Privacy policy

Privacy Policy

Last updated: 3 October 2026

Mimic3DPrint respects your privacy and processes personal data only where necessary to operate our store, fulfil orders, provide customer support, improve our services and comply with our legal obligations.

This Privacy Policy explains what personal data we collect, why we use it, who may receive it, how long we keep it and the rights available to you.

It applies when you visit www.mimic3dprint.it, place an order, contact us, submit a review or otherwise interact with Mimic3DPrint.

1. Data Controller

For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable data-protection law, the controller of your personal data is:

MIMIC 3D PRINT di Tufarolo Francesco
Trading as Mimic3DPrint
Registered address: Via Roma 49, Crotta d'Adda, 26020 CR, Italia
VAT / Tax ID: IT01840440190
Email: info@mimic3dprint.it

Website: www.mimic3dprint.it

2. Personal Data We Collect

Depending on how you interact with our store, we may process the following categories of personal data.

Identification and contact information

This may include:

  • first and last name;

  • email address;

  • telephone number;

  • billing address;

  • shipping address;

  • country or region.

Order and transaction information

This may include:

  • products ordered;

  • selected scale and finish;

  • order value;

  • discounts;

  • shipping method;

  • payment status;

  • order history;

  • returns, refunds or claims;

  • communications relating to an order.

Payment information

Payments are processed through the payment services made available during checkout.

We do not normally receive or store your complete payment-card details.

Payment providers may process information necessary to authorise payments, prevent fraud and complete transactions according to their own privacy policies.

Shipping information

To prepare and deliver an order, we may process:

  • recipient name;

  • shipping address;

  • email address;

  • telephone number where required;

  • parcel information;

  • tracking information;

  • delivery status.

Communications

When you contact us, we may retain:

  • your name;

  • email address;

  • messages;

  • order references;

  • photographs;

  • files or other information you choose to provide.

This may include information supplied for custom or personalised orders.

Review information

If you submit a product or store review, we may process information such as:

  • your name or display name;

  • email address;

  • review content;

  • photographs or other media voluntarily submitted;

  • information used to confirm whether the review relates to a purchase.

Technical and usage data

When you use our website, technical information may be processed, including:

  • browser type;

  • device type;

  • operating system;

  • pages visited;

  • referring pages;

  • approximate geographic information;

  • interaction and session information;

  • cookie or similar technology identifiers.

The precise information collected depends on your privacy choices and the technologies active on the website.

3. How We Receive Personal Data

We may receive personal data:

  • directly from you;

  • when you place an order;

  • when you create or use a customer account;

  • when you contact us;

  • when you submit a review;

  • automatically through your interaction with the website;

  • from Shopify and services integrated with our store;

  • from payment providers;

  • from shipping carriers;

  • from review and customer-service providers where applicable.

We do not intentionally obtain personal data from unrelated third-party databases for the purpose of building marketing profiles.

4. Why We Process Your Personal Data

We process personal data only where we have an appropriate legal basis.

To process and fulfil your order

We use the information necessary to:

  • accept and manage an order;

  • confirm payment;

  • produce the selected product;

  • arrange shipping;

  • communicate about production or delivery;

  • process returns or refunds;

  • provide post-purchase support.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

To provide customer service

We process information when you contact us about:

  • products;

  • orders;

  • dimensions;

  • production;

  • shipping;

  • custom requests;

  • damaged products;

  • returns;

  • other support matters.

Legal basis: performance of a contract, pre-contractual steps and, where appropriate, our legitimate interest in providing effective customer support.

To comply with legal obligations

Certain information may need to be retained or processed for:

  • accounting;

  • taxation;

  • invoicing;

  • consumer-protection obligations;

  • fraud prevention;

  • legal claims;

  • requests from competent authorities.

Legal basis: compliance with a legal obligation.

To protect our business and customers

We may process information where reasonably necessary to:

  • detect or prevent fraud;

  • protect the security of our website;

  • prevent misuse;

  • investigate suspicious transactions;

  • establish, exercise or defend legal claims.

Legal basis: our legitimate interests in protecting our business, customers and systems, provided those interests are not overridden by your rights and freedoms.

To understand and improve our website

Where permitted and, when legally required, after obtaining your consent, we may use analytics technologies to understand:

  • website traffic;

  • pages viewed;

  • navigation behaviour;

  • device categories;

  • approximate visitor location;

  • website performance.

This information helps us understand how customers use the store and improve its usability.

Legal basis: consent where required by applicable law.

To send marketing communications

Where you have requested marketing communications or where another lawful basis applies, we may send information about:

  • new products;

  • studio releases;

  • collections;

  • offers;

  • Mimic3DPrint news.

You can unsubscribe from marketing communications at any time using the unsubscribe option provided or by contacting us.

Opting out of marketing does not prevent us from sending transactional communications necessary for an existing order.

Legal basis: consent or another lawful basis permitted by applicable law.

5. Shopify

Our online store is hosted on Shopify.

Shopify provides the ecommerce infrastructure used to operate the website, process orders and provide related services.

When you browse the store, create an account, place an order or use Shopify-powered functionality, personal data may be processed through Shopify's systems.

Depending on the service and context, Shopify may process information on our behalf or may process certain information independently in accordance with its own privacy terms.

You can learn more about Shopify's privacy practices through Shopify's privacy documentation and privacy controls.

Shopify privacy controls are available at:

privacy.shopify.com

6. Payment Providers

Payments are processed by the payment methods and providers available during checkout.

Payment providers may receive information required to:

  • authorise transactions;

  • process payments;

  • perform security checks;

  • prevent fraud;

  • process refunds.

Mimic3DPrint does not normally receive your complete payment-card information.

The payment provider selected by you may act as an independent controller for some of its processing activities and may apply its own privacy policy.

7. Sendcloud and Shipping Carriers

We use Sendcloud to assist with shipping management and fulfilment.

To create shipping labels, arrange delivery and provide tracking, relevant customer information may be transmitted to Sendcloud and to the carrier responsible for delivering your order.

This may include:

  • first and last name;

  • shipping address;

  • email address;

  • telephone number where required;

  • parcel and order information.

Sendcloud generally processes end-customer shipping data on behalf of merchants when providing its shipping integration.

The selected shipping carrier will also receive the information reasonably necessary to perform delivery.

8. Judge.me Reviews

We use Judge.me to provide product and store review functionality.

If you leave a review or receive a review request, Judge.me may process information including:

  • name or display name;

  • email address;

  • review content;

  • submitted photographs;

  • order or fulfilment information;

  • information used to determine whether a review is associated with a purchase.

Reviews may be publicly visible depending on the information you choose to submit and the review settings applied.

Please avoid including private or sensitive personal information in the text of a public review.

Judge.me may act as a processor or as an independent controller depending on the specific service and interaction.

9. Google Analytics

Where permitted by your privacy choices, we use Google Analytics 4 to understand how visitors interact with our website.

Analytics information may include:

  • pages viewed;

  • events and website interactions;

  • device and browser information;

  • approximate geographic information;

  • traffic source;

  • session information.

Google Analytics 4 may use an IP address temporarily to determine approximate geographic information.

Google states that IP addresses are not logged or stored in Google Analytics after this process.

Where consent is legally required for analytics technologies, we use them only in accordance with the consent choices available through our website.

You can change your cookie and privacy preferences using the controls provided on the website.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some technologies are necessary for the website to function, including functionality relating to:

  • shopping carts;

  • checkout;

  • security;

  • customer sessions;

  • privacy preferences.

Other technologies may be used for:

  • analytics;

  • performance measurement;

  • enhanced functionality;

  • marketing, if enabled.

Where required by law, non-essential technologies are used according to your consent choices.

More detailed information is provided in our Cookie Policy & Preferences page.

You may also be able to change your consent preferences through the privacy controls displayed on the website.

11. Who We Share Personal Data With

We do not disclose personal data without a legitimate reason.

Personal data may be shared where necessary with categories of recipients such as:

  • Shopify;

  • payment service providers;

  • Sendcloud;

  • shipping and postal carriers;

  • Judge.me;

  • Google Analytics, where enabled and permitted;

  • IT and hosting providers;

  • accountants or professional advisers;

  • public authorities where legally required;

  • service providers necessary for the operation of the store.

Only information reasonably necessary for the relevant purpose should be shared.

Service providers processing data on our behalf are required to process it according to applicable contractual and legal requirements.

12. International Data Transfers

Some technology providers used by Mimic3DPrint operate internationally or use infrastructure located outside the European Economic Area.

As a result, personal data may in certain circumstances be processed in countries outside the EEA.

Where a transfer requires protection under the GDPR, the relevant provider or Mimic3DPrint will rely on an appropriate transfer mechanism where required, such as:

  • an adequacy decision adopted by the European Commission;

  • Standard Contractual Clauses approved by the European Commission;

  • other safeguards recognised by applicable data-protection law.

Providers may also use approved subprocessors in different jurisdictions.

13. How Long We Keep Personal Data

We do not intend to retain personal data indefinitely.

Retention depends on why the information was collected and on applicable legal requirements.

Order and accounting records

Information required for accounting, tax and legal documentation may be retained for the period required by Italian law.

Certain accounting records may need to be retained for up to 10 years.

Order history

Information relating to orders may be retained where reasonably necessary for:

  • customer support;

  • warranty and conformity claims;

  • accounting;

  • dispute resolution;

  • fraud prevention;

  • legal obligations.

Customer communications

Communications may be retained for as long as necessary to resolve the request and, where appropriate, to establish or defend legal claims.

Reviews

Published reviews may remain available until they are removed, anonymised or no longer required, subject to applicable rights and the functionality of the review service.

Analytics information

Analytics data is retained according to the retention settings configured in the relevant analytics service and your privacy choices.

Marketing information

Marketing contact information is retained until you unsubscribe, withdraw consent or the data is otherwise no longer necessary, subject to limited retention where necessary to record your opt-out.

Once personal data is no longer required, it will be deleted, anonymised or otherwise handled according to applicable legal requirements.

14. Your GDPR Rights

Where the GDPR applies, you may have the right to:

Access

Request confirmation of whether we process your personal data and receive a copy of relevant data.

Rectification

Ask us to correct inaccurate or incomplete personal data.

Erasure

Request deletion of personal data where the legal requirements for deletion are met.

Restriction

Request that processing be restricted in certain circumstances.

Data portability

Receive certain personal data you provided to us in a structured, commonly used and machine-readable format where the legal requirements apply.

Object

Object to processing based on legitimate interests in certain circumstances.

You also have the right to object to direct marketing at any time.

Withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

Lodge a complaint

You have the right to lodge a complaint with a competent data-protection supervisory authority.

For Mimic3DPrint in Italy, the relevant supervisory authority is:

Garante per la protezione dei dati personali

You may also contact the supervisory authority in your country of residence where applicable.

15. How to Exercise Your Privacy Rights

To exercise a privacy right concerning data processed by Mimic3DPrint, contact:

info@mimic3dprint.it

Please clearly indicate:

  • your request;

  • the email address associated with your order or interaction;

  • any information reasonably necessary to identify the relevant data.

We may request additional information where reasonably necessary to verify your identity and protect customer information from unauthorised disclosure.

We will respond within the time limits required by applicable law.

Some information may not be capable of immediate deletion where retention is required by law or necessary for the establishment, exercise or defence of legal claims.

16. Shopify Privacy Requests

Because the store is powered by Shopify, Shopify may also process personal data associated with your use of its services.

Shopify provides its own privacy-control portal where users can manage certain requests relating directly to data processed by Shopify:

privacy.shopify.com

A request made directly to Shopify does not replace a request to Mimic3DPrint where Mimic3DPrint is the controller responsible for the relevant customer information.

17. Security

We use reasonable technical and organisational measures intended to protect personal data against:

  • unauthorised access;

  • loss;

  • alteration;

  • disclosure;

  • misuse.

We also rely on established service providers for ecommerce hosting, payments and shipping infrastructure.

No online system can be guaranteed to be completely secure.

If we become aware of a personal-data breach, we will assess and manage it in accordance with applicable legal requirements.

18. Automated Processing and Fraud Prevention

Ecommerce, payment and security providers may use automated systems to identify potentially fraudulent, abusive or high-risk activity.

These systems can analyse transaction and technical information for security purposes.

Mimic3DPrint does not use customer information to independently create psychological, behavioural or similarly sensitive profiles of individual customers.

Where a third-party provider performs independent automated processing, its own privacy terms may also apply.

19. Social Media and External Websites

Mimic3DPrint may maintain profiles on third-party platforms such as Instagram, TikTok, Pinterest or other social networks.

If you interact with us through those platforms, the platform provider may process information according to its own privacy policy.

Links from our website to external websites do not make Mimic3DPrint responsible for the privacy practices of those independent services.

20. Children's Privacy

Our online store and collectible products are primarily intended for adult customers and collectors.

We do not intentionally request personal data from children for marketing purposes.

If you believe that personal data relating to a child has been provided to us inappropriately, please contact us so that we can review the situation.

21. Sale or Sharing of Personal Data

Mimic3DPrint does not sell personal data for monetary compensation.

Certain privacy laws use broader definitions of terms such as "sale", "sharing" or "targeted advertising".

Depending on your jurisdiction and on the ecommerce or advertising services enabled on the store, you may have additional opt-out rights.

Where required, relevant privacy controls or opt-out mechanisms will be made available through the website.

22. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect:

  • changes to our website;

  • new service providers;

  • changes to our business practices;

  • changes to applicable law;

  • changes to privacy or ecommerce technology.

The latest version will be published on this page together with its revision date.

Material changes will be communicated where required by law.

23. Contact

For privacy questions or to exercise your rights, please contact:

Mimic3DPrint
Email: info@mimic3dprint.it
Website: www.mimic3dprint.it

Data Controller:

MIMIC 3D PRINT di Tufarolo Francesco
Via Roma 49, Crotta d'Adda, 26020 CR, Italia
IT01840440190