Your privacy.
Our responsibility.
At 3D Digital Ltd, trading as dragosdanaila.co.uk, we believe your personal information deserves clarity, care and respect. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or use our digital services.
Who we are
This website is operated by 3D Digital Ltd, trading as dragosdanaila.co.uk, a United Kingdom-based digital services business.
We specialise in website design and development, web hosting, professional email solutions, software development, website maintenance and digital services for businesses.
For personal information collected through our own website, customer enquiries, billing and direct client relationships, 3D Digital Ltd generally acts as the data controller.
When providing hosting, email or other managed services on behalf of clients, we may act as a data processor under their instructions.
Information we collect
Depending on how you interact with our website, contact us or use our services, we may collect and process the following categories of personal information.
Personal & Contact Information
Information you voluntarily provide when contacting us, requesting a quotation or purchasing our services.
- Full name
- Email address
- Telephone number
- Business name
- Enquiry or project details
Billing & Payment Information
Information required to manage customer purchases, invoices, subscriptions and recurring payments.
- Billing name and address
- Invoice and transaction records
- Subscription information
- Payment status and references
- Direct Debit mandate references
Website & Technical Information
Technical information that may be recorded automatically when you access our website or online services.
- IP address
- Browser and device information
- Access dates and times
- Server and security logs
- Technical error information
Hosting & Email Services
Where we provide website hosting, managed email or related services, we may process information necessary to deliver, maintain and support those services.
- Customer account details
- Domain and service settings
- Technical support information
- Service usage and access logs
- Client-hosted data where authorised
Communications & Support
We may retain information from communications with customers and prospective customers in order to respond to enquiries and provide ongoing support.
- Contact form submissions
- Email correspondence
- Customer support requests
- Project discussions
- Service-related communications
Cookies & Website Analytics
Depending on the technologies enabled on our website and your cookie preferences, we may collect information relating to your use of our website.
- Cookie preferences
- Pages visited
- Referral information
- Website interaction data
- Performance and diagnostic data
Our approach to data collection: We aim to collect only the personal information reasonably necessary to provide our services, respond to enquiries, manage customer accounts, maintain security and comply with applicable legal obligations. The information collected depends on the services you use.
How we use your information
We use personal information for clearly defined purposes connected with delivering our services, managing customer relationships, maintaining security and meeting our legal responsibilities. Each processing activity must have an appropriate lawful basis under UK data protection law.
Providing Our Services
To create, manage and deliver website development, hosting, business email, software development, maintenance and other services you request. This includes setting up customer accounts, managing projects and administering subscriptions.
Customer Communication
To respond to enquiries, prepare quotations, discuss projects, provide technical support and communicate important information about services you use or have requested.
Payments & Invoicing
To manage billing, generate invoices, process payments and subscriptions, administer Direct Debit arrangements, verify transaction status and maintain required financial records.
Security & Fraud Prevention
To protect our website, servers, email systems and customers from unauthorised access, misuse, technical threats and fraudulent activity. This may include monitoring security logs and investigating suspicious events.
Legal & Regulatory Compliance
To comply with applicable laws and regulatory requirements, including accounting, tax, record-keeping and data protection obligations, and to respond to lawful requests from authorised bodies where required.
Marketing & Service Updates
To provide information about relevant services, new features and offers, where permitted by applicable law. Promotional electronic communications are subject to the relevant consent and electronic marketing requirements. You may opt out of marketing communications.
Our legal basis for processing
Contract: Where processing is necessary to provide a service under a contract with you, or to take steps you have requested before entering into a contract.
Legitimate Interests: Where necessary for our legitimate business interests, such as securing our systems and managing appropriate business communications, provided those interests are not overridden by your rights and freedoms.
Legal Obligation: Where we must process information to comply with applicable legal requirements.
Consent: Where we rely on your freely given, specific and informed consent for a particular purpose. You may withdraw that consent at any time without affecting processing carried out before withdrawal.
Payments, Subscriptions
& Direct Debit
3D Digital Ltd uses Stripe to facilitate payments for our digital services, including website development, hosting, professional email, maintenance, subscriptions and additional services.
The personal information processed depends on the payment method selected and the services purchased.
Card & Digital Wallet Payments
Payments may be made using supported credit or debit cards and digital wallets made available through Stripe.
- Payment amount and currency
- Transaction date and status
- Payment method type
- Billing contact information
- Transaction references
Recurring Subscriptions
Where you subscribe to an ongoing service, we process information necessary to administer your subscription and recurring billing.
- Subscription plan and price
- Billing frequency
- Renewal and payment dates
- Payment status and history
- Subscription changes or cancellation
Bacs Direct Debit
If you choose Bacs Direct Debit, your bank account and mandate details are processed through Stripe and the relevant banking arrangements to authorise and manage collections.
- Account holder information
- Bank account details
- Mandate information and references
- Collection dates and amounts
- Payment status and notifications
Billing & Financial Records
We maintain appropriate billing and transaction records to manage our business, support customers and meet applicable financial and legal obligations.
- Customer and business details
- Invoices and payment receipts
- Payment and refund records
- Outstanding balances
- Relevant accounting records
Secure Payment Processing
Stripe provides the payment infrastructure used to process transactions on our behalf. Depending on the payment method, payment information may be collected directly through Stripe-hosted or Stripe-integrated payment interfaces.
We use billing information, payment statuses and transaction references made available to us to administer purchases, subscriptions, refunds and customer accounts.
Stripe also processes personal data for its own purposes, including applicable fraud prevention, security and regulatory compliance. For further information, please review Stripe's Privacy Policy .
If you have questions about a payment, subscription or related personal data, please contact contact@dragosdanaila.co.uk .
Hosting, Email &
Third-Party Services
To operate our website and deliver digital services, 3D Digital Ltd uses selected infrastructure, software and service providers. These may process personal information where necessary for the delivery, administration or security of our services.
Cloud Hosting & Servers
We use Hetzner cloud infrastructure to host websites, applications and related digital services.
Depending on the services provided, hosted information may include:
- Website files and databases
- Customer account information
- Technical and security logs
- Application and service data
- Stored website content
Business Email Services
We operate managed business email services using our email server infrastructure and associated software.
Information processed may include:
- Email addresses and account details
- Email content and attachments
- Delivery and diagnostic records
- Mailbox configuration information
- Security and authentication logs
Where we host email for clients, we may process this information on their behalf and under their documented instructions.
WordPress & Website Tools
Our website uses WordPress and supporting software, including Elementor and Gravity Forms, for website functionality and customer enquiries.
Form submissions may be stored within the website database and sent to authorised business email accounts.
Additional services or integrations may process information depending on their configuration and use.
Payments & Billing Providers
We use Stripe for payment processing, recurring subscriptions, invoices and supported Direct Debit services.
Relevant payment and billing information is processed according to the transaction and applicable payment arrangements.
Further information is provided in the Payments, Subscriptions & Direct Debit section above.
Communication & Support Tools
We use business communication systems to respond to enquiries, manage customer relationships and provide technical support.
Personal information may be processed by relevant communication providers where necessary to deliver messages or support requests.
Other Service Providers
Where necessary, we may share relevant personal information with professional advisers, accounting providers, authorised contractors or other service providers supporting our operations.
We limit disclosure to information appropriate for the relevant purpose and applicable legal or contractual requirements.
International Data Processing & Transfers
Our hosting infrastructure may store and process data in the European Economic Area, including Germany. Other service providers may process personal data in additional countries depending on their services and configurations.
Where an international transfer is subject to UK GDPR transfer restrictions, we assess the applicable legal transfer mechanism. This may include UK adequacy regulations or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or an applicable UK Addendum.
Where required, we also assess transfer risks and implement appropriate technical and organisational protections.
You may contact us at contact@dragosdanaila.co.uk to request further information about relevant processing locations and applicable transfer safeguards.
Data Security & Retention
At 3D Digital Ltd, we recognise the importance of protecting personal information against unauthorised access, accidental loss, alteration and disclosure.
We take a risk-based approach to implementing appropriate technical and organisational security measures, considering the nature of the data and the risks associated with its processing.
Secure Connections
Our website uses HTTPS encryption to help protect information transmitted between your browser and our website. Encryption during transmission does not eliminate every security risk.
Server & Infrastructure Security
We use hosting infrastructure and administrative security controls to help protect our websites, applications and managed services. Appropriate safeguards may include access restrictions, software updates and security monitoring.
Access Management
We aim to restrict access to personal information to authorised individuals who require it for legitimate business or technical purposes. Access permissions should be reviewed and adjusted when responsibilities change.
Backup & Recovery
Where backup and recovery arrangements are implemented, they help support service continuity and recovery following technical incidents. Backup copies may remain subject to separate, documented retention schedules.
How long do we keep your data?
We retain personal information only for as long as necessary for the purposes for which it was collected, taking into account contractual responsibilities, legal requirements, dispute resolution and relevant business needs.
| Data category | Retention approach | Reason |
|---|---|---|
| Contact enquiries | For the time necessary to respond and manage relevant follow-up. | Enquiry handling and business correspondence. |
| Customer & service records | During the customer relationship and for any justified period afterwards. | Service administration, contractual obligations and potential disputes. |
| Invoices & accounting records | In accordance with applicable statutory record-keeping periods. | Tax, accounting and company law requirements. |
| Hosting & email data | According to the service agreement and applicable deletion or retention instructions. | Delivery and administration of managed services. |
| Technical & security logs | For a proportionate period based on security and operational needs. | Troubleshooting, monitoring and protection against misuse. |
| Backup copies | According to configured backup cycles and recovery requirements. | Service restoration and operational resilience. |
Data Deletion & Security Requests
When personal information is no longer required for a legitimate purpose, we aim to securely delete or anonymise it, subject to applicable legal and contractual obligations.
Certain records may need to be retained for legal compliance or the establishment, exercise or defence of legal claims. Requests for deletion are assessed in accordance with applicable data protection law.
Where information is processed by us on behalf of another organisation, relevant deletion requests may need to be directed to the organisation acting as data controller.
For questions about data retention or security, contact contact@dragosdanaila.co.uk .
Your Privacy Rights
Under UK data protection legislation, you have a number of rights relating to your personal information. These rights may depend on the circumstances and the lawful basis for processing your data.
3D Digital Ltd is committed to respecting applicable data protection rights and handling requests in accordance with the law.
Right of Access
You can request confirmation that we process your personal information and obtain a copy of relevant information, subject to applicable exemptions.
Right to Rectification
You can ask us to correct inaccurate personal information or complete information that is incomplete.
Right to Erasure
You may request deletion of your personal information in certain circumstances. We may need to retain some information where required or permitted by law.
Right to Restriction
You may ask us to restrict the processing of your personal information in certain circumstances, such as while its accuracy is being assessed.
Right to Object
You may object to processing based on legitimate interests in applicable circumstances. You also have the right to object to processing for direct marketing.
Right to Data Portability
Where applicable, you can request eligible personal information in a structured, commonly used and machine-readable format.
Withdraw Your Consent
Where processing relies on your consent, you may withdraw it at any time. Withdrawal does not affect processing carried out lawfully before withdrawal.
Automated Decision-Making
Where applicable, you may exercise rights and safeguards relating to decisions made solely through automated processing that have legal or similarly significant effects on you.
How to Exercise Your Rights
If you would like to exercise any of your data protection rights, please contact us using the details below. You may also make requests verbally where permitted by applicable law.
contact@dragosdanaila.co.ukPlease describe your request clearly and provide enough information to help us identify the relevant records. We may request reasonable additional information to verify your identity where necessary.
We aim to respond without undue delay and within the applicable statutory timeframe, normally one month. Where legally permitted, this period may be extended for complex or multiple requests, and we will explain the extension.
Complaints & the ICO
If you are concerned about how we handle your personal information, please contact us so that we have an opportunity to investigate and address your concerns.
You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner's Office (ICO).
Visit ico.org.uk/make-a-complaint/ for information about submitting a complaint.
Important Information
Data protection rights are not absolute. Certain requests may be subject to exemptions or conditions under applicable legislation.
In most cases, exercising your rights is free of charge. We will explain any lawful refusal or fee where applicable.
If we process personal information on behalf of another organisation, such as a customer using our hosting or email services, we may need to refer your request to the relevant data controller.
Questions about
your privacy?
We believe transparency and trust are essential to every customer relationship.
If you have questions about this Privacy Policy, how we handle your personal information or your rights under data protection law, please contact us.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technologies, data processing activities or applicable legislation.
When changes are made, the revised version will be published on this page and the last updated date will be amended.
Where legally required, we will provide additional notice or obtain consent before making relevant changes to how personal information is processed.
Privacy Enquiries
For questions, concerns or requests relating to your personal data, please contact our team.
contact@dragosdanaila.co.uk