1. Who We Are
Create and Play Resources (“we”, “us”, “our”) is a UK‑based business providing 3D‑printed educational resources.
Data Controller: Create and Play Resources
Email: info@createandplayresources.co.uk
2. What Personal Data We Collect
2.1 Data you provide directly
- Name
- Email address
- Billing address
- Shipping address
- Order details
- Account information (if you create an account)
- Messages sent via contact forms
- Comments left on the website
2.2 Automatically collected data
- IP address
- Browser type and version
- Device information
- Cookies (see section 8)
- Usage data (pages visited, time spent, etc)
2.3 Uploaded media
If you upload images, avoid including embedded location data (EXIF GPS). Visitors may download and extract location data from images.
3. Lawful basis for processing
We process your personal data under the following lawful bases:
- Contract: To process and fulfil your orders.
- Consent: For marketing emails and optional cookies.
- Legitimate Interest: Fraud protection, analytics, improving our website.
- Legal Obligation: Tax, accounting, and record-keeping requirements.
4. How we use your data
We use your data to:
- Process and deliver your orders.
- Manage your account.
- Respond to enquiries.
- Improve our website and services.
- Send marketing communications (only with your consent).
- Prevent fraud and ensure website security.
- Comply with legal obligations.
5. Who we share your data with
We only share your data with trusted third‑party service providers necessary to operate our business:
- Payment processors (Stripe).
- Website hosting provider (Fasthosts).
- Email marketing provider.
- Analytics servers (Google Analytics).
- Delivery carriers (Royal Mail, Evri, or others as required).
- Spam detection services (e.g. Akismet).
- Technical service providers for website maintenance and security.
All third parties are required to comply with UK GDPR.
6. Cookies
6.1 Comment cookies
If cookies are enabled and you leave a comment, you may opt-in to saving your name, email and website in cookies for convenience. These last one year.
6.2 Login cookies
Temporary cookies check if your browser accepts cookies. Login cookies last two days; screen options cookies last one year. “Remember Me” lasts two weeks.
6.3 Editing cookies
f you edit or publish an article, a cookie storing the post ID is saved for one day.
6.4 Analytics & marketing cookies
If used, analytics or marketing cookies may track usage patterns. You can disable cookies in your browser settings.
7. Embedded content
Articles may include embedded content (videos, images, etc.). These third‑party sites may collect data, use cookies, and track your interaction with embedded content.
8. How long we retain your data
- Comments: Retained indefinitely.
- Customer accounts: Retained until you request deletion.
- Order Information: Retained for six years for tax and accounting compliance.
- Marketing data: Retained until you unsubscribe.
- Technical logs: Retained for security purposes for a limited period.
9. Your rights under UK GDPR
You have the rights to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Request restriction of processing.
- Object to processing.
- Request data portability.
- Withdraw content at any time.
- Lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise any rights, please contact us via info@createandplayresources.co.uk.
10. International data transfers
Some service providers (e.g., payment processors, analytics tools) may store data outside the UK. Where this occurs, we ensure appropriate safeguards such as the UK Addendum to Standard Contractual Clauses.
11. How we protect your data
We use technical and organisational measures including:
- SSL encryption
- Secure hosting
- Access controls
- Regular security updates
- No storage of payment card details
- Spam and fraud detection systems
12. Children’s privacy
We do not knowingly collect personal data from children. Purchases must be made by individuals aged 18 or over.
13. Automated decision making
We may use automated systems for:
- Fraud detection.
- Spam filtering.
These systems do not have legal or significant effects on you.
14. Changes to this policy
We may update this policy occasionally. The latest version will always be available on our website.
15. Contact us
If you have any questions about this privacy policy or how we handle your data, contact us at info@createandplayresources.co.uk.