Privacy policy.
What we collect, why, and your rights. We collect very little.
This policy explains which personal data we process when you visit 3denginuity.com, contact us, book a call or upload files, why we do it, and what rights you have. We keep it short because we collect very little.
1. Who is responsible
3DEnginuity, owner Bilal Naseem. Email: [email protected]. For any privacy question, write to this address.
2. Visiting the website
When you open a page, our hosting provider and our network provider automatically process technical data that every browser sends: IP address, date and time, the page requested, referring page, browser and operating system. This is necessary to deliver the website and to protect it against attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). These logs are kept only for a short period set by the providers.
Hosting: Hostinger (website and email hosting). Network and security: Cloudflare, which delivers the pages, protects the site from attacks and may set strictly necessary security cookies. Both providers process this data on our behalf under their data processing terms.
Fonts are loaded from our own server. Your browser does not connect to Google or other font services when you visit our pages.
No tracking. We do not use advertising cookies, tracking pixels or social media plugins. If we measure visitor numbers, we use Cloudflare Web Analytics, which works without cookies and does not identify individual visitors.
3. Contact form and email
When you use our contact form or write to us, we process the details you give us: name, company, email address, sector, the service you are interested in, deadline, budget range, CAD format and your message. We use them only to answer your enquiry, prepare a quotation and, if you hire us, carry out the project. Legal basis: steps prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR). The form contains a hidden field to block spam robots; no other checks are made on you.
4. Booking a call
If you book a call through our booking page, we receive the name, email address and time you enter, and any note you add, and use them only to arrange and hold the call (Art. 6(1)(b) GDPR).
5. Uploading CAD files
Our upload page is protected by a project PIN. When you upload, we store the files, your name, email address and company, and a log entry with the date, file name, size and the IP address used. The files are stored in a non-public folder on our hosting, access is limited to the people working on your project, and they are handled under the non-disclosure agreement between us. We use them only to deliver the agreed work (Art. 6(1)(b) GDPR) and delete them on your written request or as agreed at the end of the project.
6. Who receives data
Only our hosting and network providers named above, acting on our instructions, and the members of our team working on your enquiry or project. We do not sell personal data or share it for advertising.
7. Processing outside the EU
Our providers may process data outside the European Economic Area, for example in the United States, under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Our studio team works remotely, partly outside the European Economic Area. Where your enquiry or project data is accessed from there, this is necessary to answer you and to carry out the contract you requested (Art. 49(1)(b) GDPR), and it remains protected by our NDA and access restrictions.
8. How long we keep data
Enquiries that do not lead to a project are deleted within 24 months. Project and invoicing records are kept as long as tax and commercial law requires. CAD files are deleted on request or at the end of the project as agreed.
9. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interests. To use these rights, email us at the address above. You also have the right to complain to a data protection supervisory authority, for example the one in your country of residence.
10. Changes
We update this policy when our services or the law change. The current version always applies.
Last updated 31 October 2026