Privacy policy

Last updated: May 29, 2026

PolyGons operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). PolyGons is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how ThreeDe OÜ ("we", "us", or "our") collects, uses, and discloses your personal information when you visit, use, or make a purchase from our store or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

1. Data Controller

For the purpose of the General Data Protection Regulation (GDPR) and applicable Estonian data protection laws, the data controller is:

  • Company Name: ThreeDe OÜ

  • Registry Code: 17490356

  • Location: Estonia

  • Email: polygons.info@gmail.com

2. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), we must have a valid legal basis to process your personal data. We rely on the following legal bases depending on the activity:

  • Performance of a Contract: To process, print on demand, pack, and deliver your orders, and to handle any customer service requests related to your purchases.

  • Compliance with Legal Obligations: To fulfill our statutory duties under Estonian accounting, bookkeeping, and tax laws (e.g., retaining invoices for 7 years).

  • Your Explicit Consent: For sending newsletter emails, promotional SMS messages, or using non-essential tracking cookies (e.g., Facebook Pixel, Google Analytics). You can withdraw your consent at any time.

  • Our Legitimate Interests: To protect our website and business from fraud, prevent malicious activities, optimize our online store layout, and understand customer shopping behaviors to improve our products.

3. Personal Information We Collect

We collect personal information about you from various sources listed below. The types of data depend on how you interact with our website.

A. Information You Provide Directly to Us:

  • Contact Details: First and last name, shipping address, billing address, email address, and phone number.

  • Account Information: Username, password, security settings, and saved preferences.

  • Order & Transaction Details: Items added to your cart, items on your wishlist, products purchased, custom printing requests, and details of returns or exchanges.

  • Customer Support Communications: Any text, images, or details you share when you email us or contact us via contact forms.

B. Information Collected Automatically:

When you visit our website, certain technical data is sent from your browser or device automatically via Shopify:

  • Device Data: IP address, operating system, browser type, device type (mobile/desktop), and unique device identifiers.

  • Usage Data: Time and date of your visit, pages viewed, time spent on specific pages, search terms used, and your path through our store.

C. Information from Third Parties:

  • Payment Gateways: Confirmation of successful or failed payments (we never see or store your full credit card numbers).

  • Shipping Partners: Tracking updates, delivery status, and delivery confirmations.

4. How We Use Your Personal Information

We use your data strictly for legitimate business purposes:

  • Order Fulfillment: To print your custom items on demand, handle secure payment transactions, and print shipping labels.

  • Customer Support: To answer your questions, resolve shipping delays, or process returns.

  • Marketing & Promotions: To send you updates about new 3D printed collections, discount codes, or abandoned cart reminders (only if you have consented).

  • Security & Prevention: To cross-check orders for potential fraud or security breaches.

5. Sharing and Disclosure of Personal Data

We do not sell your personal data. To run our store and deliver your products, we share your information with trusted third-party service providers who act as data processors:

  • Shopify Inc.: Our e-commerce platform host, which processes all website data, customer registries, and cart actions.

  • Logistics & Delivery (Omniva / AS Eesti Post): We pass your name, phone number, email, and shipping address/parcel machine preference to Omniva so they can transport and deliver your packages.

  • Payment Providers (e.g., Maksekeskus, Stripe, PayPal): To securely process your financial transactions at checkout.

  • Analytics & Marketing Tools (Google Analytics, Meta/Facebook): To monitor store traffic, ad conversions, and performance. These providers may combine this data with info they collected elsewhere.

  • Legal Authorities: We will disclose data if legally required by Estonian or European law enforcement, courts, or tax authorities (Maksu- ja Tolliamet).

6. International Data Transfers

Because our store is hosted by Shopify, your personal data may be transferred to, stored, and processed outside the European Economic Area (EEA), including in Canada and the United States.

To ensure your data remains completely safe and compliant with GDPR, Shopify utilizes the European Commission’s Standard Contractual Clauses (SCCs) and is certified under data protection frameworks that guarantee an equivalent level of security.

7. Automated Decision-Making

Our platform host, Shopify, uses automated decision-making and profiling to prevent fraudulent activities that could harm our business or customers:

  • Fraud Screening: Shopify’s automated system analyzes your IP address, device metadata, and billing details to flag high-risk transactions.

  • This automation does not have a legal effect on you unless your order is automatically cancelled due to a high risk of fraud. If your transaction is falsely declined and you believe it was an error, you have the right to contest the decision and ask for a manual review by contacting us at polygons.info@gmail.com.

8. Cookies and Tracking Technologies

Our website uses Cookies to function correctly, remember your preferences, and track marketing data.

Essential Cookies (Strictly Necessary):

These are required for core website features, such as maintaining your login session, keeping items in your shopping cart, and securing the checkout process. These cannot be disabled.

Analytical and Marketing Cookies (Optional):

These help us count visits, see which items are most popular, and measure the success of our ads. These are only loaded if you click "Accept" on our cookie consent banner.

  • You can manage or block cookies directly via your web browser settings at any time, but please note that disabling cookies may cause some features of our store to stop functioning correctly.

9. Data Retention

We retain your personal data only as long as necessary to achieve the goals stated in this policy:

  • Customer Account Data: Kept until you request the deletion of your account.

  • Order Records & Invoices: Retained for 7 years following the end of the financial year of the transaction, as strictly required by the Estonian Accounting Act (Raamatupidamise seadus).

  • Marketing Subscriptions: Kept until you click the "Unsubscribe" link in our emails.

10. Your Legal Rights Under GDPR

As a resident of the European Union, you hold strong rights regarding your personal data. You can exercise these at any time by emailing us at polygons.info@gmail.com:

  • Right to Access: You can ask for a full copy of all personal data we hold about you.

  • Right to Rectification: You can demand that we correct any incorrect or incomplete information.

  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your data (except where we are legally obligated to keep it, such as tax invoices).

  • Right to Restrict or Object to Processing: You can demand that we stop processing your data for specific purposes (like direct marketing).

  • Right to Data Portability: You can request that we export your data in a clean, machine-readable format to transfer to another company.

  • Right to Withdraw Consent: If you signed up for our newsletter, you can withdraw consent instantly via the "Unsubscribe" button.

We will respond to any verified rights requests within 30 days free of charge.

11. Right to File a Complaint

If you believe that ThreeDe OÜ is processing your personal information unfairly or in violation of GDPR laws, you have the right to lodge an official complaint with your local supervisory authority.

In Estonia, the competent authority is:

  • Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)

  • Tatari 39, 10134 Tallinn, Estonia

  • Website: www.aki.ee

  • Email: info@aki.ee

12. Changes to This Privacy Policy

We may update this policy occasionally to match changes in our working methods, shipping carriers, or European regulations. The "Last updated" date at the top will always show when the last change was made.

13. Contact Information

For any privacy-related questions, data updates, or to exercise your GDPR rights, please contact us at: polygons.info@gmail.com.