Privacy Policy

Last Revised: 08 Dec 2025

This Privacy Policy describes how Xtrude 3D (“we”, “us”, “our”) collects, uses, stores, and shares personal information of users (“you”, “your”) of our website and online store,
www.xtrude3d.co.za
(“Website”).

By accessing or using our Website, creating an account, or purchasing any products or services from us, you agree to the collection and use of your information in accordance with this Privacy Policy and applicable South African law, including the Protection of Personal Information Act, 2013 (“POPIA”).

1. Definitions

In this Privacy Policy:

• “Personal Information” means information that identifies or can reasonably identify you as an individual (e.g. name, email address, contact details, payment details).
• “Non-Personal Information” means information that does not directly identify you (e.g. browser type, general location, device information, usage data).
• “Processing” includes any operation or activity concerning Personal Information (e.g. collection, storage, use, distribution, modification, destruction).

2. Information We Collect

2.1 Personal Information

We may collect the following types of Personal Information:

• Identity details (name, surname, company name where applicable).
• Contact details (email address, phone number, billing and shipping address).
• Account information (username, hashed passwords, order history, preferences).
• Payment information (payment method details, limited card information as processed via a secure payment gateway – we do not store full card details).
• Communication information (emails, messages, support queries, feedback, reviews).
• Marketing preferences (newsletter subscriptions, consent to promotional communication).

2.2 Non-Personal & Technical Information

We may automatically collect Non-Personal Information when you use the Website, including:

• IP address, browser type and version, operating system, device information.
• Referring URLs, pages viewed, time and date of visits, time spent on pages.
• Cookie identifiers and similar tracking technologies (see Section 6 below).

2.3 How We Collect Information

• Directly from you: When you create an account, place an order, subscribe to our newsletter, submit a contact form, or communicate with us.
• Automatically: Through cookies, log files, and similar technologies when you browse or interact with our Website.
• From third parties: Such as payment processors, couriers, and analytics providers, where permitted by law.

3. Purposes for Processing Your Information

We process your Personal Information for the following purposes:

• Order Processing & Fulfilment: To process orders, manage payments, deliver products, provide invoices, and handle returns or exchanges.
• Customer Support: To respond to queries, provide technical or after-sales support, and manage your account.
• Website Operation & Improvement: To operate, maintain, secure, and improve our Website, products, and services.
• Personalisation: To personalise your experience, recommend products, and remember your preferences.
• Marketing & Communications: To send you newsletters, promotional offers, product updates, and other communications where you have given consent or where legally permitted.
• Legal & Compliance: To comply with legal obligations, resolve disputes, prevent fraud, and enforce our Terms and Conditions.

4. Legal Basis for Processing

We process your Personal Information on one or more of the following legal bases:

• Your consent (e.g. subscribing to marketing communications).
• Contractual necessity (e.g. to process and fulfil your order).
• Compliance with legal obligations (e.g. tax, accounting, regulatory requirements).
• Legitimate interests (e.g. improving our services, preventing fraud, defending legal claims), provided these interests are not overridden by your rights.

5. Direct Marketing & Your Choices

We may use your contact details to send you marketing communications about our products, services, promotions, and news that we believe may be of interest to you.

You may opt out of marketing at any time by:

• Clicking the “unsubscribe” link in any marketing email you receive from us; or
• Emailing us at
  info@xtrude3d.co.za
  and requesting removal from our marketing list.

We may still send you non-marketing communications where necessary (e.g. order confirmations, shipping notices, service updates, or legal notices).

6. Cookies & Tracking Technologies

Our Website uses cookies and similar technologies to enhance your browsing experience and to collect certain usage information.

We use cookies to:

• Remember items in your cart and your login status.
• Remember your preferences and settings.
• Analyse traffic and usage patterns to improve our Website.
• Support basic security and fraud prevention.

Most browsers are initially set to accept cookies automatically. You can usually modify your browser settings to decline cookies or notify you before accepting a cookie. If you disable cookies, some parts of our Website may not function properly.

7. Sharing of Your Information

We do not sell your Personal Information. We may share your information with:

• Service Providers: Third-party providers who assist us in operating our Website, processing payments, fulfilling orders, delivering products, sending emails, hosting, analytics, or customer support. These parties are contractually required to protect your information and use it only for the services we specify.
• Business Partners: Where we run joint promotions or bundled offerings, and only where appropriate and lawful.
• Professional Advisors: Such as lawyers, accountants, auditors, and insurers where reasonably necessary.
• Legal Requirements: When required to do so by law, court order, subpoena, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your information may be transferred as part of the transaction, subject to continued protection.

8. International Transfers

Our Website and some of our service providers may be located or may store data outside of South Africa. Where Personal Information is transferred across borders, we will take reasonable steps to ensure that the receiving party is subject to data protection laws or safeguards that provide a level of protection that is substantially similar to POPIA.

9. Data Security

We take reasonable technical and organisational measures to protect your Personal Information, including:

• Using encryption and secure protocols (such as HTTPS) where appropriate.
• Storing information on secure servers protected by firewalls and access controls.
• Limiting access to Personal Information to authorised personnel who require it to perform their duties.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your Personal Information, we cannot guarantee absolute security.

10. Data Retention

We retain your Personal Information only for as long as reasonably necessary for the purposes set out in this Privacy Policy, or as required by law (for example, for tax, accounting, and legal purposes).

When information is no longer required, we will take reasonable steps to securely delete, anonymise, or destroy it.

11. Your Rights

Under POPIA and other applicable laws, you may have the following rights regarding your Personal Information:

• Access: To request confirmation of whether we hold Personal Information about you and to obtain a copy.
• Correction: To request that we correct or update inaccurate or incomplete information.
• Deletion: To request deletion of your Personal Information where it is no longer necessary, subject to legal and contractual obligations.
• Objection: To object to certain types of processing, including direct marketing.
• Restriction: To request that we restrict the processing of your information in certain circumstances.
• Data Portability (where applicable): To request that we transfer your Personal Information to you or another provider in a structured, commonly used, machine-readable format, where technically feasible.

To exercise any of these rights, please contact us at
info@xtrude3d.co.za. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with the Information Regulator in South Africa if you believe we have not handled your Personal Information lawfully. We encourage you to contact us first so we can attempt to resolve your concerns directly.

12. Children’s Privacy

Our Website and services are not directed at children under the age of 13, and we do not knowingly collect Personal Information from children under 13. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at
info@xtrude3d.co.za, and we will take steps to delete such information where required.

13. Third-Party Websites

Our Website may contain links to third-party websites or services that are not operated or controlled by us. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices, content, or security of such websites. We recommend that you review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The updated version will be posted on this page with an updated “Last Revised” date.

Your continued use of the Website after any changes to this Privacy Policy constitutes your acceptance of the updated terms. Please review this Privacy Policy periodically.

15. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email:
info@xtrude3d.co.za

Controller / Responsible Party: Xtrude 3D