Privacy Policy
Last updated: June 9, 2026
3xD Design ("3xD Design," "we," "us," or "our") operates the website at https://3xd.design (the "Website"). We value your privacy and want you to understand what information we collect, why we collect it, and the choices you have.
This Privacy Policy explains how we handle information when you visit the Website or get in touch with us. By accessing or using the Website, you agree to the practices described here. If you do not agree, please do not use the Website.
This policy is written with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) as our home framework. Because the Website is available worldwide, it also includes specific sections for visitors in the European Union and United Kingdom (under the GDPR) and California (under the CCPA/CPRA).
Information we collect
We keep data collection to a minimum. We do not require you to create an account, and we do not sell your information.
Information you give us through the contact form. When you reach out using our contact form, we collect:
- Your name
- Your email address
- The type of inquiry you select (for example, general inquiry, request a quote, or free website audit)
- Your message
- Your website URL — optional, and required only if you request a free website audit so that we can analyze the site you'd like reviewed
Information collected automatically. To keep the contact form working reliably and to protect it from spam and abuse, we briefly process your IP address for rate limiting. This is held only for a short window (about 10 minutes) and then automatically discarded. We do not use it to build a profile of you.
Usage and performance data. We use privacy-friendly, aggregate analytics to understand how the Website performs and how visitors use it in general terms (see Cookies and local storage below). This data is aggregated and is not used to identify you.
We do not collect payment information through the Website, and we do not knowingly collect sensitive personal information.
How we use your information
We use the information described above to:
- Respond to your inquiry and communicate with you about your request or a potential project
- Deliver the free website audit you requested, including analyzing your website's performance and emailing you the results
- Protect the Website from spam, bots, and abuse, and keep it secure and reliable
- Understand and improve how the Website performs and how it's used, in aggregate
We do not use your information for advertising, and we do not sell or rent it to anyone.
Legal bases for processing (EU/UK visitors)
If you are in the European Union or the United Kingdom, we rely on the following legal bases under the GDPR:
- Your consent and steps taken at your request before entering into a contract — when you submit the contact form or request a free audit, so we can respond and provide what you asked for
- Our legitimate interests — to keep the Website secure, prevent abuse, and understand how the Website is used in aggregate, balanced against your rights and freedoms
You may withdraw consent at any time (see Your privacy rights).
Service providers
We work with a small number of trusted third parties that process information on our behalf so the Website can function. Each receives only what it needs for its specific purpose:
- Resend — delivers the emails generated by the contact form (our notification, your confirmation, and, if requested, your audit report). It processes the details you submit through the form. See Resend's privacy policy.
- Cloudflare Turnstile — protects the contact form from bots and spam by verifying that submissions come from a real person. It processes a verification token and related signals. See Cloudflare's privacy policy.
- Upstash — provides the rate-limiting service that protects the form from abuse. It briefly stores rate-limit keys derived from your email and IP address, which expire automatically after about 10 minutes. See Upstash's privacy policy.
- Google PageSpeed Insights — used only when you request a free website audit. The website URL you provide is sent to Google to generate a performance analysis. See Google's privacy policy.
- validator.pizza — checks submitted email addresses against known disposable-email providers to reduce spam. Your email address is sent for this check. See validator.pizza.
- Vercel — hosts the Website and provides privacy-friendly, cookieless analytics and performance monitoring. See Vercel's privacy policy.
- Google Search Console — we use a site-verification meta tag to confirm ownership of the Website with Google. This does not collect personal information from you.
These providers are bound by their own privacy and security commitments and are permitted to use the information only to provide their services to us.
International data transfers
3xD Design is based in Canada. Some of the service providers listed above process data in the United States and other countries. This means your information may be transferred to, stored, or processed outside your country of residence, where data protection laws may differ from your own. Where required, our providers use recognized safeguards (such as standard contractual clauses) for these transfers.
Cookies and local storage
We do not use advertising or cross-site tracking cookies.
- Theme preference. If you switch between light and dark mode, your choice is saved in your browser's local storage. This is stored only on your device, is not personal information, and is not sent to us.
- Analytics. Our analytics (provided by Vercel) are designed to be cookieless and collect aggregate, anonymized usage and performance data rather than identifying individual visitors.
Most browsers let you clear local storage and manage cookies through their settings.
Data retention
- Contact and audit correspondence is kept for as long as needed to respond to your inquiry and for a reasonable follow-up period afterward, unless you ask us to delete it sooner.
- Rate-limiting data expires automatically after about 10 minutes.
- Analytics data is aggregate and retained per our analytics provider's standard practices.
When information is no longer needed for these purposes, we delete it or anonymize it.
Your privacy rights
Depending on where you live, you have rights over your personal information. We honor these rights regardless of where you are located.
Everyone. You can ask us to access, correct, or delete the personal information you've provided through the Website. To make a request, contact us at contact@3xd.design.
Canada (PIPEDA). You have the right to access the personal information we hold about you and to request corrections. If you have a concern we cannot resolve, you may contact the Office of the Privacy Commissioner of Canada.
EU/UK (GDPR). You have the right to access, rectify, erase, restrict, or object to the processing of your personal information; the right to data portability; and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority.
California (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information. We will not discriminate against you for exercising your rights.
We will respond to verified requests within the timeframes required by applicable law.
Data security
We take reasonable technical and organizational measures to protect the information we handle, including limiting collection, restricting access, and working with reputable service providers. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
Children's privacy
The Website is intended for a general, professional audience and is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us and we will delete it.
Third-party links
The Website may contain links to websites operated by others. We provide these links for convenience only. We do not control those websites and are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any website you visit.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date at the top of this page. Significant changes may be highlighted on the Website. Your continued use of the Website after an update means you accept the revised policy.
Contact us
If you have any questions about this Privacy Policy or would like to exercise your privacy rights, please contact us at contact@3xd.design