Privacy Policy

Bustea (“we”, “us”, “our”) provides a service that turns your photographs into a custom 3D-printed portrait bust. For the purposes of UK data protection law, we are the “data controller” responsible for your personal data.

If you have any questions about this policy or how we use your data, you can contact us at [email protected].

We collect and process the following categories of personal data:

• Identity and contact details — your name, email address, phone number and delivery address.
• Order information — the details of your commission, size and finish choices, delivery instructions and order history.
• Photographs you upload — the images of the subject you provide so we can design and produce your bust. These may show identifiable individuals.
• Payment information — payments are processed by our secure payment provider (Stripe). We do not store your full card details on our systems.
• Technical data — limited information such as cookies and similar technologies needed to run the site securely (see our Cookies Notice).

We use your personal data only where the law allows us to. Our lawful bases are:

• To perform our contract with you — to accept and fulfil your order, design and produce your bust, arrange delivery, and keep you updated at each review stage.
• To comply with our legal obligations — for example, keeping records for tax and accounting.
• For our legitimate interests — to run and secure our website, prevent fraud, respond to enquiries, and improve our service, in a way that does not override your rights.
• With your consent — where we rely on consent (for example, non-essential cookies), you can withdraw it at any time.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects concerning you.

The photographs you upload are used solely to design, produce and quality-check your bust. By uploading images you confirm you have the right to do so and the consent of any identifiable person shown. We treat these images as part of your commission and do not use them for marketing without your separate, explicit consent.

We share personal data only with trusted third parties who help us deliver our service, and only as far as necessary. These include:

• our payment provider, to process your payment securely;
• our hosting and cloud storage providers, who store the website and your uploaded files on our behalf;
• delivery and postal partners, to send your finished bust; and
• professional advisers or authorities where we are required to do so by law.

These providers are required to keep your data secure and may only use it for the purposes we specify.

Some of our providers may process data outside the UK. Where they do, we take steps to ensure your data receives an equivalent level of protection, for example through UK-approved safeguards such as the International Data Transfer Agreement or adequacy regulations.

We keep your personal data only for as long as necessary. Order and transaction records are generally retained for up to six years to meet legal and accounting requirements. Photographs and production files are retained only as long as reasonably necessary to fulfil your order and handle any follow-up or remake, after which they are deleted or anonymised.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data in certain circumstances;
• restrict or object to our processing in certain circumstances;
• request a copy of certain data in a portable format; and
• withdraw consent where we rely on it.

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Payments are handled through a secure, PCI-compliant provider, and access to your data is limited to those who need it to fulfil your order.

Our website uses cookies and similar technologies. For full details of what we use and how to manage your preferences, please see our Cookies Notice.

We hope to resolve any concern you have about your data. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113.

We may update this policy from time to time. Any changes will be posted on this page with an updated “last updated” date. Please check back periodically.