Privacy Policy

This site is operated by PRINTEDBH, a 3D-printing studio based in Manama, Bahrain. We decide what personal information this site collects and why, which makes us the data controller for it.

Registered name: [To be confirmed: registered legal / trading name]
Commercial Registration (CR): [To be confirmed: Bahrain CR number]
Address: [To be confirmed: registered business address]
Email: printedbh@gmail.com
Phone / WhatsApp: +973 3308 7654

We only ask for what an order or a reply actually needs. Nothing below is collected “in case it’s useful later”.

When you place an order — your name, phone number, email address, WhatsApp number, and delivery address, plus any order notes you write. We need these to make the piece, tell you it’s coming, and deliver it. We also store the order itself: the items, options, quantities, prices, and its status.

When you request a custom build — your name, email address, phone number, your description of the piece, and any reference files you attach. We need these to quote the work and get back to you.

When you use the contact form — your name, email address, and message. These are sent straight to our inbox by email. The contact form does not save anything to our database.

When you create an account — your name, email address, and a password. A phone number is optional. Your password is never stored: we keep only a one-way hash of it, which cannot be turned back into your password.

When you configure a custom product — the text you type on a keychain, or the photo you upload for a lithophane, together with how you cropped it and the format and size you chose. A photo you upload is the input we manufacture from, so we keep it with the order. If a photo shows a person, please only upload it if you are happy for us to use it to make the piece.

Automatically, on every visit — our hosting provider records standard server request logs. Separately, to stop abuse of the login, signup, contact, and upload forms, we count recent requests per connection. We do not store your IP address for this: it is converted into an irreversible code before it reaches our database, and that code cannot be turned back into an address.

• ■No analytics or tracking. This site runs no analytics package, no tag manager, no advertising pixel, and no session-recording or heatmap tool.
• ■No profiling or ads. We don’t build a profile of you, and we don’t use your information for advertising anywhere.
• ■No selling or sharing. We never sell your personal information, and we never share it with anyone except the service providers in section 4, who work only on our instructions.
• ■No card details. Payment is a BenefitPay transfer you make yourself in your own banking app. We never see, ask for, or store your card or bank credentials.
• ■No third-party embeds. There are no embedded maps, videos, social widgets, or chat widgets on this site, so no third party is contacted just because you loaded a page.

We use a small number of service providers to run the site. They process your information only to provide their service to us:

• ■Our hosting and file storage provider — runs the website and stores any photos or reference files you upload.
• ■Our database provider — stores orders, accounts, and custom build requests.
• ■Our email provider — delivers order confirmations, password-reset emails, and messages you send us through the contact form.
• ■WhatsApp (Meta) — when we send you an order confirmation on WhatsApp, your phone number and order reference go through WhatsApp’s Business API to deliver it.

Some of these providers operate servers outside Bahrain, which means your information may be processed abroad. [To be confirmed: confirm each provider and the transfer basis you rely on with your adviser]

We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.

Orders and their delivery details are kept as business records, so we can handle a later question, a replacement, or an accounting or tax requirement. [To be confirmed: confirm the retention period your accounting and tax obligations require]

Custom build requests, and files or photos you upload are kept while we are quoting and producing the work, and afterwards as part of the order record. If you want an uploaded photo or file deleted once your piece is finished, ask us and we will delete it.

Account details are kept while your account is open. If you ask us to close it, we delete your account and its sign-in details. Orders you already placed are kept as business records, as above.

Contact form messages live in our email inbox and are kept there as normal correspondence.

Abuse-prevention counters hold only the irreversible code described in section 2, and are deleted automatically once their window passes.

Bahrain’s Personal Data Protection Law (Law No. 30 of 2018) gives you rights over your personal information. Whichever rights apply to you, in practice you can ask us to:

• ■tell you what personal information we hold about you, and give you a copy;
• ■correct anything that is wrong or out of date;
• ■delete your information, where we don’t have to keep it as a business record;
• ■stop using it for a particular purpose;
• ■close your account.

Email printedbh@gmail.com from the address on your order or account, or message us on WhatsApp, and tell us what you want done. We’ll ask enough to be sure it’s really you before we act — that check protects you, not us. If you are not satisfied with how we handle a request, you can complain to the relevant data protection authority.

Passwords are stored only as a one-way hash and never in a readable form. Sign-in sessions use cookies that JavaScript cannot read, and the site is served over an encrypted connection. Administrator accounts support two-factor authentication, and both sign-in and the public forms are rate-limited against automated abuse.

No system is perfectly secure, and we don’t claim otherwise. If a breach ever affected your information, we would tell you.

This site is intended for adults placing orders. We don’t knowingly collect information from children. If you believe a child has given us their information, tell us and we will delete it.

We use 4 items of browser storage, all of them necessary to keep you signed in and to remember your cart. There are no optional, analytics, or advertising cookies to consent to. Every item is listed individually on our Cookies & Storage page.

If we change how we handle personal information, we’ll update this page and change the “last updated” date at the top. Significant changes will be pointed out on the site rather than made quietly.

Email printedbh@gmail.com, message +973 3308 7654 on WhatsApp, or use the contact form. A person reads it.