Privacy Policy

Why and Who?

Truform3D Ltd (trading as Truform) cares about your privacy and is committed to protecting all Personal Data it handles.

This Privacy Policy describes how and why we collect and use your Personal Data, the lawful basis for doing so, and the measures we take to protect it. It also outlines your rights in relation to our Processing of your Personal Data.

Truform3D Ltd, registered in England & Wales (Company No. 16483245), with its registered office at 85 Great Portland Street, First Floor, London, W1W 7LT (referred to as Truform, we, us, our), is the Controller of the Personal Data described in this Policy.

This Policy applies to the handling of Personal Data when you engage with us, use our services, or visit our website (collectively, the Functions).

Data Subjects and Storage Time

We retain Personal Data based on its purpose and our legal obligations, as follows:

  • Users of our Services: Data is stored for the duration of service use and thereafter only as needed for legal compliance (e.g. error handling).
  • Potential Customers: Data is stored while assessing mutual interest in an agreement.
  • Employees of Potential Customers: Data is retained for the time required to establish potential working relationships.
  • Employees of Existing Customers: Data is stored for the duration of service provision and to meet legal obligations.

Definitions

Applicable Law: UK GDPR and related national data protection laws, along with guidance from the Information Commissioner’s Office (ICO).

Commissioner: The UK Information Commissioner’s Office.

Controller: The entity determining why and how Personal Data is processed.

Data Subject: Any living individual whose Personal Data is processed.

Personal Data: Any information relating to an identifiable person.

Processing: Any action performed on Personal Data (e.g., storing, using, deleting).

Processor: A third party processing Personal Data on our behalf.

Services: Truform’s design, manufacturing and 3D printing consultancy services.

UK GDPR: Retained UK version of the General Data Protection Regulation (EU) 2016/679.

Truform’s Role as Controller

This Policy applies to Personal Data for which Truform acts as the Controller. When we determine the purposes and means of Processing, we are fully responsible for how your Personal Data is handled.

This Policy does not cover instances where we act as a Processor on behalf of our clients.

Our Processing of Personal Data

We are transparent about what we collect, how we use it, and why. The lawful bases we rely on include:

Legal Basis

  • Consent: When you voluntarily give us permission to process your data.
  • Performance of a Contract: When data is required to provide our services or prepare to do so.

Types of Data We Process

  • Contact information to verify your identity and communicate with you
  • Usage data to improve the quality of our services
  • IP address to analyse customer behaviour and optimise website performance
  • Behavioural data to personalise content and offers

How We Collect Your Personal Data

We collect data:

  • Directly from you when you contact or interact with us
  • Through cookies and similar technologies
  • Through insights derived from data analysis

Your Rights

You have the following rights:

  • Access – Request details about how we process your data
  • Rectification – Request correction of inaccurate information
  • Erasure – Request deletion of data no longer required
  • Objection – Challenge processing based on legitimate interest or opt out of direct marketing
  • Restriction – Request limitations on how your data is processed
  • Data Portability – Receive your data in a structured, machine-readable format
  • Withdraw Consent – Revoke any previously granted permission for future processing

To exercise your rights, contact us at legal@truform.uk.

Transfer of Personal Data

We strive to process data within the UK or EU/EEA. When data is transferred outside these regions, we ensure safeguards are in place:

  • USA – Transfers are based on Standard Contractual Clauses
  • Canada – Transfers are based on an adequacy decision by the European Commission

All third-party processors are bound by Data Processing Agreements (DPAs).

We may also disclose Personal Data to legal or regulatory authorities where required.

Our Processors

We never sell your data. In certain cases, we may share your data with:

  • IT service providers for cloud storage, systems and communication tools
  • Analytics providers for service improvement and internal insights

All recipients are required to follow strict confidentiality and data protection standards.

Security Measures

We apply both organisational and technical measures to safeguard your Personal Data.

Organisational Measures

  • Secure password and account management
  • Internal data access policies

Technical Measures

  • Encryption
  • Access control
  • Firewalls
  • Regular security reviews
  • Two-factor authentication

Cookies

We use cookies and similar technologies to enhance your experience and analyse website usage. Please see our Cookie Policy for more details.

If We Fall Short

If you believe we’ve mishandled your data, please contact us directly. If you’re not satisfied with our response, you can lodge a complaint with the Information Commissioner’s Office:

Changes to This Policy

We may update this Policy from time to time. If changes affect your rights or how we process your data, we’ll inform you beforehand.

Contact

For all privacy-related queries, please fill in our web form.