section 9

International Transfers

Where necessary, we transfer personal information outside the UK.

For example:
Stripe (United States)

Where personal information is transferred outside the UK, we rely on the Addendum to the EU Standard Contractual Clauses (SCCs) and other appropriate safeguards under UK GDPR.

Section 10

Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate information
• Request erasure
• Restrict processing
• Object to processing
• Data portability (where applicable)

To exercise your rights, contact: [email protected]

Section 11

Complaints

If you have concerns about how we use your personal data, please contact us first.

You may also complain to the Information Commissioner's Office (ICO):