Privacy Policy
Last updated: 24 September, 2026
This policy explains what 3D Map Maker does with data. The operator, and the data controller, is Nicholas Webster, trading as 3D Map Maker.
We collect only what we need to make your map and get it to you. There are no customer accounts, no advertising and no selling of data.
1. Summary
- You can choose and preview a map without giving us any personal details.
- When you pay, Stripe collects your name, email address and UK delivery address, and passes them to us once your payment succeeds.
- Payment is handled by Stripe. We never see or hold your card details.
- We do not sell data, share it with advertisers, or use it for advertising or profiling.
- There are no customer accounts and no passwords.
2. What we collect
Your map choices. When you preview a map, we store the place, area, direction, size and hill height you chose, and the map we built from them. These are not linked to you unless you go on to order.
Routes you upload. If you upload a GPX file, we store it to draw the route on your map. A GPX file can show where you have been and when. Only upload a route you are happy for us to hold.
Your order details. When you press Buy, you go to Stripe's secure payment page. You give your name, email address, UK delivery address and card details there, not to us. Once your payment succeeds, Stripe passes us your name, email address and delivery address, and a payment reference, and we link them to your map. Stripe never gives us your card details. If you do not complete payment, we receive none of these.
Order progress. We record when your map was paid for, printed and posted.
Messages you send us through the contact form.
3. What we do not collect
We do not collect your card details, date of birth or phone number. The site sets no cookies and uses no analytics or advertising. The map, its code and its fonts are all served from our own server, so your browser does not contact any other company while you choose and preview your map. Stripe's payment page is Stripe's own, and Stripe's own privacy policy applies there. The site does not ask for your location; the map starts where you move it.
[SERVER LOGS]
4. Why we are allowed to use it (legal bases)
- To make and deliver your map, and to email you about your order, we rely on performance of a contract: your map choices, route, name, email address and delivery address.
- To keep records of sales for tax, we rely on legal obligation.
- To keep the site working and secure, and to see which maps people try so we can improve the service, we rely on legitimate interests. The map choices we log for this are not linked to you unless you order.
5. Emails
We email you a receipt with a picture of your map when you pay, and a note when your map is posted. We do not send marketing emails.
6. Who else is involved
We use a small number of providers, who process data on our instructions:
| Provider | What they do |
|---|---|
| Stripe | Takes your payment, name, email address and delivery address on its own secure page |
| [HOST] | Hosts our servers and database |
| [EMAIL PROVIDER] | Sends our emails to you |
| Royal Mail | Delivers your map, using your name and delivery address |
We do not share data with anyone else, except where we are legally required to.
Some of these providers operate outside the UK. Where data is transferred, it is protected by appropriate safeguards such as standard contractual clauses.
7. How long we keep things
| Data | Retention |
|---|---|
| A map you previewed but did not buy | Deleted after 7 days |
| A route you uploaded but did not buy | Deleted after 7 days |
| A paid order: your details, map choices, route and payment reference | Kept for as long as UK tax law requires us to keep sales records, then deleted |
| The map choices of previews not bought, with no personal details | Kept as a record of what people try |
| Messages you send us | Kept until your query is dealt with, then deleted within 12 months |
8. Your rights
Under UK data protection law you have rights to access, correct, delete, restrict, object to, and port your personal data, and to complain to a regulator.
To use any of these rights, contact us from the email address you ordered with, so we can find your order. We will reply within one month.
We may not be able to delete the details of a paid order before the end of its retention period, because the law requires us to keep sales records.
To complain, contact the Information Commissioner's Office at ico.org.uk.
9. Children
Our maps are sold to adults. We do not knowingly collect data from anyone under 18. If you are under 18, ask a parent or guardian to order for you.
10. Security
Traffic between your browser and our site is encrypted in transit. Access to our servers and database is restricted. Card payments are made on Stripe's own page and never pass through our servers.
No system is perfectly secure. A breach of our database would expose order details and map choices, but no card details, because we do not hold any.
11. Changes
We may update this policy. The current version is always available here.
12. Contact
Please use the contact form linked at the bottom of this page.