Privacy Policy - Smi3D AS

Introduction & Data Controller
Smi3D AS is committed to protecting your personal data and handling it in a transparent, secure manner. This Privacy Policy explains how we collect, use, and process your personal information when you visit or make a purchase from smi3d.no.

What Personal Data We Collect
We collect information that you directly provide to us, as well as data gathered automatically when you browse our website:

Identity & Contact Data: Name, billing address, shipping address, email address, phone number, and company name (if applicable).
Transaction Data: Details about products purchased, digital files downloaded, service quotes requested, and payment confirmations.
Customer Files & Technical Data: 3D scans, CAD files, or technical specifications uploaded by you for custom engineering projects.
Technical & Usage Data: IP address, browser type, device information, and browsing activity collected via cookies and analytics tools (e.g., Google Analytics).

How and Why We Use Your Data
We process your personal data based on legal grounds established under GDPR:

Order Fulfillment (Contract Performance): Processing payments, delivering physical goods, providing digital download access, and executing custom engineering projects.
Accounting & Legal Obligations: Storing transaction records to comply with Norwegian bookkeeping legislation (Bokføringsloven).
Customer Support: Communicating with you regarding technical support, quotes, or service updates.
Website Optimization: Analyzing website performance and user experience through anonymized analytics.

Sharing Data with Third Parties (Data Processors)
We do not sell, rent, or trade your personal data. We only share necessary information with trusted third-party service providers who help us operate our business:

Payment Gateways: Stripe, or bank partners to process payments securely.
Shipping & Logistics: Postal and courier services (e.g., Bring/Posten) to deliver physical packages.
Hosting & Infrastructure: Secure web hosting and cloud storage providers.
Analytics: Google Analytics for aggregated, anonymized usage statistics.

Confidentiality of Proprietary CAD & Scan Data
Any proprietary 3D files, CAD drawings, or physical components provided to Smi3D AS for custom scanning, reverse engineering, or manufacturing are treated with strict confidentiality. Your custom files will never be shared, resold, or used for public production without your explicit consent.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Transaction & Order Records: Stored for a minimum of 5 years to comply with Norwegian accounting regulations.
Customer Communication & Project Files: Stored as long as necessary to maintain your account and support ongoing custom engineering projects.

Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal information:

Access & Correction: You have the right to request a copy of the data we hold about you and correct any inaccuracies.
Deletion (Right to be Forgotten): You may request the erasure of your personal data, provided it is no longer required for statutory legal/accounting reasons.
Object & Restrict: You can object to data processing or request restrictions on how your data is used.
Complaint: You have the right to lodge a complaint with the Datatilsynet (the Norwegian Data Protection Authority) if you believe your data has been handled improperly.

Cookies
Our website uses essential cookies required for the shopping cart and checkout functions to operate correctly. We also use performance cookies (Google Analytics) to understand how visitors interact with the site. You can adjust your cookie preferences through your browser settings.
Contact Us
For any questions regarding this Privacy Policy or to exercise your privacy rights, please contact us at:

Smi3D AS
Email: contact@smi3d.no
Address: Spinneriveien 3 (2nd floor), 1632 Gamle Fredrikstad, Norway