Privacy Policy — Made In Layers

PRIVACY POLICY Last updated: May 17, 2026 This Privacy Policy explains what personal information Made In Layers collects, how we use it, and your rights. Made In Layers operates from the State of Illinois, USA. 1. INFORMATION WE COLLECT - Order information: name, email, shipping address, billing address, items ordered, and the last four digits of the card used (provided by PayPal — we never see the full number). - Communications: messages you send us (email, contact form, return request). - Site usage: pages viewed, products clicked, search terms, add-to-cart events, IP address, browser, device, and referring URL. We use this to improve the store; we do not sell it. - Cookies: a minimal set used to remember your cart and admin session. The Site does not run third-party advertising trackers. 2. HOW WE USE INFORMATION - To fulfill your order (production, shipping, customer service); - To process payment through PayPal; - To compute shipping rates through Shippo and the carrier you select; - To send transactional emails (order confirmation, shipping updates, return-request updates); - To detect and prevent fraud, abuse, and chargeback abuse; - To comply with legal obligations. 3. WHO WE SHARE INFORMATION WITH We share the minimum necessary information with: - PayPal (payment processing — see paypal.com/privacy); - Shippo and the carrier you select at checkout (USPS, UPS, etc.) for shipping; - Our email service provider for transactional emails; - Government agencies when required by valid legal process. We do NOT sell or rent your personal information, and we do NOT share it for cross-context behavioral advertising. 4. DATA RETENTION We retain order records for at least 7 years for tax and accounting purposes. You may request earlier deletion of non-required data — see Your Rights below. 5. YOUR RIGHTS Depending on where you live, you may have the right to: - Access the personal information we hold about you; - Correct inaccurate information; - Delete your information (subject to legal retention requirements); - Opt out of "sale" or "sharing" (we do neither, but you may still submit the request); - Receive a copy of your information in a portable format. To exercise any right, email madeinlayers3d.store@gmail.com from the email address on file. We will respond within 45 days. Residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with similar laws have these rights by statute. Illinois residents are protected under the Illinois Personal Information Protection Act (PIPA) and, where applicable, the Biometric Information Privacy Act (BIPA) — we do not collect biometric information. EU/UK residents have parallel rights under GDPR/UK GDPR; our lawful basis for processing is contract performance and legitimate interest. 6. CHILDREN The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email us and we will delete it. 7. SECURITY We use TLS for all data in transit, hashed passwords for admin accounts, and least-privilege access to production systems. No internet service is 100% secure; we cannot guarantee absolute security. 8. INTERNATIONAL TRANSFERS We operate from the United States. By using the Site, you consent to transfer of your information to the United States. 9. CHANGES We may update this Privacy Policy at any time. The "Last updated" date above will change. 10. CONTACT madeinlayers3d.store@gmail.com