Privacy Policy

Last Updated: [October 20, 2025]

Website Address: https://dt3dprint.com

Company Name: Dongguan Datang Shengshi Intelligent Technology Co., Ltd. (DT in short, hereinafter referred to as “we,” “us,” or “our”)

We are a 3D printing manufacturer specializing in custom production, product development, and related technical services. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access or use our website, submit inquiries, place orders, or interact with our services. By using our website and services, you acknowledge and agree to the practices described in this Policy.

1. What Personal Data We Collect and Why

We only collect personal data necessary to fulfill specific business purposes, adhering to the principle of “data minimization.” The data collected depends on your interaction with our website and services:

1.1 Comment Data

When you leave comments on our website, we collect:

• Information you provide in the comment form (name, email address, comment content, and website URL if you choose to provide it);
• Automatically collected data (your IP address, browser user agent string) to detect and prevent spam.

An anonymized hash of your email address may be shared with the Gravatar service (operated by Automattic) to check if you have a Gravatar profile. Gravatar’s privacy policy is available at: https://automattic.com/privacy/. After your comment is approved, your profile picture (if linked to your Gravatar account) will be publicly visible alongside your comment.

1.2 Inquiry and Order Data

To process your inquiries, quotes, or 3D printing orders, we collect the following data you voluntarily provide:

• Contact details (full name, company name, email address, phone number, shipping address, and billing address);
• Project specifications (3D models, design files, material requirements, technical parameters, and other project-related documents);
• Payment information (payment method details, which are processed exclusively by third-party payment providers—we do not store full payment card data).

We use this data to:

• Communicate with you about your inquiry/order;
• Process orders, arrange production, and coordinate delivery;
• Comply with legal, tax, and warranty obligations;
• Provide after-sales support and address service-related issues.

1.3 Media and File Uploads

If you upload images, 3D models, or other files (e.g., for project quotes or collaboration), you must avoid embedding personal data (e.g., EXIF GPS data in images, identifying information in design files). Uploaded files are only accessible to you and our authorized team members, unless explicitly shared by you or our team for project collaboration purposes. If you accidentally upload files containing personal data that you want to delete, please contact us immediately to request deletion—we will process such requests within 7 business days and implement encryption and access restrictions until deletion.

1.4 Automatically Collected Data

When you visit our website, we may automatically collect non-identifiable or pseudonymized data through cookies and similar technologies (see Section 2 for details), including:

• Browser type and version, operating system;
• Pages visited, time spent on each page, and click-through paths;
• Referral source (how you found our website, e.g., search engine, social media).

This data is used to optimize website performance, analyze user behavior, and improve our services.

2. Cookies and Similar Technologies

We use cookies and similar technologies (e.g., Local Storage, session tokens) to enhance website functionality, improve user experience, and analyze service usage. We strictly distinguish between “necessary cookies” (required for core functions) and “non-necessary cookies” (requiring your explicit consent), in compliance with GDPR, CCPA, and other applicable regulations.

2.1 Types of Cookies We Use

2.2 Third-Party Cookie Providers

We use the following third-party tools that may set cookies, with all tags managed via Google Tag Manager (GTM) for streamlined deployment:

• Google Tag Manager (GTM)：
  Purpose: Manages third-party tags (including GA 4 and Google Ads codes) to enable tag deployment and updates without modifying website source code;
  Related Cookies: May set _dc_gtm_<property-id> (for tag management, expires after 1 minute);
  Privacy Policy Link: https://policies.google.com/privacy
• Google Analytics 4 (GA 4)：
  Purpose: Analyzes user behavior (e.g., page views, session duration, conversion paths) to optimize website performance;
  Related Cookies: _ga (distinguishes unique users, expires after 2 years), _ga_<container-id> (maintains session state, expires after 2 years); browser-specific lifespan restrictions apply (max 400 days for Chrome, 7 days for Safari for non-returning users); IP address data is partially anonymized after 9 months;
  Privacy Policy Link: https://policies.google.com/privacy
• Google Ads：
  Purpose: Delivers targeted ads, tracks ad conversion effects (e.g., post-click orders/inquiries), and avoids repetitive ad impressions;
  Related Cookies: Sets ad interaction tracking cookies; data anonymization applies (partial IP deletion and cookie removal after 18 months);
  Privacy Policy Link: https://policies.google.com/technologies/ads
• Google Search Console (to be potentially used in the future)：
  Purpose: Monitors website performance in Google search results (e.g., rankings, click-through rates) and optimizes search visibility;
  Related Cookies: Currently no direct cookie placement; future associated features will comply with Google’s privacy policy;
  Privacy Policy Link: https://policies.google.com/privacy
• Tawk.to：
  Purpose: Provides real-time customer service communication (e.g., visitor inquiries, chat history synchronization);
  Related Cookies: Identifies visitor sessions and saves chat preferences/history (specifics per Tawk.to’s official specifications);
  Privacy Policy Link: https://www.tawk.to/privacy-policy/
• Gravatar：
  Purpose: Displays commenter profile pictures;
  Related Cookies: Anonymized email hash for profile verification;
  Privacy Policy Link: https://automattic.com/privacy/

These third parties may transfer collected data to their servers outside your jurisdiction—we only partner with providers that comply with global data protection standards (e.g., GDPR, CCPA).

2.3 How to Manage Cookies

• Cookie Preference Center: You can accept or reject non-necessary cookies via the cookie consent popup on our website’s homepage. You can modify your preferences at any time by visiting [https://dt3dprint.com/cookie-settings] (not available right now, we are working on it).
• Browser Settings: You can disable or delete cookies through your browser settings (e.g., Chrome: Settings > Privacy and Security > Cookies and other site data; Firefox: Settings > Privacy & Security > Cookies and Site Data). Note that disabling necessary cookies may affect website functionality (e.g., inability to log in or submit orders).
• Opt-Out of Third-Party Tools:
  • For Google services (GA 4, Google Ads): Opt out via Google Ads Settings (https://adssettings.google.com/) or install the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout);
  • For Tawk.to: Manage chat-related cookie preferences via the in-chat settings or your browser controls;
  • For Gravatar: Disable via your Gravatar account settings or browser cookie controls.

3. Who We Share Your Data With

We do not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. Data sharing is limited to the following scenarios:

3.1 Authorized Third-Party Service Providers

We share your data with third parties who perform services on our behalf, and only to the extent necessary to fulfill those services:

• Payment processors (e.g., PayPal, Stripe) – to process transactions (shared data: billing address, payment amount, and order ID);
• Shipping and logistics providers (e.g., DHL, FedEx) – to deliver orders (shared data: name, shipping address, and contact phone number);
• Cloud storage providers (e.g., AWS) – to securely store design files and project data (shared data: project specifications and non-identifiable contact details);
• Anti-spam services – to screen comments for spam (shared data: comment content, IP address);
• Analytics & Marketing Providers (Google Services): Google (GA 4, Google Ads, GTM) – to analyze website traffic and deliver targeted ads (shared data: anonymized user behavior data, ad interaction data; no full personal identifiers such as phone numbers or complete addresses);
• Customer Service Provider (Tawk.to): To facilitate real-time chat communication (shared data: visitor name, email address, chat content, and device/usage data necessary for service delivery).

All third-party providers are contractually obligated to:

• Protect your personal data with security measures equivalent to ours;
• Only use your data to fulfill the services we request;
• Comply with applicable data protection laws.

3.2 Legal and Compliance Requirements

We may disclose your data if:

• Required by law (e.g., to comply with a court order, subpoena, or regulatory request);
• Necessary to protect our legitimate business interests (e.g., preventing fraud, safeguarding website security, or responding to third-party claims);
• Required to protect the safety, rights, or property of you, other users, or the public.

3.3 Password Reset

If you request a password reset, your IP address will be included in the reset email for security purposes (to prevent unauthorized password changes).

4. How Long We Retain Your Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods are as follows:

Anonymized data (data that can no longer identify you) is retained indefinitely for statistical or research purposes.

5. What Rights You Have Over Your Data

You have the following rights regarding your personal data, in compliance with GDPR, China’s Personal Information Protection Law, and other applicable regulations:

5.1 Core Rights

• Right of Access: Request a copy of the personal data we hold about you (provided in a structured, machine-readable format, e.g., CSV);
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, unless we are required to retain it for legal, tax, or security reasons;
• Right to Restriction of Processing: Request that we limit the processing of your data (e.g., if you dispute the accuracy of the data);
• Right to Object: Object to the processing of your data for marketing or analytics purposes;
• Right to Data Portability: Request transfer of your personal data to another service provider (where technically feasible).

5.2 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details in Section 10. We may request additional information to verify your identity (to protect against unauthorized access to your data).

5.3 Response Time

We will acknowledge your request within 5 business days and provide a final response within 30 business days. For complex requests, we may extend this period by up to 30 additional days and will notify you of the extension with a reason.

6. Data Security Measures

We implement technical, administrative, and physical security measures to protect your personal data from unauthorized access, disclosure, tampering, or destruction:

6.1 Technical Measures

• Data transmission: Encrypted via SSL/TLS (HTTPS) protocol;
• Data storage: Encrypted using AES-256 encryption (for cloud storage and internal servers);
• Access controls: Role-based access permissions (only authorized employees can access personal data);
• Regular security audits: Vulnerability scanning and penetration testing conducted quarterly.

6.2 Administrative Measures

• Employee training: Mandatory data protection training for all staff handling personal data;
• Confidentiality agreements: Signed by employees with access to sensitive data;
• Data processing policies: Formal protocols for collecting, storing, and deleting data.

6.3 Data Breach Response

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify relevant regulatory authorities within 72 hours of discovering the breach;
• Notify affected users promptly (via email or website notification) with details of the breach and steps to mitigate risks.

7. Cross-Border Data Transfer

Your personal data may be transferred to and stored in countries outside your country/region of residence, including:

• United States (AWS cloud servers, Google service servers);
• Germany (our European production facility);
• Other countries where our third-party service providers (e.g., Tawk.to, Google) operate.

We ensure cross-border data transfers comply with applicable laws by:

• Using standard contractual clauses (SCCs) approved by the European Commission and China Cyberspace Administration;
• Only transferring data to countries/regions recognized as having “adequate” data protection standards (e.g., EU/EEA countries, Switzerland);
• Obtaining your explicit consent for transfers to non-adequate countries (where required by law).

You may request a copy of the SCCs by contacting us (see Section 10).

8. Embedded Content from Third-Party Websites

Our website may include embedded content (e.g., videos, 3D model viewers, images) from third-party websites. Embedded content behaves as if you have visited the third-party website directly. These third parties may collect data about you, use cookies, and monitor your interaction with the content—subject to their own privacy policies.

We are not responsible for the data processing practices of third parties. We recommend reviewing the privacy policy of the relevant third party before interacting with embedded content.

9. Minors’ Privacy

We do not intentionally collect personal data from minors under the age of 16. If a minor provides personal data without parental/guardian consent, the guardian may contact us to request deletion. We will immediately stop processing and delete the minor’s data upon verification of guardianship.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technology. When we make changes:

• We will update the “Last Updated” date at the top of this Policy;
• For minor changes (e.g., clarifying wording), we will post the updated Policy on our website with no additional notification;
• For material changes (e.g., expanding data collection scope, changing data sharing practices), we will notify you via:
  • A popup notification on our website homepage;
  • Email (for registered users or users who have submitted orders);
  • A prominent link on our website’s footer.

Your continued use of our website and services after the updated Policy takes effect constitutes your acceptance of the changes. We encourage you to review this Policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

• Email: datang.3dprintingservice@gmail.com
• Physical Address: Room 602, Building 7, No. 168, Dalang Fuli East Road, Dalang Town, Dongguan, Guangdong, China
• Phone: [+8618027591627]

We will respond to your inquiry within 5 business days and work to resolve any issues promptly.

Effective Date: [October 20, 2025]