Key Takeaways

Compliant with Quebec Law 25 & PIPEDA
Your Data Is Never Sold
72-Hour Breach Notification
Right to Request Deletion

Last Updated: March 8, 2026

Effective Date: March 6, 2026
Last Updated: March 6, 2026
Company: 3DCentral Solutions Inc.
Location: 1325 Rue Bergar, Laval, QC H7L 4Z7, Canada
Website: 3dcentral.ca

3DCentral Solutions Inc. (“3DCentral,” “we,” “us,” or “our”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, create an account, or make a purchase.

This policy complies with Quebec’s Act respecting the protection of personal information in the private sector (as amended by Bill 64 / Law 25), the Personal Information Protection and Electronic Documents Act (PIPEDA), and Canada’s Anti-Spam Legislation (CASL).

Information We Collect

Information You Provide Directly

When you create an account, place an order, or contact us, we may collect:

Identity information: Full name, username, and password.
Contact information: Email address, phone number, and mailing address.
Shipping information: Delivery address and any special instructions.
Order information: Products purchased, order history, subscription status, and Commercial License details.
Communication records: Messages you send us via email or contact forms.
Newsletter preferences: Email address if you voluntarily subscribe to our newsletter.

Information Collected Automatically

When you browse our website, we automatically collect certain technical data:

Device and browser information: Browser type, operating system, screen resolution, and language preference.
Usage data: Pages visited, time spent on pages, referring URLs, and click patterns.
IP address: Used for security, fraud prevention, and approximate geographic location.

Information We Do NOT Collect

Credit card numbers: All payment processing is handled securely by Stripe. We never see, store, or have access to your full credit card details.
External tracking fonts: We use a system font stack. No Google Fonts, Adobe Fonts, or other external font CDNs are loaded, eliminating a common source of cross-site tracking.

How We Use Your Information

We use your personal information for the following purposes:

Order fulfillment: Processing your orders, calculating shipping, and delivering your 3D printed collectibles.
Account management: Managing your account, subscriptions (commercial license, Mystery Box), and license access.
Customer support: Responding to inquiries, processing returns, and resolving issues.
Legal compliance: Meeting tax, accounting, and regulatory obligations.
Service improvement: Analyzing aggregate usage patterns to improve our website and product offerings.
Communications: Sending order confirmations, shipping updates, and subscription notices. Marketing emails are only sent if you have opted in.

Payment Processing

All payments on 3dcentral.ca are processed through Stripe. When you make a purchase:

Your payment information is transmitted directly to Stripe via their secure, PCI-DSS compliant infrastructure.
3DCentral receives only a confirmation of payment, a transaction reference, and the last four digits of your card for order identification purposes.
We never store, process, or have access to your complete credit card number, CVV, or other sensitive payment credentials.

For details on how Stripe handles your data, please review Stripe’s Privacy Policy.

Cookies and Tracking Technologies

Our website uses a limited number of cookies that are necessary for its operation:

Essential Cookies

WooCommerce session cookies: Track your shopping cart contents and session state. These are required for the store to function.
WordPress authentication cookies: Maintain your logged-in status if you have an account.
Cookie consent preference: Remembers whether you have acknowledged our cookie notice.

Analytics Cookies

If analytics are enabled, we use privacy-respecting analytics to understand aggregate traffic patterns. No personally identifiable information is shared with third-party advertising networks.

What We Do NOT Use

No third-party advertising cookies.
No cross-site tracking pixels from social media platforms.
No external font services that track visitors.

We do not sell, rent, or trade your personal information to any third party.

We share your data only with the following service providers, strictly as needed to operate our business:

Stripe: Payment processing.
Shipping carriers: Name and delivery address for order fulfillment (Canada Post, UPS, or other carriers as applicable).
Email service provider: Email address for transactional messages and, if you opt in, marketing newsletters.
Hosting provider: Our dedicated server infrastructure hosts all website data within controlled environments.

All third-party service providers are bound by their own privacy obligations and are only given the minimum data required to perform their services.

Data Retention

We retain your data for the following periods:

Order and transaction records: 7 years, as required by Canadian tax and accounting regulations.
Account information: Retained while your account is active. You may request deletion at any time (see Your Rights below).
Customer support communications: Up to 3 years for quality assurance and dispute resolution.
Newsletter subscriber data: Until you unsubscribe. You may unsubscribe at any time via the link in any email.
Server logs and analytics: Up to 12 months, then automatically purged.

Your Rights Under Quebec Law 25 (Bill 64)

As a resident of Quebec or Canada, you have the following rights regarding your personal information:

Right of access: You may request a copy of all personal data we hold about you.
Right of rectification: You may request correction of any inaccurate or incomplete personal information.
Right of deletion: You may request that we delete your personal data, subject to legal retention requirements (e.g., tax records).
Right to withdraw consent: You may withdraw consent for optional data processing (such as marketing emails) at any time.
Right to data portability: You may request your data in a structured, commonly used format.
Right to be informed: You have the right to know what data we collect, why, and how it is used.

To exercise any of these rights, contact us at info@3dcentral.ca. We will respond within 30 days of receiving your request, as required by law.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

SSL/TLS encryption on all pages.
Secure password hashing for user accounts.
Login attempt limiting and brute-force protection.
File editor disabled in WordPress for server security.
Directory listing blocked.
Regular database backups (daily) and full server backups (weekly).
Digital files (STL library) stored outside the public web directory with direct URL access blocked.

While we take every reasonable precaution, no method of data transmission or storage is completely secure. We cannot guarantee absolute security but are committed to industry best practices.

Subscribing to our newsletter is entirely optional. If you subscribe:

You will receive product updates, new releases, promotions, and 3D printing industry content.
You may unsubscribe at any time by clicking the unsubscribe link at the bottom of any email.
We will never send marketing emails without your explicit consent, in compliance with CASL.

Transactional emails (order confirmations, shipping updates, subscription notices) are not marketing and will be sent regardless of newsletter preference.

Children’s Privacy

Our products are decorative collectibles and are not marketed to children. Our website and online store are intended for users aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@3dcentral.ca and we will promptly delete the information.

International Data Transfers

3DCentral is based in Quebec, Canada. Your data is primarily stored and processed in Canada. Some of our service providers (such as Stripe) may process data in the United States or other jurisdictions. In all cases, we ensure that appropriate safeguards are in place to protect your information in accordance with Canadian privacy law.

Data Breach Notification

3DCentral Solutions Inc. takes data security incidents seriously. In the event of a breach of personal information, we follow a structured response process in compliance with Quebec Law 25 (Bill 64) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

Detection and Assessment

We maintain monitoring systems and procedures to detect unauthorized access to, or disclosure of, personal information. When a potential breach is identified, our team immediately assesses the incident to determine:

The nature and scope of the personal information involved.
The cause and circumstances of the breach.
Whether the breach creates a risk of serious harm to affected individuals.
What steps can be taken to contain and mitigate the breach.

Notification Timeline

If a breach poses a risk of serious harm, we will notify affected individuals within 72 hours of becoming aware of the incident. We will also promptly notify the Commission d’accès à l’information du Québec (CAI) as required by Quebec Law 25, and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

What Our Notification Will Include

Our breach notification to affected individuals will contain:

A description of the incident and the date or estimated date it occurred.
The types of personal information involved in the breach.
A description of the measures we have taken or plan to take to reduce the risk of harm.
Steps you can take to protect yourself from potential harm.
Contact information for our Privacy Officer so you can obtain further information or assistance.

Mitigation Measures

Upon confirming a breach, we will take immediate steps to mitigate damage, which may include:

Containing the breach and securing affected systems.
Resetting passwords or revoking access credentials for affected accounts.
Engaging third-party security experts to investigate the cause and prevent recurrence.
Reviewing and strengthening security measures based on findings.
Maintaining a record of the breach and all actions taken, as required by law.

Your Right to File a Complaint

If you believe your personal information has been compromised, or if you are unsatisfied with our response to a data breach, you have the right to file a complaint with:

Commission d’accès à l’information du Québec (CAI) — the Quebec authority responsible for overseeing the protection of personal information in the private sector.
Office of the Privacy Commissioner of Canada — the federal authority responsible for PIPEDA compliance.

Contact Our Privacy Officer

For any questions or concerns about data breaches or this notification policy, please contact:

Email: info@3dcentral.ca
Phone: 438-876-7716
Mail: 3DCentral Solutions Inc., Attn: Privacy Officer, 1325 Rue Bergar, Laval, QC H7L 4Z7, Canada

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes:

The “Last Updated” date at the top of this page will be revised.
For significant changes, we will notify registered users by email.
Continued use of our website after changes constitutes acceptance of the revised policy.

Privacy Officer

In accordance with Quebec Law 25, 3DCentral Solutions Inc. has designated a person responsible for the protection of personal information. For all privacy-related inquiries, requests, or complaints, please contact:

Email: info@3dcentral.ca
Phone: 438-876-7716
Mail: 3DCentral Solutions Inc., Attn: Privacy Officer, 1325 Rue Bergar, Laval, QC H7L 4Z7, Canada

If you are unsatisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec (CAI).