Our commitment to data protection
3DNovations takes the privacy and security of personal information seriously.
We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018.
This page explains how we approach the collection, use and protection of personal information relating to visitors to our website, clients, project partners, research collaborators, learners and other people who contact or work with us.
Who we are
3DNovations Limited is a technology and research company registered in Scotland.
For data protection purposes, 3DNovations may act as a data controller when we determine why and how personal information is used. In some projects we may instead process information on behalf of another organisation, in which case that organisation may be the data controller.
If you have a question about how we use your personal information, or wish to exercise a data protection right, please contact us using the address above.
Information we may collect
The information we process depends on your relationship with us and may include:
- your name and contact details
- organisation and job title
- correspondence and enquiries
- information supplied when expressing an interest in a project, service or collaboration
- information required to administer contracts, projects or funded programmes
- training and learning records where you participate in one of our programmes
- technical information generated when you use our websites or digital services
- information required for financial, legal or regulatory purposes
Some research, accessibility or training projects may involve information relating to health, disability, neurodivergence or other special category information.
Where this occurs, we identify an appropriate legal basis and additional condition for processing and provide participants with appropriate information about how their data will be used.
Why we use personal information
We may use personal information to:
- respond to enquiries and communicate with you
- provide our products, services and training
- manage contracts and business relationships
- administer funded research and innovation projects
- work with project and consortium partners
- manage applications, participation and learner records
- evaluate and report on project activity and outcomes
- improve our websites, platforms and services
- maintain the security of our systems
- meet financial, contractual, regulatory and legal obligations
- maintain appropriate business and project records
We will not use personal information for an unrelated purpose without considering whether that use is lawful and whether further information should be provided to you.
Our lawful bases
Depending on the circumstances, we may process personal information because:
Contract: processing is necessary to enter into or perform a contract with you.
Legal obligation: we need to process information to comply with a legal requirement.
Legitimate interests: processing is necessary for a legitimate business, research, administrative or security purpose and those interests are not overridden by your rights and interests.
Consent: you have given us permission to use your information for a particular purpose.
Different lawful bases may apply to different activities.
Where we rely on consent, you can withdraw that consent at any time.
Research and funded projects
3DNovations participates in research, innovation, education and publicly funded projects with other organisations.
These projects may involve universities, public bodies, charities, businesses, funders and community organisations.
Where personal information is collected as part of a particular research or funded project, participants may receive additional project specific privacy information explaining:
- what information will be collected
- why it is required
- which organisations are involved
- the respective responsibilities of project partners
- how long the information will be retained
- whether information will be anonymised or aggregated
- who information may be shared with
Where possible, published research and project reporting uses anonymised or aggregated information rather than information identifying individual participants.
Sharing personal information
We do not sell personal information.
Where necessary, information may be shared with organisations that help us operate our business or deliver a particular project.
These may include:
- project and research partners
- funders and programme administrators
- IT, website and hosting providers
- email and communications providers
- professional advisers
- payment and accounting providers
- learning platform and digital service providers
- public authorities where disclosure is legally required
Where another organisation processes personal information on our behalf, appropriate contractual and data protection arrangements are used.
International data transfers
Some technology or service providers may process personal information outside the United Kingdom.
Where UK data protection rules governing international transfers apply, we take appropriate steps to ensure that a lawful transfer mechanism and suitable safeguards are in place.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
Retention periods depend on the type of information and may be influenced by contractual requirements, funder requirements, research requirements, financial record keeping obligations, legal requirements and the need to establish or defend legal claims.
Information that is no longer required is securely deleted, destroyed or anonymised where appropriate.
Security
We use appropriate organisational and technical measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
Access to personal information is limited according to operational requirements and the nature of the project or service involved.
No internet connected system can be guaranteed to be completely secure, but we regularly consider security as part of the design and operation of our digital services.
Your rights
Depending on the circumstances and the lawful basis being used, UK data protection law may give you rights including:
- access to personal information we hold about you
- correction of inaccurate or incomplete information
- deletion of personal information in certain circumstances
- restriction of processing in certain circumstances
- objection to certain types of processing
- data portability in certain circumstances
- withdrawal of consent where processing is based on consent
Some of these rights are subject to legal conditions and exemptions.
To exercise a right, contact .
We may need to confirm your identity before responding to a request.
Direct marketing
You have the right to object to the use of your personal information for direct marketing.
Where electronic marketing requires consent, we will seek that consent and provide a way for you to withdraw it.
You can also contact us at if you no longer wish to receive marketing communications.
Cookies and website data
Our website may use cookies and similar technologies necessary for its operation and security.
Where cookies or similar technologies are not strictly necessary, appropriate information and controls should be provided before they are used.
Further information about the cookies used on this website can be found in our Cookie Policy.
Links to other websites
Our website may contain links to websites operated by other organisations.
We are not responsible for how those organisations process personal information. You should review their privacy information when visiting an external website.
Changes to this page
We may update this page where our services, projects or legal obligations change.
The latest version will always be published on this website.
Last updated: August 2026
Complaints
If you have concerns about how 3DNovations has used your personal information, please contact us first so that we can investigate.
You also have the right to raise a concern with the Information Commissioner’s Office, the UK’s independent data protection regulator.
Further information is available from the Information Commissioner’s Office at ico.org.uk.