Privacy Policy
Last updated: [16/10/2025]
1. Who we are
This website is operated by Xumi3D.
Production is based in Belgium.
Our retail office and customer contact address is:
Taikos ave. 13B
LT-51124 Kaunas
Lithuania
Contact email: info@xumi3d.eu
We act as the data controller for personal data collected via our website, orders, and customer support.
2. What data we collect
Identity & contact data:
Name, email address, phone number (if provided), billing and shipping address.
Order details:
Products purchased, order notes, totals, currency, payment status.
Payment data:
Payments are processed by our payment provider(s). We do not store full card details.
Delivery data:
Carrier details and tracking information.
Website usage data:
IP address, device/browser type, pages viewed, cookies (see Section 8).
Support & communications:
Content of emails, forms, and attachments you send us.
3. Why we use your data (lawful bases – GDPR)
We process personal data based on the following legal grounds:
-
To process your order and deliver products, including updates and tracking
(performance of a contract) -
To provide customer support and handle replacements
(performance of a contract / legitimate interests) -
To prevent fraud and secure our website
(legitimate interests / legal obligation) -
To comply with tax, accounting, and consumer protection laws
(legal obligation) -
(Optional) To send marketing emails about new products or offers
(consent – only if you opt in) -
(Optional) To analyse website performance and improve user experience
(consent where required)
4. Sharing your data
We share only what is necessary with trusted service providers:
-
Payment processors/gateways (to process payments)
-
Shipping and logistics partners (e.g. bpost, PostNL, other EU carriers)
-
Hosting, IT, and security providers
-
Professional advisers and authorities when required by law
We do not sell your personal data.
5. International transfers
Our primary operations are within the European Union.
If a service provider processes data outside the EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).
6. Data retention
-
Order records: retained as required for accounting and legal obligations (typically 7–10 years)
-
Support communications: up to 24 months after resolution unless legal reasons require longer
-
Marketing data: until you unsubscribe or withdraw consent
-
Cookies/analytics: see Section 8 for typical lifetimes
7. Your rights (GDPR)
Under the GDPR, you have the right to:
-
Access your data
-
Correct inaccurate data
-
Request deletion
-
Restrict processing
-
Data portability
-
Object to certain processing activities
-
Withdraw consent at any time (where consent is the legal basis)
To exercise your rights, contact:
info@xumi3d.eu
You also have the right to lodge a complaint with your local Data Protection Authority.
In Belgium:
Gegevensbeschermingsautoriteit (GBA)
https://www.gegevensbeschermingsautoriteit.be
8. Cookies & consent
Our website uses cookies to operate properly and may use optional cookies with your consent.
Necessary cookies
Required for core functions (cart, checkout, login).
Functional cookies
Remember preferences such as language or currency.
Analytics cookies (optional)
Help us understand traffic and improve the website (only set after consent).
Marketing cookies (optional)
Used only with your explicit consent.
When you first visit our website, a cookie banner requests your consent.
You can change or withdraw consent at any time via your browser settings or the cookie banner (where available).
Non-essential scripts (e.g. analytics) are loaded only after consent.
9. Security
We implement appropriate technical and organisational measures to protect personal data, including:
-
HTTPS / TLS encryption
-
Access controls
-
Secure hosting
-
Regular backups
While no system is 100% secure, we continuously monitor and improve our safeguards.
10. Children
Our website is not intended for children under the age of 16.
We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us so we can delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time.
The version published on this page applies from the “Last updated” date shown above.
12. Contact
For questions regarding this Privacy Policy or your personal data, contact: