The purpose of this privacy notice is designed to notify you of how you can expect Yetser to use your personal data when you contact us or if you have placed an order via our website, www.yetserterrain.co.uk, in the past.
If you are looking for information about the cookies our website uses, please refer to our Cookie Policy.
This privacy notice has been written in a way that we hope is clear and easy to understand. However, in order to keep it concise we might refer to terms or situations which are not immediately obvious to you. If you come across anything that you would like to have explained, please do contact us by emailing connect@yetser.co.uk and we will do our best to provide further clarification.
Yetser highly values your right to privacy. As such we will only use the personal data that you entrust us with for the purpose which it was given to us. We adhere to the current UK data protection legislation, including the Data Protection Act 2018, the UK GDPR, and Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).
Yetser is registered with the information Commissioners Office (ICO) under the number: ZA844546
This privacy notice covers the following points:
- What personal data is
- What personal data we collect
- The purposes of processing your personal data
- The legal basis for processing your personal data
- How we store your personal data
- Who we share your personal data with and why
- How long your personal data is retained
- Your rights around the use of your personal data
- How to contact the authority if you have concerns
Personal data is defined by the Data Protection Act 2018 and UK GDPR (collectively, “the Data Protection Legislation”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’. Personal data is, in simpler terms, any information with which you can be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
What personal data we need to collect from you depends a lot on the type of interaction you have with us. For example, if you sign up to receive our newsletter, we would need less of your personal data than if you placed an order. The following table will show how we collect the different types of information we use.
Data collected |
How it is collected |
Identity information including name and title |
Through our website, either in a form or during the Account creation or ordering process |
Contact information including address, email address and telephone number |
Through our website, either in a form or during the Account creation or ordering process |
Business information including business name and job title |
Via the Terms & Conditions for becoming a Yetser Terrain Authorised Printer |
Profile information including mailing preferences, purchase history, Patreon Tier membership and download history |
Through our website, either from the Account area or the ordering process, and from Patreon |
As might reasonably be expected, the UK Data Protection Act 2018 and GDPR both state that personal data can only be collected and used if there is a legal reason for doing so.
The below table will hopefully help show you which legal basis we are relying upon when using your personal data.
What is done with the data |
Which data is used |
The Legal Basis being relied upon |
Legitimate Interests |
Administering our business |
Identity information, Contact information, Profile information, Business information |
Fulfilment of Contract and Legal obligation |
N/A |
Supplying our products and services |
Identity information, Contact information, Profile information, Business information |
Fulfilment of Contract |
N/A |
Communicating with you |
Identity information, Contact information, Profile information, Business information |
Fulfilment of Contract |
N/A |
Supplying you with information by email that you have opted-in to |
Identity information, Contact information, Profile information |
Explicit Consent |
N/A |
We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose. If we do use your personal data in this way and you wish us to explain how the new purpose is compatible with the original, please contact us using the details found at the end of this notice.
If we need to use your personal data for a purpose that is unrelated to, or incompatible with, the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.
In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.
Electronic records, such as your contact details, are stored in a number of different systems. As far as is reasonably practical, these systems have been carefully selected on grounds of the security they enforce. All systems are set up with unique username and strong password combinations and utilise access controls to restrict unauthorised access.
Yetser may transfer your data outside of the UK and/or EEA in cases where the service providers, such as our Website hosting company, have their data centres in locations outside of these territories. As far as is reasonable practical, the service providers have been carefully selected to ensure that they are meeting the data protection requirements of the UK’s Data Protection Legislation.
We do our best to ensure that your personal data is kept safe and secure. However, there are instances when your personal data may need to be shared with selected third parties to facilitate the operation of our business. Below is a list of third parties that you can expect your personal data to be shared with, and in what situation.
In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
Recipient of data |
Reason for sharing data |
Type of data shared |
Email provider |
To facilitate communication with you |
Identity, Contact, Profile and Business information |
Website provider |
To operate our website and the associated services |
Identity, Contact, Profile and Business information |
Accountant & HMRC |
Legal financial obligations, e.g. declaration of income sources and tax calculations |
Identity and Contact information |
We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):
What data |
Retention period |
Identity information including name and title |
If you have created an account, we will hold this information until you close your account with us or for 7 financial years to meet any legal obligations we may have, whichever is longer. |
Contact information including address, email address and telephone number |
If you have created an account, we will hold this information until you close your account with us or for 7 financial years to meet any legal obligations we may have, whichever is longer. |
Business information including business name and job title |
If you have created an account, we will hold this information until you close your account with us or for 7 financial years to meet any legal obligations we may have, whichever is longer. |
Profile information: Purchase history |
If you have created an account, we will hold this information until you close your account with us or for 7 financial years to meet any legal obligations we may have, whichever is longer. |
Technical information: IP address |
For as long as an order exists or for 7 financial years to meet any legal obligations we may have, whichever is longer. |
Technical information: Browser version, Operating System and version |
Until any technical queries have been addressed. |
Your personal data belongs to you. As a customer of Yetser you entrust your personal data to us, so that we can provide you with our products and services, but you retain certain rights over your data and how it is used.
Below are a list of your rights and how you can exercise them. Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.
The right to be informed
In a nutshell, this is your right to know how and why your data is being collected and used by Yetser. We hope that this Privacy Notice provides you with that information. Should anything be unclear though, please do not hesitate to contact us by email on connect@yetser.co.uk.
The right of access
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to the email or postal addresses shown at the bottom of this policy. To make this as easy as possible for you, a Subject Access Request Form is available for you to use. You do not have to use this form, but it is the easiest way to tell us everything we need to know to respond to your request as quickly as possible.
There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within 30 days of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress. Please note, while it may sound contradictory, to properly protect your privacy, we may be required to request additional personal data to verify your identity before providing the personal data to you if you email us with a data subject access request. This is in an effort to stop other people claiming to be you from getting access to your personal data.
The right to rectification
You have the right to ensure that any personal data that you have provided Yetser with is correct. As such, if your contact details change, you can update your information through your account on our website, assuming you have created one. Otherwise, please do email connect@yetser.co.uk with any information that needs to be corrected and we will update our records as quickly as possible.
Please note, there may be circumstances when we are not required to follow up on you exercising your right for rectification. Full details about this right can be found here:
ico.org.uk/your-data-matters/your-right-to-get-your-data-corrected
The right to erasure
This right allows you to ask Yetser to delete the personal data we hold on you. However, there are certain instances when we would not be able to honour your request, including those were we are under legal obligations to retain the data, for instance the HMRC requirement for our financial records to be held for 7 financial years.
Also, please note, should you wish to keep your account and continue to download any .STL files from our website, we would not be able to delete the personal data that we hold on you, as this is required by us to fulfil our side of the contract with you.
The right to restrict processing
Related to your right to erasure, you have a right to restricting how we use the personal data that you have provided us with. This right is closely linked to your right to erasure, and also has some restrictions as to when it can be exercised.
If you would like more information about this right, you can find some here:
ico.org.uk/your-data-matters/your-right-to-limit-how-organisations-use-your-data
The right to data portability
As the products we sell belong exclusively to us, we are unable to extend the right to portability to any use of our services.
The right to object
Another right that is similar to both the ‘right to erasure’ and the ‘right to restrict processing’ is your right to ask us to stop using your data at any time.
This again does only apply in certain circumstances, so please do contact us at connect@yetser.co.uk to discuss this exercising right. Also, you can find additional information here:
ico.org.uk/your-data-matters/the-right-to-object-to-the-use-of-your-data
Rights in relation to automated decision making and profiling
We do not utilise any automated decision making or profiling processes.
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection. Any such changes will become binding on you upon your first use of Our Site after the changes have been implemented. You are therefore advised to check this page from time to time.
In the event of any conflict between the current version of this Privacy Notice and any previous version(s), the provisions current and in effect shall prevail unless it is expressly stated otherwise.
This Privacy Notice was last updated on the date stated at the top of the notice.
If you have any concerns around the use of your personal data, we would prefer it is you would address these with us first. You can contact us by email at connect@yetser.co.uk.
However, if you do not feel that we are providing you with a satisfactory response, you are also entitled to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
You can contact the ICO via their website: ico.org.uk
