Privacy
Last updated November 5, 2026.
You're sending us photos of people and pets you love. Here is exactly what happens to them, in plain language.
What we collect
- The photo you upload.
- The email address you give us, so we can send you the proof.
- The choices you make on the form (size, style, colour), any note you add, and the name you'd like on the base. The note and the name are deleted along with your photo; the size/style/colour choice stays with the order record.
- Your order's progress (for example "printing" or "shipped") and the dates it changed, so your private tracking page can show it.
- Basic technical details of the upload: file size, image dimensions, and a one-way hash of your IP address that we use to stop abuse. We do not store your actual IP address.
What we never collect
- Nothing to do with payment. No card numbers, no bank details, no billing addresses. When you approve a proof, we send you a link to a secure payment page run by a payment provider, and you pay there. This website has no payment code in it at all, and nowhere to put such data even if we wanted it.
Where your photo is kept
Your photo is stored on our server in a folder that sits outside the public website directory. That means there is no web address that will return your photo, not a secret one and not a guessable one. It can only be opened by signing in to our admin panel, and every time it is opened, that gets logged.
When your photo arrives we also re-save it, which strips out the hidden data that cameras attach to image files, including GPS coordinates of where the photo was taken.
How long we keep it
Your photo, and the 3D model and print files we make from it, are deleted automatically 2 days after you send it. This is done by a scheduled job, not by us remembering to do it. If you want it gone sooner, email [email protected] and we'll delete it and confirm.
One exception: if you've paid for an order and we're still making or shipping it, we keep the photo and print files until it's delivered, in case a print fails and has to be redone. They're deleted once it arrives.
Your order and tracking page. When you send a photo we create an order with a private tracking link, and we keep your email address on the order so we can send you updates (proof ready, shipped, and so on). If you don't go ahead with an order, your email address and proof preview are deleted along with your photo. If you do, they're removed automatically 30 days after your order is delivered or cancelled. The tracking page shows your order's progress and your proof preview, never your email or your original photo. Anyone with the link can open it, so keep it to yourself.
After deletion we keep a minimal record that an order existed (the date and our internal reference) with your email address removed. We keep that so we can honour a reprint or a refund, not to keep tabs on you.
Who else sees it
- Tencent Cloud, to make the 3D model, as described above.
- Shopify, if you buy: you pay on Shopify's checkout page, and Shopify handles your payment and shipping details under its own privacy policy.
- Our email provider, which delivers the order updates we send you.
- We never sell your photo or your email address.
- We never post your photo publicly without asking you first, in writing.
- Our web host necessarily stores the files on their hardware, as every website works.
How your photo becomes a 3D model
To turn your photo into a 3D model, we send it to Tencent Cloud's HY 3D service, through their paid business service (their API), not their free consumer website. The processing happens on Tencent's servers outside Canada (in Singapore). Under Tencent's data processing agreement for this service:
- your photo is deleted by Tencent once the 3D model has been made;
- the generated 3D model is kept by Tencent for at most 7 days;
- using your photo to train AI models is not one of the purposes the agreement allows.
The photo goes to Tencent from our own computer here in Port Perry, Ontario, which collects it from our website, makes the model and paints it in our filament colours. It only receives the photo and the size, style and colour you picked, never your email or notes. Nothing is sent until you confirm your email address with the link in our first email. The generated model and print files are kept with your photo and deleted with it.
We then finish the model and print it ourselves, here in Port Perry, Ontario. By sending us a photo you agree to it being processed this way. If you'd rather it wasn't, email us before we start and we'll delete it.
Your rights
Under Canadian privacy law you can ask us what we hold about you, ask us to correct it, and ask us to delete it. Email [email protected] and we'll respond within 30 days, and realistically within a day or two.
Cookies
Browsing the site sets no cookies. The photo form sets one small security cookie that stops other websites from submitting forms in your name; it holds nothing about you and is never used for tracking. (Our own admin sign-in uses the same cookie.) There is no analytics, no advertising pixel, and no third-party tracking on this site.
Contact
3DHeirloom.ca, Port Perry, Ontario, Canada
[email protected]