Privacy Policy

NASH Digital Fabrication

Last updated: 21 October 2026

1. Introduction

Welcome to NASH Digital Fabrication.

Your privacy is important to us. We are committed to protecting your personal information and handling it responsibly, securely and transparently.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, request a quotation or purchase our products and services.

This policy applies to our laser engraving, 3D printing, personalised gifts, custom manufacturing and related services.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Who We Are

Business name: NASH Digital Fabrication

Business owner and data controller: Colin Nash, trading as NASH Digital Fabrication

Location: Suffolk, United Kingdom

Website: https://nashdf.co.uk

Email: hello@nashdf.co.uk

For questions about your personal information or this Privacy Policy, please contact us using the email address above.

3. Information We Collect

Depending on how you use our website or services, we may collect the following information:

Your full name.
Email address and telephone number.
Billing and delivery addresses.
Information about enquiries, quotations and orders.
Personalisation instructions, including names, messages and other requested details.
Photographs, logos, illustrations and digital artwork submitted for personalised products.
Correspondence and customer service communications.
Transaction information and payment confirmation.
Technical information, such as IP address, browser type and website activity.
Cookie preferences and related website information, where applicable.

We collect information directly from you when you contact us, request a quotation, place an order or submit artwork.

We may also receive relevant information from payment processors, delivery providers or sales platforms used to fulfil an order.

We aim to collect only the information reasonably necessary for the relevant purpose.

4. How We Use Your Information

We use personal information where necessary to:

Respond to customer enquiries.
Prepare quotations and discuss product requirements.
Process and fulfil orders.
Create personalised and custom-made products.
Prepare artwork, designs and customer proofs.
Contact customers regarding orders, payments or delivery.
Process payments and refunds.
Arrange postage and delivery.
Handle customer service requests, complaints and returns.
Maintain accurate financial and business records.
Protect our website and business against fraud, misuse and security threats.
Comply with legal obligations.
Improve our products, website and customer service.
Send promotional information where legally permitted.

We do not sell customer personal information to third parties.

5. Legal Basis for Processing Information

Under UK GDPR, we rely on appropriate lawful bases when processing personal information.

Contract: Processing information needed to provide quotations, fulfil orders, produce personalised products and arrange delivery.

Legal obligation: Processing and retaining information necessary to comply with legal requirements, including accounting and taxation.

Legitimate interests: Processing information where reasonably necessary to manage customer enquiries, maintain website security, prevent fraud, improve our services and protect our business, provided these interests are not overridden by individuals’ rights.

Consent: Processing information where consent is required, including certain marketing activities, optional cookies and the publication of customer photographs.

Where processing relies on consent, you may withdraw that consent at any time.

6. Customer Photographs, Designs and Artwork

NASH Digital Fabrication may accept customer-supplied photographs, logos, illustrations, text and other digital files for use in personalised products.

These may include files provided through email, contact forms or future website upload facilities.

We use this information to:

Assess whether a requested product can be produced.
Prepare, adjust or format artwork.
Create design previews and proofs.
Manufacture the agreed personalised product.
Resolve problems or remake products where necessary.

Customer-supplied files remain the property of their respective owners or rights holders.

Customers are responsible for ensuring they have appropriate permission to supply artwork for the intended use.

We will not publish identifiable customer photographs or personal artwork on our website, social media or promotional materials without appropriate permission.

We ask customers not to submit unnecessary sensitive information, including medical records, identity documents or other confidential information.

If artwork contains personal information about another individual, customers should ensure that sharing it with us is appropriate and lawful.

7. Payment Information

Where payments are accepted, they may be processed using third-party payment providers.

These providers may collect and process payment details in accordance with their own privacy notices and legal obligations.

We may receive transaction references, payment status, order values and limited payment information required to manage purchases and refunds.

We do not ask customers to send full payment card details through ordinary email or website contact forms.

8. Sharing Your Information

We may share information with trusted third parties where necessary to provide our services.

These may include:

Website hosting and technical service providers.
Ecommerce and payment processing providers.
Postal and courier services.
Email and communication providers.
Accounting and bookkeeping services.
Secure digital storage and design service providers.
External production partners, where necessary to complete an agreed order.
Professional advisers, regulators or public authorities where legally required.

We only share information relevant to the service being provided.

Where suppliers process personal information on our behalf, we seek to ensure that appropriate data protection arrangements are in place.

We do not share customer personal information with unrelated third parties for their independent marketing purposes without a lawful basis.

9. Cookies and Website Tracking

Our website may use cookies and similar technologies to support website functionality, security and user experience.

Cookies are small files stored on your device when you visit a website.

These may include:

Essential cookies: Necessary for core website functionality, security and any shopping basket or checkout features.

Functional cookies: Used to remember appropriate website settings and preferences.

Analytics cookies: Used to understand website performance and visitor activity, if such services are enabled.

Marketing cookies: Used to support advertising or marketing measurement, if these services are enabled.

We will provide information about the cookies and similar technologies actually used on our website.

Where consent is required by law, optional cookies will not be activated until the appropriate consent has been obtained.

Where a legal exemption applies, we will provide the information and choices required by that exemption.

You can manage cookies through your browser settings and any cookie preference controls provided on our website.

10. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, tax and accounting requirements.

Retention depends on the type of information and its purpose.

Customer enquiries: We keep correspondence while an enquiry is active and for a reasonable period afterwards where necessary for follow-up or business records.

Orders and transactions: We retain information needed for accounting, tax, customer service and legal requirements. UK sole-trader tax records generally need to be retained for at least five years after the relevant 31 January Self Assessment submission deadline, and longer in certain circumstances.

Customer artwork: We retain files only while reasonably needed for design, production, customer support, agreed repeat orders or dispute resolution. Unnecessary files will be deleted securely.

Marketing information: We keep information while we have a valid reason to use it and retain appropriate records of marketing preferences or objections.

Website security information: Technical logs are retained according to operational security needs and applicable hosting arrangements.

Information may be retained for longer where required by law or necessary to establish, exercise or defend legal claims.

When personal information is no longer needed, we take reasonable steps to securely delete or anonymise it.

11. How We Protect Your Information

We take reasonable technical and organisational precautions to protect personal information.

Depending on the systems used, these measures may include:

Password-protected accounts.
Restricted access to customer records.
Secure website connections.
Appropriate security updates.
Secure storage and backup arrangements.
Multi-factor authentication where available.
Careful handling and disposal of customer information.

Access to personal information is limited to individuals and service providers who reasonably require it.

Although we take appropriate precautions, no electronic storage or internet transmission system can be guaranteed completely secure.

12. International Data Transfers

Some of the technology and service providers used by our business may process information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that an appropriate lawful transfer mechanism applies where required.

This may include UK adequacy regulations or approved contractual safeguards.

You may contact us to request more information about the safeguards relevant to your personal information.

13. Marketing Communications

We may contact customers about products, services or offers where permitted by applicable data protection and electronic marketing laws.

Where consent is required, we will obtain it before sending marketing communications.

Marketing emails will provide a suitable way to unsubscribe or opt out.

You can request that we stop sending marketing communications by contacting hello@nashdf.co.uk.

We will continue to send necessary order-related communications where appropriate, even if you have opted out of marketing.

14. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

Access: Request a copy of personal information we hold about you.
Correction: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of your information in certain circumstances.
Restriction: Request that we limit how your information is used.
Data portability: Request transfer of certain information where applicable.
Withdrawal of consent: Withdraw consent where we rely on it.

Your right to object: You may object to processing based on legitimate interests in certain circumstances. You have the right to object to the use of your personal information for direct marketing at any time.

Some rights are subject to exceptions, including where we must retain records to comply with legal obligations.

To exercise your rights, email hello@nashdf.co.uk.

We may request reasonable information to verify your identity before responding.

We will respond within the time limits required by applicable data protection legislation.

15. Children’s Personal Information

Our website and services are primarily intended for adult customers.

Some personalised products may include children’s names, photographs or other information supplied by a parent, guardian or authorised customer.

We will use such information only for an appropriate and lawful purpose, including fulfilling the requested personalised product.

We do not knowingly use children’s personal information for independent marketing or profiling.

16. Third-Party Websites

Our website may include links to external websites, social media platforms or third-party services.

These websites operate independently and may have their own privacy policies.

NASH Digital Fabrication is not responsible for the privacy practices of unrelated third-party websites.

We recommend reviewing their privacy policies before submitting personal information.

17. Automated Decision-Making

We do not use solely automated decision-making that produces legal or similarly significant effects on customers.

If this changes, we will provide appropriate information and update this policy.

18. Your Right to Complain

If you have any concerns about how we collect or use your personal information, please contact us first so that we can investigate and respond.

Email: hello@nashdf.co.uk

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Information Commissioner’s Office

Website: https://ico.org.uk

Complaints: https://ico.org.uk/make-a-complaint/

Telephone: 0303 123 1113

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our website, business operations, services, technology or legal requirements.

When changes are made, the updated policy will be published on this page with a revised date.

Where legally required, we will provide additional notice before using personal information for materially different purposes.

20. Contact Information

For privacy enquiries, requests relating to personal information or questions about this policy, please contact:

NASH Digital Fabrication

Owner: Colin Nash

Location: Suffolk, United Kingdom

Website: https://nashdf.co.uk

Email: hello@nashdf.co.uk