Privacy Policy

For the purposes of UK data protection law, the data controller for layerworks.net is Layerworks. Contact us about anything in this policy at orders@layerworks.net.

Account details: your name, email address, and password (stored as a one-way hash: we never see or store your actual password).

Order details: delivery address, order history, and messages exchanged with makers.

Payment details: handled entirely by Stripe. Your card number never touches our servers.

Technical data: anonymised visitor and performance analytics (Vercel Web Analytics and Speed Insights) and a bot-check signal (Cloudflare Turnstile) when you sign up.

To create and run your account, process and fulfil orders, take payment, send you transactional email about your orders (confirmations, delivery updates, password resets), respond to support requests, and keep the platform secure (rate limiting, bot protection, fraud prevention).

We rely on performing our contract with you (running your orders and account), our legitimate interest in keeping the platform secure and working properly, and, where relevant, your consent (for example, choosing to sign in with Google).

We share the minimum necessary data with the processors that make the platform work: Stripe (payment processing and payouts to makers), Resend (sending transactional email), Cloudflare (file storage for listing photos/models via R2, and bot protection via Turnstile), Vercel (hosting), and Google (only if you choose to sign in with Google). We don't sell your data to anyone.

Some of these providers may process data outside the UK. Where that happens, we rely on the provider's standard contractual clauses or equivalent safeguards recognised under UK data protection law.

We use a session cookie to keep you signed in, and (where used) a Turnstile cookie to distinguish humans from bots on signup. These are necessary for the site to function and aren't used for advertising.

We keep account and order data for as long as your account is active and for a reasonable period afterwards to meet our legal and accounting obligations (for example, tax records). You can ask us to delete your account at any time. See your rights below.

Under UK GDPR you have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to complain to the Information Commissioner's Office (ico.org.uk) if you think we've got something wrong. Contact orders@layerworks.net to exercise any of these.

We may update this policy from time to time; the version in force is always the one published here, dated at the top of this page.